Ipv6 neighbor discovery protocol, Address resolution – H3C Technologies H3C SecPath F1000-E User Manual
Page 706
681
•
On a tunnel interface
The lower 32 bits of the EUI-64 address-based interface identifier are the source IPv4 address of
the tunnel interface. The higher 32 bits of the EUI-64 address-based interface identifier of an
ISATAP tunnel interface are 0000:5EFE, whereas those of other tunnel interfaces are all zeros. For
more information about tunnels, see VPN Configuration Guide.
•
On an interface of another type
The EUI-64 address-based interface identifier is generated randomly by the firewall.
IPv6 neighbor discovery protocol
The IPv6 Neighbor Discovery (ND) protocol uses five types of ICMPv6 messages to implement the
following functions:
•
•
Neighbor reachability detection
•
•
Router/prefix discovery and address autoconfiguration
•
lists the types and functions of ICMPv6 messages used by the ND protocol.
Table 84 ICMPv6 messages used by ND
ICMPv6 message
Type
Function
Neighbor Solicitation (NS)
message
135
Acquires the link-layer address of a neighbor.
Verifies whether a neighbor is reachable.
Detects duplicate addresses.
Neighbor Advertisement
(NA) message
136
Responds to an NS message.
Notifies the neighboring nodes of link layer changes.
Router Solicitation (RS)
message
133
Requests for an address prefix and other configuration
information for autoconfiguration after startup.
Router Advertisement (RA)
message
134
Responds to an RS message.
Advertises information such as the Prefix Information options and
flag bits.
Redirect message
137
Informs the source host of a better next hop on the path to a
particular destination when certain conditions are satisfied.
Address resolution
This function is similar to the ARP function in IPv4. An IPv6 node acquires the link-layer addresses of
neighboring nodes on the same link through NS and NA message exchanges.
shows how
Host A acquires the link-layer address of Host B on a single link.
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer