Re: [OSL | CCIE_Security] what is the utility of this command "

The command drop packets that contain ip options. An alternative would be to
use an ACL on an interface that denies packets with specific ip options
configured.

Regards,

Brandon Carroll - CCIE #23837
Senior Technical Instructor - IPexpert
Mailto: bcarroll_at_ipexpert.com
Telephone: +1.810.326.1444
Live Assistance, Please visit: www.ipexpert.com/chat
eFax: +1.810.454.0130

IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio
Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S,
Voice, Security & Service Provider) certification(s) with training locations
throughout the United States, Europe, South Asia and Australia. Be sure to
visit our online communities at www.ipexpert.com/communities and our public
website at www.ipexpert.com

On Mar 19, 2010, at 10:31 PM, Kamran Shakil wrote:

>
> There is a global config mode command : ip options drop .
>
> What is the use of it ? does it stop any sort of attacks or is it for any
optimization technique ?
>
> Also thinking if this command is given what other good stuff would be
affected if running on the router ? this command actually I see in the
router.
>
> Waiting for views and answers for the above ?
>
>
>
>
>
>
>
> truly,
> Kamran Shakil
> BS(CS) MCP MCSE CCNA CCDA CCNP CCDP CQS-WLANSE
> CQS-FOUNDSE CQS-IPCX CQS-UCCX
> CCIE*(Sec,inprogress)
>
> <image001.jpg>
>
> " MDS Cisco team accepts no liability for the content of this email, or for
the consequences of any actions taken on the basis of the information
provided, unless that information is subsequently confirmed in writing. Any
views or opinions presented in this email are solely those of the author and
do not necessarily represent those of the organization. WARNING: Computer
viruses can be transmitted via email. The recipient should check this email
and any attachments for the presence of viruses. The organization accepts no
liability for any damage caused by any virus transmitted by this email. "
>
>
>
> <Kamran Shakil.vcf>_______________________________________________
> For more information regarding industry leading CCIE Lab training, please
visit www.ipexpert.com

Blogs and organic groups at http://www.ccie.net
Received on Fri Mar 19 2010 - 23:37:53 ART