neighbor-discovery
Syntax
neighbor-discovery
dad-proxy {
no-proxy-on-resolve;
}
ndp-proxy {
no-proxy-on-resolve;
proxy-force-resolve;
}
no-dad-on-state-change;
onlink-subnet-only;
secure {
security-level {
(default | secure-messages-only);
}
cryptographic-address {
key-length number;
key-pair pathname;
}
timestamp {
clock-drift number;
known-peer-window number;
new-peer-window number;
}
traceoptions {
file filename <files number> <match regular-expression> <size size> <world-readable | no-world-readable>;
flag flag;
no-remote-trace;
}
}
}
Hierarchy Level
[edit protocols]
Description
Enabling tracing can adversely impact scale and performance and may increase security risk. We strongly recommend using the trace, tracing, or traceoptions commands only under the guidance of a JTAC support engineer. After collecting the debug information, immediately disable tracing to minimize risk and restore normal system performance.
Enable Secure Neighbor Discovery.
Options
| dad-proxy |
Configure DAD proxy behaviour.
|
| ndp-proxy |
Configure NDP proxy behaviour.
|
| no-dad-on-state-change |
Disable DAD on interface state change. |
The remaining statements are explained separately. See CLI Explorer.
Default
Disabled
Required Privilege Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 9.3.
Option
proxy-force-resolve introduced onn SRX Series and vSRX Virtual Firewall 3.0
platforms in Junos OS Release 22.1R1.