Cisco 5510 - ASA SSL / IPsec VPN Edition Configuration Guide

7-18
Cisco ASA 5500 Series Configuration Guide using ASDM
OL-20339-01
Chapter 7 Using the Startup Wizard
Configuring IPv6 Neighbor Discovery
Configuring IPv6 Neighbor Discovery
The IPv6 neighbor discovery process uses ICMPv6 messages and solicited-node multicast addresses to
determine the link-layer address of a neighbor on the same network (local link), verify the reachability
of a neighbor, and keep track of neighboring routers. For more information about IPv6 Neighbor
Discovery, see Chapter 25, “Configuring IPv6 Neighbor Discovery.”
This section includes the following topics:
• Configuring Neighbor Solicitation Messages, page 7-18
• Configuring Router Advertisement Messages, page 7-22
• Configuring IPv6 Static Neighbors, page 7-25
Configuring Neighbor Solicitation Messages
Neighbor solicitation messages (ICMPv6 Type 135) are sent on the local link by nodes attempting to
discover the link-layer addresses of other nodes on the local link. The neighbor solicitation message is
sent to the solicited-node multicast address. The source address in the neighbor solicitation message is
the IPv6 address of the node sending the neighbor solicitation message. The neighbor solicitation
message also includes the link-layer address of the source node.
After receiving a neighbor solicitation message, the destination node replies by sending a neighbor
advertisement message (ICPMv6 Type 136) on the local link. The source address in the neighbor
advertisement message is the IPv6 address of the node sending the neighbor advertisement message; the
destination address is the IPv6 address of the node that sent the neighbor solicitation message. The data
portion of the neighbor advertisement message includes the link-layer address of the node sending the
neighbor advertisement message. After the source node receives the neighbor advertisement, the source
node and destination node can communicate.
Figure 7-1 shows the neighbor solicitation and response process.
Figure 7-1 IPv6 Neighbor Discovery—Neighbor Solicitation Message
132958
A and B can now exchange
packets on this link
ICMPv6 Type = 135
Src = A
Dst = solicited-node multicast of B
Data = link-layer address of A
Query = what is your link address?
ICMPv6 Type = 136
Src = B
Dst = A
Data = link-layer address of B

Cisco 5510 - ASA SSL / IPsec VPN Edition Specifications

General

Brand	Cisco
Model	5510 - ASA SSL / IPsec VPN Edition
Category	Firewall
Language	English