To prevent Denial of Service (DoS) attack on the servers using large stream of packets containing IP options (for IPv4 packets) or Routing Header (type 0) (for IPv6 packets), they must be dropped. These packets are processed by default. This section describes how to disable this packet processing and prevent this type of attack.
To configure dropping of packets with IP options (IPv4 packets) or Routing Header (IPv6 packets), do the following.
SLX # config terminal SLX (config)#
For dropping IPv4 packets, execute
SLX (config)# ip option disable
For dropping IPv6 packets, execute
SLX (config)# ipv6 option disable
Packets containing IP options (IPv4 packets) or Routing Header of type 0 (IPv6 packets) are dropped.