The document discusses IPv6 Neighbor Discovery. It explains that Neighbor Discovery allows nodes on the same link to discover each other, determine link-layer addresses, find routers, and maintain reachability information for active neighbors. It describes the various Neighbor Discovery message types and processes, including address resolution, duplicate address detection, and redirect function. Conceptual data structures for neighbor caches, destination caches, prefix lists, and default router lists are also outlined.
Die monatlichen Anlässe in Zusammenarbeit mit dem Swiss IPv6 Council behandeln verschiedene technische Themenbereiche von IPv6.
Das Referat von Jen Linkova vom 30. November 2015 widmete sich dem Neighbor Discovery Protokoll, einem Schlüsselmechanismus um Verbindungen zwischen IPv6 Knotenpunkten und LANs aufzubauen. Die Referentin fokussierte sich in der Präsentation auf die technischen Details des Designs, der Implementierung sowie Sicherheitsaspekten.
Gerne stellen wir Ihnen die Präsentation zum Anschauen und Herunterladen zur Verfügung. Haben Sie Feedback zum Event? Wir sind gespannt auf Ihre Meinung.
IP multicast is a method of sending Internet Protocol (IP) datagrams to a group of interested receivers in a single transmission. It is often employed for streaming media applications on the Internet and private networks.(wikipedia)
Die monatlichen Anlässe in Zusammenarbeit mit dem Swiss IPv6 Council behandeln verschiedene technische Themenbereiche von IPv6.
Das Referat von Jen Linkova vom 30. November 2015 widmete sich dem Neighbor Discovery Protokoll, einem Schlüsselmechanismus um Verbindungen zwischen IPv6 Knotenpunkten und LANs aufzubauen. Die Referentin fokussierte sich in der Präsentation auf die technischen Details des Designs, der Implementierung sowie Sicherheitsaspekten.
Gerne stellen wir Ihnen die Präsentation zum Anschauen und Herunterladen zur Verfügung. Haben Sie Feedback zum Event? Wir sind gespannt auf Ihre Meinung.
IP multicast is a method of sending Internet Protocol (IP) datagrams to a group of interested receivers in a single transmission. It is often employed for streaming media applications on the Internet and private networks.(wikipedia)
Segment routing is a technology that is gaining popularity as a way to simplify MPLS networks. It has the benefits of interfacing with software-defined networks and allows for source-based routing. It does this without keeping state in the core of the network and needless to use LDP and RSVP-TE.
SOSCON 2019.10.17
What are the methods for packet processing on Linux? And how fast are each packet processing methods? In this presentation, we will learn how to handle packets on Linux (User space, socket filter, netfilter, tc), and compare performance with analysis of where each packet processing is done in the network stack (hook point). Also, we will discuss packet processing using XDP, an in-kernel fast-path recently added to the Linux kernel. eXpress Data Path (XDP) is a high-performance programmable network data-path within the Linux kernel. The XDP is located at the lowest level of access through SW in the network stack, the point at which driver receives the packet. By using the eBPF infrastructure at this hook point, the network stack can be expanded without modifying the kernel.
Daniel T. Lee (Hoyeon Lee)
@danieltimlee
Daniel T. Lee currently works as Software Engineer at Kosslab and contributing to Linux kernel BPF project. He has interest in cloud, Linux networking, and tracing technologies, and likes to analyze the kernel's internal using BPF technology.
Internet Protocol version 6 (IPv6) is what you are going to discover onwards. Here, you will get format, features and related required information of IPv6 addresses and its related protocols.
Internet Protocol version 6 (IPv6) is the latest version of the
Internet Protocol (IP), the communications protocol that
provides an identification and location system for computers
on networks and routes traffic across the Internet.
IPv4 & IPv6 are not designed to be interoperable, complicating
the transition to IPv6. However, several IPv6 transition
mechanisms have been devised to permit communication
between IPv4 and IPv6 hosts.
Segment routing is a technology that is gaining popularity as a way to simplify MPLS networks. It has the benefits of interfacing with software-defined networks and allows for source-based routing. It does this without keeping state in the core of the network and needless to use LDP and RSVP-TE.
