Disable IP Option

You can disable IP options. The ip option disable command blocks packets that have IP options. The ip option disable-cpu command configures dropping of packets with the destination as the device's CPU (Control Plane Processing Unit).

About this task

Follow this procedure to disable or enable processing of IP (IPv4 and IPv6) packets with IP options.

You can configure IPv4 and IPv6 options on a device.

SLX 9540 and SLX 9640 do not support ip option disable-cpu.
SLX 20.3.4 supports ip option disable and ipv6 option disable.
SLX 20.4.2 supports ip option disable-cpu.

Note

For information about commands and supported parameters to enable or disable IPv4 and IPv6 options, see ExtremeCloud Orchestrator Command Reference, 3.5.0 .

Procedure

Run the following command to update IPv4 and IPv6 options:

efa inventory device setting update --ip <device ips> --ip-option-disable { Yes | No } --ip-option-disable-cpu  { Yes | No } --ipv6-option-disable { Yes | No }

Example

The following example disables IP option processing and IPv6 option processing while allowing IP option processing destined to the CPU.

$ efa inventory device setting update --ip 10.10.10.1 --ip-option-disable yes --ip-option-disable-cpu no --ipv6-option-disable yes 
+-------------+-----------------------+---------+-------+-------+ 
| IP ADDRESS  |         NAME          | STATUS  | VALUE | ERROR | 
+-------------+-----------------------+---------+-------+-------+ 
| 10.24.2.120 | ip-option-disable     | Success | Yes   |       | 
+             +-----------------------+---------+-------+-------+ 
|             | ip-option-disable-cpu | Success | No    |       | 
+             +-----------------------+---------+-------+-------+ 
|             | ipv6-option-disable   | Success | Yes   |       | 
+-------------+-----------------------+---------+-------+-------+

The following example shows the current inventory device settings for a specified device when IP option disable is set to “Yes” and IPv6 option disable is set to “Yes”.

$ efa inventory device setting show --ip 10.10.10.1  
+--------------------------------+-------+-------------+ 
|              NAME              | VALUE |  APP STATE  | 
+--------------------------------+-------+-------------+ 
| Maintenance Mode Enable On     | No    |             | 
| Reboot                         |       |             | 
+--------------------------------+-------+-------------+ 
| Maintenance Mode Enable        | No    |             | 
+--------------------------------+-------+-------------+ 
| Maintenance Convergence Time   | 100   | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| MCT Bring-up Delay             |       |             | 
+--------------------------------+-------+-------------+ 
| Health Check Enabled           | No    |             | 
+--------------------------------+-------+-------------+ 
| Health Check Interval          | 6m    |             | 
+--------------------------------+-------+-------------+ 
| Health Check Heartbeat Miss    | 2     |             | 
| Threshold                      |       |             | 
+--------------------------------+-------+-------------+ 
| Periodic Backup Enabled        | Yes   |             | 
+--------------------------------+-------+-------------+ 
| Config Backup Interval         | 24h   |             | 
+--------------------------------+-------+-------------+ 
| Config Backup Count            | 4     |             | 
+--------------------------------+-------+-------------+ 
| Prefix Independent Convergence | No    | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| Static Prefix Independent      | No    | cfg-in-sync | 
| Convergence                    |       |             | 
+--------------------------------+-------+-------------+ 
| Maximum Load Sharing Paths     | 128    | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| Maximum Ipv6 Prefix Length 64  | Yes   | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| Urpf                           | Yes   | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| IP Option Disable              | Yes   | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| IP Option Disable CPU          | No    | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| IPV6 Option Disable            | Yes   | cfg-in-sync | 
+--------------------------------+-------+-------------+

The following is an associated SLX configuration:

NHLeaf1# show running-config ip option
ip option disable
NHLeaf1# show running-config ipv6 option
ipv6 option disable

The following example shows the current inventory device settings for a specified device when IP option disable-cpu is set to “Yes”.

$ efa inventory device setting show --ip 10.10.10.1  
+--------------------------------+-------+-------------+ 
|              NAME              | VALUE |  APP STATE  | 
+--------------------------------+-------+-------------+ 
| Maintenance Mode Enable On     | No    |             | 
| Reboot                         |       |             | 
+--------------------------------+-------+-------------+ 
| Maintenance Mode Enable        | No    |             | 
+--------------------------------+-------+-------------+ 
| Maintenance Convergence Time   | 100   | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| MCT Bring-up Delay             |       |             | 
+--------------------------------+-------+-------------+ 
| Health Check Enabled           | No    |             | 
+--------------------------------+-------+-------------+ 
| Health Check Interval          | 6m    |             | 
+--------------------------------+-------+-------------+ 
| Health Check Heartbeat Miss    | 2     |             | 
| Threshold                      |       |             | 
+--------------------------------+-------+-------------+ 
| Periodic Backup Enabled        | Yes   |             | 
+--------------------------------+-------+-------------+ 
| Config Backup Interval         | 24h   |             | 
+--------------------------------+-------+-------------+ 
| Config Backup Count            | 4     |             | 
+--------------------------------+-------+-------------+ 
| Prefix Independent Convergence | No    | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| Static Prefix Independent      | No    | cfg-in-sync | 
| Convergence                    |       |             | 
+--------------------------------+-------+-------------+ 
| Maximum Load Sharing Paths     | 128    | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| Maximum Ipv6 Prefix Length 64  | Yes   | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| Urpf                           | Yes   | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| IP Option Disable              | No    | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| IP Option Disable CPU          | Yes   | cfg-in-sync | 
+--------------------------------+-------+-------------+ 
| IPV6 Option Disable            | No    | cfg-in-sync | 
+--------------------------------+-------+-------------+

The following is an associated SLX configuration:

NHLeaf1# show running-config ip option
ip option disable-cpu
NHLeaf1# show running-config ipv6 option