3Com OfficeConnect 3C100XF Cli User's Manual - page 185
CLI Commands
22-3
source route options
Another choice in the IP Options field of the IP header. Particular path the
sender chooses to take through the network to reach its destination, as
specified in the sender packet’s IP header. Packets of this type can be
discarded although this is a lower level of security than All Header Options.
The default is
disabled
.
Also see
show ip security settings
.
Disable Command
disable ip security_option
The
disable ip_security option
command has the following parameters.
drop_all_fragoffset1
drop_tcp_fragoffset1
disallow_all_header_options
disallow_source_route_options
Each of these parameters disables the global filtering of all IP packets containing
the specified datagram fields. This security feature also syslogs the event when the
particular packet is dropped.
Show Commands
show ip security,
show ip security settings
These commands display the state (enabled or disabled) of IP security settings. The
settings shown in the following table are the defaults.
show security_option,
show security_option
settings
These commands display status of SNMP user access, security service and
administration by remote users. Modify the SNMP user access using the
enable
or
disable security_option snmp
commands. You can modify administration by
remote user using the
enable
or
disable security_option remote_user
commands
.
SNMP User Access
-
enabled
(default) or
disabled
Security Service
-
TACACS+
Administration by Remote TELNET user
-
on
(default) or
off
IP SECURITY SETTINGS
Drop All Fragoffset1:
ENABLED
Drop TCP Fragoffset1
ENABLED
Disallow All Header Options
DISABLED
Disallow Source Route Options:
DISABLED
SECURITY OPTION SETTINGS
SNMP User Access:
ENABLED
Security Service:
TACACS+
Administration by Remote TELNET
User:
ON