SOSCON 2019.10.17
What are the methods for packet processing on Linux? And how fast are each packet processing methods? In this presentation, we will learn how to handle packets on Linux (User space, socket filter, netfilter, tc), and compare performance with analysis of where each packet processing is done in the network stack (hook point). Also, we will discuss packet processing using XDP, an in-kernel fast-path recently added to the Linux kernel. eXpress Data Path (XDP) is a high-performance programmable network data-path within the Linux kernel. The XDP is located at the lowest level of access through SW in the network stack, the point at which driver receives the packet. By using the eBPF infrastructure at this hook point, the network stack can be expanded without modifying the kernel.
Daniel T. Lee (Hoyeon Lee)
@danieltimlee
Daniel T. Lee currently works as Software Engineer at Kosslab and contributing to Linux kernel BPF project. He has interest in cloud, Linux networking, and tracing technologies, and likes to analyze the kernel's internal using BPF technology.
Internet Protocol version 6 (IPv6) is what you are going to discover onwards. Here, you will get format, features and related required information of IPv6 addresses and its related protocols.
Internet Protocol version 6 (IPv6) is the latest version of the
Internet Protocol (IP), the communications protocol that
provides an identification and location system for computers
on networks and routes traffic across the Internet.
IPv4 & IPv6 are not designed to be interoperable, complicating
the transition to IPv6. However, several IPv6 transition
mechanisms have been devised to permit communication
between IPv4 and IPv6 hosts.
IPv6 Autoconfig full process from initial configuration of IPV6 Node. Refreshment of IPv6 Addresses using RA or DHCPv6. How to keep your home config everywhere you go and only logout when you want to, not when you move to a new access point.
Solving QoS multicast routing problem using aco algorithm Abdullaziz Tagawy
In IP multicasting messages are sent from the source node to all destination nodes. In order to meet QoS requirements an optimizing algorithm is needed. We propose an Ant Colony Optimization algorithm to do so. Ants release a chemical called pheromone while searching for food. They are capable of finding shortest path to their target. This can give an effective optimal solution to our Multicast Routing Problem.
Multi-cluster Kubernetes Networking- Patterns, Projects and GuidelinesSanjeev Rampal
Talk presented at Kubernetes Community Day, New York, May 2024.
Technical summary of Multi-Cluster Kubernetes Networking architectures with focus on 4 key topics.
1) Key patterns for Multi-cluster architectures
2) Architectural comparison of several OSS/ CNCF projects to address these patterns
3) Evolution trends for the APIs of these projects
4) Some design recommendations & guidelines for adopting/ deploying these solutions.
This 7-second Brain Wave Ritual Attracts Money To You.!nirahealhty
Discover the power of a simple 7-second brain wave ritual that can attract wealth and abundance into your life. By tapping into specific brain frequencies, this technique helps you manifest financial success effortlessly. Ready to transform your financial future? Try this powerful ritual and start attracting money today!
Bridging the Digital Gap Brad Spiegel Macon, GA Initiative.pptxBrad Spiegel Macon GA
Brad Spiegel Macon GA’s journey exemplifies the profound impact that one individual can have on their community. Through his unwavering dedication to digital inclusion, he’s not only bridging the gap in Macon but also setting an example for others to follow.
# Internet Security: Safeguarding Your Digital World
In the contemporary digital age, the internet is a cornerstone of our daily lives. It connects us to vast amounts of information, provides platforms for communication, enables commerce, and offers endless entertainment. However, with these conveniences come significant security challenges. Internet security is essential to protect our digital identities, sensitive data, and overall online experience. This comprehensive guide explores the multifaceted world of internet security, providing insights into its importance, common threats, and effective strategies to safeguard your digital world.
## Understanding Internet Security
Internet security encompasses the measures and protocols used to protect information, devices, and networks from unauthorized access, attacks, and damage. It involves a wide range of practices designed to safeguard data confidentiality, integrity, and availability. Effective internet security is crucial for individuals, businesses, and governments alike, as cyber threats continue to evolve in complexity and scale.
### Key Components of Internet Security
1. **Confidentiality**: Ensuring that information is accessible only to those authorized to access it.
2. **Integrity**: Protecting information from being altered or tampered with by unauthorized parties.
3. **Availability**: Ensuring that authorized users have reliable access to information and resources when needed.
