Question

An access switch is configured with IPv6 ND inspection on VLAN 30. After enabling the feature, several legitimate hosts on VLAN 30 that use manually configured static IPv6 addresses lose connectivity, while hosts using SLAAC and DHCPv6 work fine. The binding table shows entries only for the SLAAC and DHCPv6 hosts. Which explanation best accounts for this behavior?

Accepted Answer

ND inspection validates neighbor discovery messages against the binding table; statically addressed hosts have no learned binding entry, so their NA/NS messages are dropped and neighbor resolution fails.

Answer

ND inspection only functions on trunk ports, so the statically addressed hosts connected to access ports are automatically blocked.

Answer

ND inspection requires RA guard to be enabled first; without it, all statically configured addresses are treated as spoofed and dropped.

Answer

ND inspection disables ICMPv6 entirely on the VLAN, which prevents static hosts from performing duplicate address detection.