ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.
IPV6 neighbor discovery not working
Article ID: 167958
Updated On:
Products
XOS
Issue/Introduction
Neighbor discovery for IPv6 may be blocked by Checkpoint anti-spoofing.There may be instances in which neighbor solicitation packets for IPv6 may not be replied to by the firewall.
Cause
After populating interfaces with IPv6 alias addresses within the Checkpoint GUI you may run a fw ctl zdebug drop and see the the neighbor solicitation packets be dropped due to anti-spoofing.
Resolution
In order to resolve this, you will need to adjust your anti-spoofing settings on the interfaces in which the problem occurs.
Workaround
n/aFeedback
Yes
No
Powered by