## Common Internet Security Threats
Cyber threats are numerous and constantly evolving. Understanding these threats is the first step in protecting against them. Some of the most common internet security threats include:
### Malware
Malware, or malicious software, is designed to harm, exploit, or otherwise compromise a device, network, or service. Common types of malware include:
- **Viruses**: Programs that attach themselves to legitimate software and replicate, spreading to other programs and files.
- **Worms**: Standalone malware that replicates itself to spread to other computers.
- **Trojan Horses**: Malicious software disguised as legitimate software.
- **Ransomware**: Malware that encrypts a user's files and demands a ransom for the decryption key.
- **Spyware**: Software that secretly monitors and collects user information.
### Phishing
Phishing is a social engineering attack that aims to steal sensitive information such as usernames, passwords, and credit card details. Attackers often masquerade as trusted entities in email or other communication channels, tricking victims into providing their information.
### Man-in-the-Middle (MitM) Attacks
MitM attacks occur when an attacker intercepts and potentially alters communication between two parties without their knowledge. This can lead to the unauthorized acquisition of sensitive information.
### Denial-of-Service (DoS) and Distributed Denial-of-Service (DDoS) Attacks
APNIC Foundation, presented by Ellisha Heppner at the PNG DNS Forum 2024APNIC
Ellisha Heppner, Grant Management Lead, presented an update on APNIC Foundation to the PNG DNS Forum held from 6 to 10 May, 2024 in Port Moresby, Papua New Guinea.
1.Wireless Communication System_Wireless communication is a broad term that i...JeyaPerumal1
Wireless communication involves the transmission of information over a distance without the help of wires, cables or any other forms of electrical conductors.
Wireless communication is a broad term that incorporates all procedures and forms of connecting and communicating between two or more devices using a wireless signal through wireless communication technologies and devices.
Features of Wireless Communication
The evolution of wireless technology has brought many advancements with its effective features.
The transmitted distance can be anywhere between a few meters (for example, a television's remote control) and thousands of kilometers (for example, radio communication).
Wireless communication can be used for cellular telephony, wireless access to the internet, wireless home networking, and so on.
2. INFT3007
Neighbor Discovery
RFC 4861 states the purpose of
Neighbor Discovery as follows:
"IPv6 nodes on the same link use Neighbor
Discovery to discover each other's
presence, to determine each other's link-
layer addresses, to find routers and to
maintain reachability information about the
paths to active neighbors."
Source: http://www.sixscape.com/joomla/sixscape/index.php/technical-backgrounders/tcp-ip/ip-the-internet-protocol/ipv6-
internet-protocol-version-6/ipv6-neighbor-discovery
3. INFT3007
Neighbor Discovery (contd.)
Neighbor Discovery (ND) is one of the
key components of IPv6.
It has no exact equivalent in IPv4,
although some of the mechanisms in
IPv4 were similar (but mostly without
the full functionality of the IPv6
mechanisms).
Source: http://www.sixscape.com/joomla/sixscape/index.php/technical-backgrounders/tcp-ip/ip-the-internet-protocol/ipv6-
internet-protocol-version-6/ipv6-neighbor-discovery
4. INFT3007
Neighbor Discovery (contd.)
ND replaces Address Resolution
Protocol (ARP), Internet Control
Message Protocol (ICMP) router
discovery, and the ICMP Redirect
message used in IPv4.
ND also provides additional
functionality.
5. INFT3007
Neighbor Discovery (contd.)
ND is used by nodes to do the
following:
Resolve the link-layer address of a
neighboring node to which an IPv6 packet
is being forwarded.
Determine when the link-layer address of a
neighboring node has changed.
Determine whether a neighbor is still
reachable.
6. INFT3007
Neighbor Discovery (contd.)
ND is used by hosts to do the following:
Discover neighboring routers.
Autoconfigure addresses, address prefixes,
routes, and other configuration
parameters.
7. INFT3007
Neighbor Discovery (contd.)
ND is used by routers to do the
following:
Advertise their presence, host
configuration parameters, routes, and on-
link prefixes.
Inform hosts of a better next-hop address
to forward packets for a specific
destination
8. INFT3007
Neighbor Discovery Message
Types
There are five different ND messages
Router Solicitation
Router Advertisement
Neighbor Solicitation
Neighbor Advertisement
Redirect
9. INFT3007
ND Message Types (contd.)
All ND mechanisms are Link-Local (they take place
only within the local link or subnet - ND messages
don't cross routers).
