Configuring IPv6 IPv6 Overview
OmniSwitch AOS Release 8 Network Configuration Guide December 2017 page 17-12
Local Proxy Neighbor Discovery (LPND)
Local Proxy Neighbor Discovery (LPND) is used to isolate IPv6 nodes on the same VLAN from each
other. If LPND is enabled on an IPv6 VLAN interface, a client will not learn the MAC address of any
other IPv6 node reached via the switch. The switch will intercept all neighbor discovery messages and
replace the client MACs with the switches MAC before sending the messages to their destination. As a
result, all IPv6 traffic will be routed, not switched. See “Configuring Local Proxy Neighbor Discovery” on
page 17-25 for more information.
Router Advertisement (RA) Filtering
RA filtering can be used to prevent the spread of rogue RAs from unauthorized systems. If enabled on an
interface, any received RAs will be dropped without being forwarded on to any other connected IPv6
clients.
One or more trusted ports or linkaggs can be specified for an interface. RAs received on those trusted
ports or linkaggs will be allowed to continue on to all other IPv6 clients reached via the interface. See
“Configuring Router Advertisement Filtering” on page 17-27 for more information.
Neighbor Cache Limit
The size of the neighbor cache can be limited on a system-wide basis. Once the limit is reached, no new
entries will be added. The system-wide limit can be used to control the resources allocated for the IPv6
neighbor cache.
A neighbor cache limit may also be specified on a per-interface basis. Once the interface's limit is reached,
no new neighbor entries are allowed. The per-interface limit can be used to prevent any particular node
attached to an interface from flooding the cache, either maliciously or due to a malfunction.
By default, no limits are set (System, VRF or Interface). See “Configuring Neighbor Cache Limit” on
page 17-25 for more information.
Neighbor Unreachability Detection (NUD)
IPv6 Neighbor Unreachability Detection (NUD) is performed to check the status of an unconfirmed
neighbor when traffic is forwarded to it. By default, up to three neighbor solicitations are sent, with an
interval of one second, to reconfirm that the neighbor is reachable.
In certain situations (e.g. high traffic loads), the default settings may not be sufficient to maintain the
neighbor cache in a stable state. In such situations both the maximum number of neighbor solicitations and
the interval at which they are sent may be modified. See “Configuring Neighbor Unreachability
Detection” on page 17-26 for more information.
To Next Page
Loading...
