Log in to ask questions, share your expertise, or stay connected to content you value. Don’t have a login? Learn how to become a member.
hello guys, is this a correct statement:
Netscreen:
set zone "Untrust" screen tear-drop
JunOS:
set security screen ids-option tear-drop ip tear-dropset security zones security-zone my_zone_untrust screen tear-drop
Thank you.
Hi JJJCR,
You are absolutely correct.
You set the tear drop optyion using the command;
root# set security screen ids-option test ip tear-drop
You can refere to the below kb where the configuration of the screen options is provided;
http://kb.juniper.net/InfoCenter/index?page=content&id=KB16618&smlogin=true
Correct.
In junos you create a screen and then apply this to a zone. Thus you can apply the same screen to multiple zones.