The Hop Limit field in the Packet Header of all ND
messages is set to 255.
If someone injects an ND message from outside the current
link, there is no possible way for the Hop Limit to be 255
after it crosses the router into the Local Link.
If a hacker sets the Hop Limit to 255, it will be 254 after
crossing the router. If a hacker sets the Hop Limit to 0, the
router will discard it upon receipt instead of forwarding it.
This prevents a whole class of hacking attacks.
Source: http://www.sixscape.com/joomla/sixscape/index.php/technical-backgrounders/tcp-ip/ip-the-internet-protocol/ipv6-
internet-protocol-version-6/ipv6-neighbor-discovery
10. INFT3007
Router Solicitation
The Router Solicitation message is sent
by IPv6 hosts to discover the presence
of IPv6 routers on the link.
A host sends a multicast Router Solicitation
message to prompt IPv6 routers to
respond immediately rather than waiting
for an unsolicited Router Advertisement
message.
11. INFT3007
Router Solicitation (contd.)
In the IPv6 header of the Router Solicitation
message, you will find the following settings:
The Source Address field is set to either a link-
local IPv6 address assigned to the sending
interface or the IPv6 unspecified address (::) if no
address is assigned.
The Destination Address field is set to the link-
local scope all-routers multicast address (FF02::2).
The Hop Limit field is set to 255.
12. INFT3007
Router Advertisement
IPv6 routers send unsolicited Router
Advertisement messages or in response to
the receipt of a Router Solicitation message.
The Router Advertisement message contains
the information required by hosts to
determine the link prefixes, the link MTU,
specific routes, whether or not to use address
autoconfiguration, and the duration for which
addresses created through address
autoconfiguration are valid and preferred.
13. INFT3007
Router Advertisement (contd.)
In the IPv6 header of the Router
Advertisement message:
The Source Address field is set to the link-local
address assigned to the sending interface.
The Destination Address field is set to either the
link-local scope all-nodes multicast address
(FF02::1) or the unicast IPv6 address of the host
that sent the Router Solicitation message from a
unicast address.
The Hop Limit field is set to 255.
14. INFT3007
Neighbor Solicitation
IPv6 nodes send the Neighbor Solicitation
message to discover the link-layer address of
an on-link (in the same subnet) IPv6 node or
to confirm a previously determined link-layer
address.
It typically includes the link-layer address of the
sender.
Typical Neighbor Solicitation messages are
multicast for address resolution and unicast when
the reachability of a neighboring node is being
verified.
15. INFT3007
Neighbor Solicitation (contd.)
In the IPv6 header of the Neighbor Solicitation
message:
The Source Address field is set to either a unicast IPv6
address assigned to the sending interface or, during
duplicate address detection, the unspecified address (::).
For a multicast Neighbor Solicitation, the Destination
Address field is set to the solicited-node address of the
target.
For a unicast Neighbor Solicitation, the Destination Address
field is set to the unicast address of the target.
The Hop Limit field is set to 255.
16. INFT3007
Neighbor Advertisement
An IPv6 node sends the Neighbor Advertisement
message in response to a Neighbor Solicitation
message.
An IPv6 node also sends unsolicited Neighbor
Advertisements to inform neighboring nodes of
changes in link-layer addresses or the node’s role.
The Neighbor Advertisement contains information
required by nodes to determine the type of Neighbor
Advertisement message, the sender’s role on the
network, and typically the link-layer address of the
sender.
17. INFT3007
Neighbor Advertisement
(contd.)
In the IPv6 header of the Neighbor
Advertisement message:
The Source Address field is set to a unicast
address assigned to the sending interface.
The Destination Address field is set, for a solicited
Neighbor Advertisement, to the unicast IP address
of the sender of the initial Neighbor Solicitation.
For an unsolicited Neighbor Advertisement, the
Destination Address field is set to the link-local
scope all-nodes multicast address (FF02::1).
The Hop Limit field is set to 255.
18. INFT3007
Redirect
The Redirect message is sent by an
IPv6 router to inform an originating
host of a better first-hop address for a
specific destination.
Redirect messages are sent only by
routers for unicast traffic, are unicast
only to originating hosts, and are
processed only by hosts.
19. INFT3007
Redirect (contd.)
