Security Configuration 8 - 13
Figure 8-4 Wireless Firewall screen - Advanced Settings tab - IPv6 Settings tab
22. Refer to the IPv6 Firewall Enable option to provide firewall support to IPv6 packet streams. This setting is enabled by
default. Disabling IPv6 firewall support also disables proxy neighbor discovery.
IPv6 hosts can configure themselves automatically when connected to an IPv6 network using the neighbor discovery (ND)
protocol via ICMPv6 router discovery messages. These hosts require firewall packet protection unique to IPv6 traffic, as
IPv6 addresses are composed uniquely of eight groups of four hexadecimal digits separated by colons.
23. Select IPv6 Rewrite Flow Label to provide flow label rewrites for each IPv6 packet. A flow is a sequence of packets from
a particular source to a particular (unicast or multicast) destination. The flow label helps keep packet streams from looking
like one massive flow. Flow label rewrites are disabled by default and must be manually enabled.
Flow label re-writes enable the re-classification of packets belonging to a specific flow. The flow label does nothing to
eliminate the need for packet filtering.
24. Select Enable Proxy ND to generate neighbor discovery responses on behalf of another access point managed device.
When enabled, any IPv6 packet received on an interface is parsed to see whether it is known to be a neighbor solicitation.
This setting is enabled by default.
To Next Page
Loading...
