firewall defend time-stamp enable

Function

The firewall defend time-stamp enable command enables the defense against IP packets carrying the timestamp option.

The undo firewall defend time-stamp enable command disables the defense against IP packets carrying the timestamp option.

Format

firewall defend time-stamp enable

undo firewall defend time-stamp enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

By default, the defense against IP packets carrying the timestamp option is disabled.

After defense against IP packets carrying the timestamp option is enabled, a FW checks whether incoming packets carry the timestamp option. If the packets carry timestamps, the FW discards the packets and records an attack log.

Example

# Enable the defense against IP packets carrying the timestamp option.

<sysname> system-view
[sysname] firewall defend time-stamp enable