In the IPv6 header of the Redirect
message:
The Source Address field is set to a unicast
address that is assigned to the sending
interface.
The Destination Address field is set to the
unicast IP address of the originating host.
The Hop Limit field is set to 255
20. INFT3007
Neighbor Discovery Processes
The ND protocol provides message
exchanges for the following processes:
Address resolution (including duplicate
address detection)
Redirect function
Neighbor unreachability detection
Router discovery (includes prefix and
parameter discovery)
21. INFT3007
Conceptual Host Data
Structures
To facilitate interactions between neighboring
nodes, RFC 4861 defines the following
conceptual host data structures as an
example of how to store information for ND
processes:
Neighbor cache The neighbor cache stores the
on-link IP address of each neighbor, its
corresponding link-layer address, and an
indication of the neighbor’s reachability state.
The neighbor cache is equivalent to the ARP cache in
IPv4.
22. INFT3007
Conceptual Host Data
Structures (contd.)
Destination cache The destination cache
stores information on next-hop IP
addresses for destinations to which traffic
has recently been sent.
Each entry in the destination cache contains
the destination IP address (either local or
remote), the previously resolved next-hop
IPaddress, and the path MTU for the
destination.
23. INFT3007
Conceptual Host Data
Structures (contd.)
Prefix list The prefix list contains on-link
prefixes. Each entry in the prefix list
defines a range of IP addresses for
destinations that are directly reachable
(neighbors).
This list is populated from prefixes advertised
by routers using the Router Advertisement
message.
24. INFT3007
Conceptual Host Data
Structures (contd.)
Default router list IP addresses
corresponding to on-link routers that have
sent Router Advertisement messages and
that are eligible to be default routers are
included in the default router list.
27. INFT3007
Address Resolution
The address resolution process for IPv6
nodes consists of an exchange of
Neighbor Solicitation and Neighbor
Advertisement messages to resolve the
link-layer address of the on-link next-
hop address for a given destination.
28. INFT3007
Address Resolution (contd.)
The sending host sends a multicast Neighbor
Solicitation message on the appropriate
interface.
The multicast address of the Neighbor Solicitation
message is the solicited node multicast address
derived from the target IP address.
The Neighbor Solicitation message includes the link-layer
address of the sending host in the Source Link-Layer
Address option
When the target host receives the Neighbor
Solicitation message, it updates its own
neighbor cache.
29. INFT3007
Address Resolution (contd.)
Next, the target node sends a unicast
Neighbor Advertisement to the Neighbor
Solicitation sender.
The Neighbor Advertisement includes the Target
Link-Layer Address option.
After receiving the Neighbor Advertisement
from the target, the sending host updates its
neighbor cache
At this point, unicast IPv6 traffic between the
sending host and the target of the Neighbor
Solicitation can be sent.
30. INFT3007
Address Resolution Example
Host A wants to send a message to Host B
Host A
MAC: 00-10-5A-AA-20-A2
Host A’s link-local: FE80::210:5AFF:FEAA:20A2
Host B
MAC: 00-60-97-02-6E-A5
Host B’s link-local: FE80::260:97FF:FE02:6EA5
To send a packet to Host B, Host A must first
use address resolution to resolve Host B’s
link-layer address
32. INFT3007
Address Resolution Example
(contd.)
Host B, having registered the multicast
MAC address of 33-33-FF-02-6E-A5 with
its Ethernet adapter, receives and
processes the Neighbor Solicitation
message.
Host B responds with a unicast
Neighbor Advertisement message
34. INFT3007
Duplicate Address Detection
In IPv6 duplicate address detection, the
Target Address field in the Neighbor
Solicitation message is set to the IPv6
address for which duplication is being
detected.
35. INFT3007
Duplicate Address Detection
(contd.)
Duplicate address detection differs from
address resolution in the following
ways:
In the duplicate address detection
Neighbor Solicitation message, the Source
Address field in the IPv6 header is set to
the unspecified address (::).
The address being queried for duplication
cannot be used until it is determined that there
are no duplicates.
36. INFT3007
Duplicate Address Detection
(contd.)
In the Neighbor Advertisement reply to a
duplicate address detection Neighbor
Solicitation message, the Destination
Address in the IPv6 header is set to the
link-local scope all-nodes multicast address
(FF02::1).
