ACL Selective IP Options Drop


You are the security office for the national security team in the Netherlands. One of your routers has a very high CPU load and after looking closely you can see it’s spending a lot of cycles processing IP packets with special options. Since this isn’t normal you decide to implement some filtering.


  • All IP addresses have been preconfigure for you.
  • Configure router Trash so it drops IP packets with the timestamp option.
  • Configure router Trash so it drops IP packets with the loose source option.




IP Options Drop

Video Solution:

Configuration Files

You need to register to download the GNS3 topology file. (Registration is free!)

Once you are logged in you will find the configuration files right here.

Opt In Image
Do you want your CCNA or CCNP Certificate?

The How to Master series helps you to understand complex topics like spanning-tree, VLANs, trunks, OSPF, EIGRP, BGP and more.

Written by René Molenaar - CCIE #41726

You May Also Like

About the Author: Rene Molenaar

René - CCIE #41726 is the creator of where he shares CCNA, CCNP and CCIE R&S labs. He also blogs about networking on


  1. solution 1:
    ip option drop
    solution 2:
    ip access-list ext abc
    deny ip any any option trace route
    permit ip any any
    int fax/x
    ip access-group abc in

    my question to you:
    after using ip option drop can we still allow only say ip option trace route?


Comments are closed.