About ND attack defense

IPv6 Neighbor Discovery (ND) attack defense is able to identify forged ND messages to prevent ND attacks.

The IPv6 ND protocol does not provide any security mechanisms and is vulnerable to network attacks. As shown in Figure 168, an attacker can send the following forged ICMPv6 messages to perform ND attacks:

Figure 168: ND attack diagram