Because the sender of the duplicate address
detection Neighbor Solicitation message is not
using the desired IP address, it cannot receive
unicast Neighbor Advertisements. Therefore,
the Neighbor Advertisement is multicast.
37. INFT3007
Duplicate Address Detection
(contd.)
Upon receipt of the multicast Neighbor
Advertisement with the Target Address field
set to the IP address for which duplication is
being detected, the node disables the use of
the duplicate IP address on the interface.
If the node does not receive a Neighbor
Advertisement that defends the use of the
address, it initializes the address on the
interface.
38. INFT3007
Duplicate Address Detection
Example
Host B has a global address of
2001:DB8::2:260:8FF:FE52:F9D8.
Host A is attempting to use the global
address of
2001:DB8::2:260:8FF:FE52:F9D8.
However, before Host A can use this
address, it must verify its uniqueness
through duplicate address detection.
40. INFT3007
Duplicate Address Detection
Example (contd.)
Host B, having registered the multicast
MAC address of 33-33-FF-52-F9-D8 with
its Ethernet adapter, receives and
processes the Neighbor Solicitation
message.
Host B notes that the source address is
the unspecified address. Host B then
responds with a multicast Neighbor
Advertisement message
42. INFT3007
Redirect Function
Routers use the redirect function to
inform originating hosts of a better first-
hop neighbor to which traffic should be
forwarded for a specific destination.
43. INFT3007
Redirect Function (contd.)
There are two instances where redirect
is used:
1. A router informs an originating host of
the IP address of a router available on the
local link that is “closer” to the destination.
This condition can occur when there are
multiple routers on a network segment, and the
originating host chooses a default router and it
is not the better (“closer”) one to use to reach
the destination.
44. INFT3007
Redirect Function (contd.)
2. A router informs an originating host that
the destination is a neighbor. (That is, it is
on the same link as the originating host.)
This condition can occur when the prefix list of
a host does not include the prefix of the
destination. Because the destination does not
match a prefix in the list, the originating host
forwards the packet to its default router.
45. INFT3007
Redirect Process
The following steps occur in IPv6 Redirect
process:
1. The originating host forwards a unicast
packet to its default router.
2. The router processes the packet and notes
that the address of the originating host is a
neighbor. Additionally, it notes that both the
originating host’s address and the next-hop
address are on the same link.
46. INFT3007
Redirect Process (contd.)
3. The router sends the originating host a
Redirect message.
In the Target Address field of the Redirect
message is the next-hop address of the node to
which the originating host should send
subsequent packets addressed to the
destination.
4. The router forwards the received packet
to the appropriate next-hop address, using
address resolution if needed to obtain the
link-layer address of the next hop.
47. INFT3007
Redirect Process (contd.)
For packets redirected to a router, the Target
Address field is set to the link-local address of the
router. For packets redirected to a host, the
Target Address field is set to the destination
address of the packet originally sent.
5. Upon receipt of the Redirect message, the
originating host updates the destination
address entry in the destination cache with
the address in the Target Address field.
If the Target Link-Layer Address option is included
in the Redirect message, its contents are used to
create or update the corresponding neighbor
48. INFT3007
Redirect Example
Host A
MAC - 00-AA-00-11-11-11
Link-local - FE80::2AA:FF:FE11:1111
Global: 2001:DB8::1:2AA:FF:FE11:1111
Router 2
MAC - 00-AA-00-22-22-22
Link-local - FE80::2AA:FF:FE22:2222
Global: 2001:DB8::1:2AA:FF:FE22:2222
Router 3
MAC - 00-AA-00-33-33-33
Link-local - FE80::2AA:FF:FE33:3333
Global: 2001:DB8::1:2AA:FF:FE33:3333
49. INFT3007
Redirect Example (contd.)
Host A sends a packet to an off-link host at
2001:DB8::2:2AA:FF:FE99:9999 (not shown
in Figure 6-25) and uses Router 2 as its
current default router. However, Router 3 is
the better router to use to reach this
destination.
Host A performs address resolution if needed
and sends the packet destined to
2001:DB8::2:2AA:FF:FE99:9999 to Router 2
51. INFT3007
Redirect Example (contd.)
Router 2 receives the packet from Host A and
notes that Host A is a neighbor.
It also notes that Host A and the next-hop
address for the destination are on the same
link.
