Ip Verify Header Vlan All - Cisco Catalyst 4500 Series Configuration Manual

ip verify header vlan all

ip verify header vlan all
To enable IP header validation for Layer 2-switched IPv4 packets, use the ip verify header vlan all
command. To disable the IP header validation, use the no form of this command.
Syntax Description
This command has no default settings.
Command Default The IP header is validated for bridged and routed IPv4 packets.
Command Modes Global configuration mode
Command History Release
12.1(20)EW
Usage Guidelines This command does not apply to Layer 3-switched (routed) packets.
The Catalyst 4500 series switch checks the validity of the following fields in the IPv4 header for all
switched IPv4 packets:
•
•
•
If an IPv4 packet fails the IP header validation, the packet is dropped. If you disable the header
validation, the packets with the invalid IP headers are bridged but are not routed even if routing was
intended. The IPv4 access lists also are not applied to the IP headers.
Examples
The following example shows how to disable the IP header validation for the Layer 2-switched IPv4
packets:
Switch# config terminal
Switch(config)# no ip verify header vlan all
Switch(config)# end
Switch#
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release XE 3.9.xE and 15.2(5)Ex
2-360
ip verify header vlan all
no ip verify header vlan all
Modification
This command was introduced on the Catalyst 4500 series switch.
The version must be 4.
The header length must be greater than or equal to 20 bytes.
The total length must be greater than or equal to four times the header length and greater than the
Layer 2 packet size minus the Layer 2 encapsulation size.
Chapter 2