Configuring IPv6 Neighbor Discovery

IPv6 neighbor discovery (ND) uses a group of messages and processes that identify relationships between neighboring nodes. IPv6 ND contains the same functions of ARP and ICMP router discovery, as well as the additional neighbor reachability detection function.

Pre-configuration Tasks

Before configuring IPv6 neighbor discovery, complete the following tasks:

Connect interfaces and configure physical parameters for the interfaces to ensure that the physical status of the interfaces is Up.
Configure link layer protocol parameters for the interfaces to ensure that the link layer protocol status of the interfaces is Up.
Enable IPv6 in the interface view.
Configure IPv6 addresses for interfaces.

Configuring Static Neighbors: You can obtain the mappings between IPv6 addresses and MAC addresses of neighbors after configuring static neighbors. Neighbor entries represent the mappings between IPv6 addresses and MAC addresses of neighbors. If a device is not enabled to send ND protocol packets, it cannot obtain neighbor entries. In this case, you can configure static neighbors on the device to obtain neighbor entries.

(Optional) Setting the Aging Time for Neighbor Entries in the Stale State: You can set a shorter aging time for neighbor entries in the Stale state to speed up the aging of neighbor entries.

(Optional) Setting the Neighbor Reachability Detection Interval: A device can send NS messages to detect whether its neighbors are reachable. Therefore, you can set the NS message transmission interval to control the neighbor reachability detection frequency. Frequent NS message transmissions help rapidly determine whether neighbors are reachable, but also affect system performance. Therefore, it is recommended that the interval not be set too short.

(Optional) Configuring the Maximum Number of Dynamic ND Entries: Configuring the maximum number of dynamic ND entries protects against RA flood attacks.

(Optional) Configuring Strict Prefix Learning for Dynamic Neighbor Entries: You can configure the strict prefix learning function for dynamic neighbor entries to determine whether an interface learns valid NS messages carrying different network prefixes.

(Optional) Configuring Probe Parameters for ND Entries in the PROBE State: This section describes how to configure probe parameters for ND entries in the PROBE state to enhance probe reliability.

(Optional) Configuring Generation of Neighbor Entries Upon Receipt of NA Messages: The generation of neighbor entries upon receipt of NA messages enhances network reliability.

(Optional) Configuring an Interval for Recording ND Logs and Sending ND Traps: Through logs and traps for potential attacks, administrators can obtain ND running in real time, taking measures on the attacks.

(Optional) Configuring Manually Triggered Dual-Device ND Hot Backup: Dual-device ND hot backup can be enabled to achieve backup of ND entries between devices. This allows fast service switching in case of a network node or link failure, enhancing service reliability.

(Optional) Configuring Attack Detection for ND Packets with a Fixed Source MAC Address

(Optional) Configuring MAC Address Check for ND

(Optional) Configuring ND Fast Reply

(Optional) Disabling ND-MAC Association: By default, the NetEngine 8000 F supports ND-MAC association, which implements fast ND entry updating and ensures real-time and stable user traffic. However, after learning ND entries, a VLANIF interface synchronizes them on the device. As a result, a large number of ND entries exist on all interface boards. To resolve this issue, disable ND-MAC association in scenarios where ND entry synchronization is not required on the device.

Verifying the Configuration of IPv6 Neighbor Discovery: After configuring IPv6 neighbor discovery, verify the configuration.