To inform Host A that subsequent packets to
the destination of
2001:DB8::2:2AA:EE:FE99:9999 should be
sent to Router 3, Router 2 performs address
resolution if needed and sends a Redirect
message to Host A
53. INFT3007
Redirect Example (contd.)
Based on the contents of its local routing
table, Router 2 performs address resolution if
needed and forwards the unicast packet
received from Host A to Router 3
54. INFT3007
Neighbor Unreachability
Detection
A neighboring node is reachable if there has
been a recent confirmation that IPv6 packets
sent to the neighboring node were received
and processed by the neighboring node.
Neighbor unreachability does not necessarily
verify the end-to-end reachability of the
destination.
Because a neighboring node can be a router and
not be the final destination of the packet.
Neighbor unreachability verifies only the
reachability of the first hop to the destination.
55. INFT3007
Neighbor Unreachability
Detection (contd.)
The exchange of Neighbor Solicitation
and Neighbor Advertisement messages
confirms only the reachability of the
node that sent the Neighbor
Advertisement from the node that sent
the Neighbor Solicitation. Not vice-
versa.
56. INFT3007
Neighbor Unreachability
Detection (contd.)
For example, if Host A sends a unicast Neighbor
Solicitation to Host B and Host B sends a solicited
unicast Neighbor Advertisement to Host A, Host A
considers Host B reachable.
Because there is no confirmation in this exchange that Host
A actually received the Neighbor Advertisement, Host B does
not consider Host A reachable.
To confirm reachability of Host A from Host B, Host B
must send its own unicast Neighbor Solicitation to
Host A and receive a solicited unicast Neighbor
Advertisement from Host A.
57. INFT3007
Neighbor Unreachability
Detection (contd.)
Another method of determining reachability is when
upper-layer protocols indicate that the
communication using the next-hop address is making
forward progress.
For TCP traffic, forward progress is determined when
acknowledgement segments for sent data are
received.
The end-to-end reachability confirmed by the receipt
of TCP acknowledgments implies the reachability of
the first hop to the destination.
The TCP module provides these indications to the
IPv6 module on an ongoing basis
58. INFT3007
Router Discovery
Router discovery is the process through
which nodes attempt to discover the set
of routers on the local link.
59. INFT3007
Router Discovery Process
IPv6 routers pseudo-periodically send a
Router Advertisement message on the
local link advertising their existence as
routers.
They also provide configuration
parameters such as default hop limit,
MTU, prefixes, and routes
60. INFT3007
Router Discovery Process
(contd.)
Active IPv6 hosts on the local link
receive the Router Advertisement
messages and use the contents to
maintain the default router and prefix
lists, autoconfigure addresses, add
routes, and configure other parameters
61. INFT3007
Router Discovery Process
(contd.)
A host that is starting sends a Router
Solicitation message to the link-local scope
all-routers multicast address (FF02::2).
If the starting host is already configured with
a unicast address, the Router Solicitation is
sent with a unicast source address.
Otherwise, the Router Solicitation is sent with
an unspecified source address (::).
62. INFT3007
Router Discovery Process
(contd.)
Upon receipt of a Router Solicitation
message, all routers on the local link send a
Router Advertisement message either to the
unicast address of the host that sent the
Router Solicitation (if the source address of
the Router Solicitation is a unicast address) or
to the link-local scope all-nodes multicast
address (FF02::1) (if the source address of
the Router Solicitation message is
unspecified).
63. INFT3007
Router Discovery Process
(contd.)
The host receives the Router
Advertisement messages and uses their
contents to build the default router and
prefix lists and set other configuration
parameters.
64. INFT3007
Router Discovery Example
Host A
MAC Address: 00-B0-D0-E9-41-43
Router
MAC Address: 00-10-FF-D6-58-C0
Link-local Address:
FE80::210:FFFF:FED6:58C0
65. INFT3007
Router Discovery Example
(contd.)
As part of the startup process, Host A sends a
multicast Router Solicitation message to the
address FF02::2 before it has confirmed the
use of its corresponding link-local address
66. INFT3007
Router Discovery Example
(contd.)
The router, having registered the
multicast MAC address of 33-33-00-00-
00-02 with its Ethernet adapter,
receives and processes the Router
Solicitation.
The router responds with a multicast
Router Advertisement message
containing configuration parameters
and local link prefixes