FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
akileshc
Staff
Staff
Article Id 191704

Description

 

This article describes how to save neighbor cache entries for the VDOM.

Solution


The IPv6 neighbor discovery cache feature allows static entries to be made in the IPv6 neighbor cache.

The IPv6 neighbor discovery process uses ICMP messages and solicited-node multicast addresses to determine the link-layer address of a neighbor on the same network (local link), verify the reachability of a neighbor, and track neighboring devices.

The IPv6 static cache entry for neighbor discovery feature allows static entries to be made in the IPv6 neighbor cache. Static routing requires an administrator to manually enter IPv6 addresses, subnet masks, gateways, and corresponding Media Access Control (MAC) addresses for each interface of each device into a table.

Run the following commands:

 

# config system ipv6-neighbor-cache
    edit {id}                                <-- Configure IPv6 neighbor cache table.
       set id {integer}                      <-- Unique integer ID of the entry. range[0-4294967295].
       set interface {string}                <-- Select the associated interface.
       set ipv6 {ipv6 address}               <-- IPv6 address (format: xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx).
       set mac {mac address}                 <-- MAC address (format: xx:xx:xx:xx:xx:xx).
    next
end

 

Verification of the configuration and troubleshooting:

 

# get sys arp
    diagnose ipv6 neighbor-cache list

 

Here is a complete list of neighbor-cache states:


state=00000001 - INCOMPLETE
state=00000002 - REACHABLE
state=00000004 - STALE
state=00000008 - DELAY
state=00000010 - PROBE
state=00000020 - FAILED
state=00000040 - NOARP
state=00000080 - PERMANENT

Contributors