platform ip verify

To configure IP packet verification, use the platform ip verify command. To return to the default setting, use the no form of this command.

platform ip verify {checksum | fragment | tcp tiny-frag | version}

no platform ip verify {checksum | fragment}

Syntax Description

checksum

Drops IPv4 packets if the checksum is invalid.

fragment

Drops IPv4 packets if the packet fragment has a nonzero offset and the Don't Fragment (DF) bit is active.

tcp tiny-frag

Drops IPv4 packets if the IP fragment offset is 1 or if the IP fragment offset is 0 and the IP payload length is less than 16.

version

Drops IPv4 packets if the EtherType is not set to 4 (IPv4).


Command Default

All address tests are enabled.

Command Modes

Global configuration mode

Command History

Release
Modification

5.0(3)N1(1)

This command was introduced.


Usage Guidelines

Use this command to configure packet verification tests on IPv4 packets based on checksum or fragments.

This command does not require a license.

Examples

This example shows how to drop fragmented IPv4 packets:

switch(config)# platform ip verify fragment 

Related Commands

Command
Description

platform ip verify address

Configures IPv4 packet verification checks based on addresses.

platform ip verify length

Configures IPv4 packet verification checks based on length.

show hardware forwarding ip verify

Displays information about IP packet verification checks.