Fortinet black logo

Handbook

Neighbor discovery proxy

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:342069
Download PDF

Neighbor discovery proxy

This feature provides support for proxying the IPv6 Neighbor Discovery (ND) protocol to allow the forwarding of the following ICMP messages between upstream and downstream interfaces:

  • Router Advertisement (RA)
  • Neighbor Solicitation (NS)
  • Neighbor Advertisement (NA)
  • Router Solicitation (RS)
  • Redirect
tooltip icon Normally, only one interface will receive RA traffic. This will automatically be considered the upstream interface.

The Neighbor Discovery (ND) protocol is used to discover the Link Layer address of IPv6 destinations. In IPv4, this is achieved by using ARP.

Configure ND Proxy in the CLI using the following syntax:

config system nd-proxy

set status {enable|disable}

set member <interface> <interface> [<interface>...]

end

Option Description
status Enable/disable the use of neighbor discovery proxy
member List of interfaces using the neighbor discovery proxy

An example of a configuration can be found in the IPv6 Configuration section under Neighbor discovery proxy

note icon More information on Neighbor Discovery Proxies (ND Proxy) is available at RFC 4389.

Neighbor discovery proxy

This feature provides support for proxying the IPv6 Neighbor Discovery (ND) protocol to allow the forwarding of the following ICMP messages between upstream and downstream interfaces:

  • Router Advertisement (RA)
  • Neighbor Solicitation (NS)
  • Neighbor Advertisement (NA)
  • Router Solicitation (RS)
  • Redirect
tooltip icon Normally, only one interface will receive RA traffic. This will automatically be considered the upstream interface.

The Neighbor Discovery (ND) protocol is used to discover the Link Layer address of IPv6 destinations. In IPv4, this is achieved by using ARP.

Configure ND Proxy in the CLI using the following syntax:

config system nd-proxy

set status {enable|disable}

set member <interface> <interface> [<interface>...]

end

Option Description
status Enable/disable the use of neighbor discovery proxy
member List of interfaces using the neighbor discovery proxy

An example of a configuration can be found in the IPv6 Configuration section under Neighbor discovery proxy

note icon More information on Neighbor Discovery Proxies (ND Proxy) is available at RFC 4389.