IPv6 Neighbor Discovery
Check Point Maestro R80.20SP Administration Guide | 70
IPv6 Neighbor Discovery
Neighbor discovery works over the ICMPv6 Neighbor Discovery protocol, which is the functional equivalent
of the IPv4 ARP protocol. ICMPv6 Neighbor Discovery Protocol must be explicitly permitted in the Access
Control Rule Base for all bridged networks. This is different from ARP. ARP traffic is Layer 2 only, therefore
it permitted regardless of the Rule Base.
This is an example of an explicit Rule Base that permits ICMPv6 Neighbor Discovery protocol:
Source
Destination
Services and
Applications
Action
Network object that represents
the Bridged Network
Network object that represents
the Bridged Network
neighbor-
advertisement
neighbor-
solicitation
router-
advertisement
router-
solicitation
redirect6
Accept
