Print Download PDF Send Feedback

Previous

Next

IPv6 Neighbor Discovery

Neighbor discovery works over the ICMPv6 Neighbor Discovery protocol, which is the functional equivalent of the IPv4 ARP protocol. ICMPv6 Neighbor Discovery Protocol must be explicitly permitted in the Access Control Rule Base for all bridged networks. This is different from ARP. ARP traffic is Layer 2 only, therefore it permitted regardless of the Rule Base.

This is an example of an explicit Rule Base that permits ICMPv6 Neighbor Discovery protocol:

Source

Destination

Services and Applications

Action

Network object

that represents

the Bridged

Network

Network object

that represents

the Bridged

Network

neighbor-advertisement

neighbor-solicitation

router-advertisement

router-solicitation

redirect6

Accept