Firewall Interface Commands
XSR CLI Reference Guide 16-131
no ip firewall ip-multicast {in | out | both}
Default
Multicastpacketsarenotallowedinboundandoutbound.
Mode
Interfaceconfiguration:XSR(config-if<xx>)#
Example
Thefollowingexamplepermitsmulticastpacketsinbothdirections:
XSR(config-if<F1>)#ip firewall ip-multicast both

ip firewall ip-options

Thiscommandallowsincoming/outgoingpacketsthroughthefirewallwiththefollowingoptions:
looseandstrictsourcerouting,recordroute,timestamp,allandotherIPoptions.
Syntax
ip firewall ip-options {loose-source-route | strict-source-route | record-route |
time-stamp | other | all} {in | out | both}
Syntax of the “no” Form
ThenoformofthiscommanddisablestheselectedIPoption:
loose-
source-
route
Requestsroutingthatincludesthespecifiedrouters.Thisroutingpathincludes
asequenceofIPaddressesadatagrammustfollowtoitsdestinationbut
allowsmultiplenetworkhopsbetweensuccessiveaddressesonthelist.
strict-
source-
route
SpecifiesanexactroutethroughtheInternet.Thisroutingpathincludesa
sequenceofIPaddressesadatagrammustfollow,hopbyhop,fromitssource
todestination.Thepathbetweentwosuccessiveaddressesinthelistmust
consistofasinglephysicalnetwork.
record-route Tracesaroute.ItallowsthesourcetocreateanemptylistofIPaddressesand
arrangeforeachrouterthatrouterthathandlesadatagramtoadditsIP
addresstothelist.Whenadatagramarrives,thedestinationdevicecanextract
andandprocessthelistofaddresses.
time-stamp Recordstimestampsalongaroute.Itissimilartotherecordrouteoptioninthat
everyrouterfromsourcetodestinationaddsitsIPaddress,andatimestamp,
tothelist.Thetimestampnotesthetimeanddatearouterhandledthe
datagram,expressedinmillisecondssincemidnight,UniversalTime.
other AnyIPoptionotherthanthoseexplicitlysupportedbythecommand.
all AllIPoptionsallowed.
in or out Packetsenteringorexitinganinterface.
both Packetsenteringandexitinganinterface.