Specifications

Firewall Interface Commands
XSR CLI Reference Guide 16-131
no ip firewall ip-multicast {in | out | both}
Default
Multicastpacketsarenotallowedinboundandoutbound.
Mode
Interfaceconfiguration:XSR(config-if<xx>)#
Example
Thefollowingexamplepermitsmulticastpacketsinbothdirections:
XSR(config-if<F1>)#ip firewall ip-multicast both
ip firewall ip-options
Thiscommandallowsincoming/outgoingpacketsthroughthefirewallwiththefollowingoptions:
looseandstrictsourcerouting,recordroute,timestamp,allandotherIPoptions.
Syntax
ip firewall ip-options {loose-source-route | strict-source-route | record-route |
time-stamp | other | all} {in | out | both}
Syntax of the “no” Form
ThenoformofthiscommanddisablestheselectedIPoption:
loose-
source-
route
Requestsroutingthatincludesthespecifiedrouters.Thisroutingpathincludes
asequenceofIPaddressesadatagrammustfollowtoitsdestinationbut
allowsmultiplenetworkhopsbetweensuccessiveaddressesonthelist.
strict-
source-
route
SpecifiesanexactroutethroughtheInternet.Thisroutingpathincludesa
sequenceofIPaddressesadatagrammustfollow,hopbyhop,fromitssource
todestination.Thepathbetweentwosuccessiveaddressesinthelistmust
consistofasinglephysicalnetwork.
record-route
Tracesaroute.ItallowsthesourcetocreateanemptylistofIPaddressesand
arrangeforeachrouterthatrouterthathandlesadatagramtoadditsIP
addresstothelist.Whenadatagramarrives,thedestinationdevicecanextract
andandprocessthelistofaddresses.
time-stamp
Recordstimestampsalongaroute.Itissimilartotherecordrouteoptioninthat
everyrouterfromsourcetodestinationaddsitsIPaddress,andatimestamp,
tothelist.Thetimestampnotesthetimeanddatearouterhandledthe
datagram,expressedinmillisecondssincemidnight,UniversalTime.
other
AnyIPoptionotherthanthoseexplicitlysupportedbythe command.
all
AllIPoptionsallowed.
in or out
Packetsenteringorexitinganinterface.
both
Packetsenteringandexitinganinterface.