About ND attack detection

ND attack detection checks incoming ND messages for user validity to prevent spoofing attacks. It is typically configured on access devices.

ND attack detection defines the following types of interfaces:

ND attack detection compares the source IPv6 address and the source MAC address in an incoming ND message against security entries from other modules.

ND attack detection uses the following security entries for user validity check: