Enable NDP Monitoring

1. Enable NDP monitoring.

   1. Select NetworkInterfaces and Ethernet or VLAN.
   2. Select the interface you are configuring.
   3. Select IPv6.
   4. Select Address Resolution.
   5. Select Enable NDP Monitoring.

      After you enable or disable NDP monitoring, you must Commit before NDP monitoring can start or stop.
   6. Click OK.
2. Commit your changes.

   Click Commit.
3. Monitor NDP and DAD packets from clients and neighbors.

   1. Select NetworkInterfaces and Ethernet or VLAN.
   2. For the interface where you enabled NDP monitoring, in the Features column, hover over the NDP Monitoring

      icon:

      The NDP Monitoring summary for the interface displays the list of IPv6 Prefixes that this interface will send in the Router Advertisement (RA) if RA is enabled (they are the IPv6 prefixes of the interface itself).

      The summary also indicates whether DAD, Router Advertisement, and DNS Support are enabled; IP addresses of any Recursive DNS Servers configured; and any DNS suffixes configured on the DNS Search List.
   3. Click on the NDP Monitoring icon to display detailed information.

      Each row of the detailed NDP Monitoring table for the interface displays the IPv6 address of a neighbor the firewall has discovered, the corresponding MAC address, corresponding User ID (on a best-case basis), reachability Status of the address, and Last Reported date and time this NDP Monitor received an RA from this IP address. A User ID will not display for printers or other non-user-based hosts. If the status of the IP address is Stale, the neighbor is not known to be reachable, per RFC 4861.

      At the bottom right is the count of Total Devices Detected on the link local network.

      • Enter an IPv6 address in the filter field to search for an address to display.
      • Select the check boxes to display or not display IPv6 addresses.
      • Click the numbers, the right or left arrow, or the vertical scroll bar to advance through many entries.
      • Click Clear All NDP Entries to clear the entire table.
4. Monitor ND logs for reporting purposes.

   1. Select MonitorLogsSystem.
   2. In the Type column, view ipv6nd logs and corresponding descriptions.

      For example, inconsistent router advertisementreceived indicates that the firewall received an RA different from the RA that it is going to send out.