Nokia IPSO 4.0 manual Configuring Vrrp for IPv6

14.(Optional) To specify that the IPv6 prefix can be used for autonomous address configuration, click Yes in the Autonomous Flag field.

15.(Optional) Enter a value (in seconds) in the Prefix Valid Lifetime text box for the prefix information options valid lifetime field.

This value represents the length of time—relative to the time the packet is sent—that the prefix is valid for the purpose of on-link determination.

16.(Optional) Enter a value (in seconds) in the Prefix Preferred Lifetime text box for the prefix information options preferred lifetime field.

This value represents the length of time—relative to the time the packet is sent—that addresses that are generated by the prefix through stateless autoconfiguration remain preferred.

17.Click Apply.

18.Click Save to make your changes permanent.

VRRP for IPv6

Configuring VRRP for IPv6

Beginning with IPSO 3.8.1, Nokia supports VRRP configuration for IPv6 interfaces. Nokia supports VRRP version 3, which is based on VRRP version 2 as defined for IPv4 in RFC 3768, and Monitored Circuit.

Unlike VRRP version 2, VRRP version 3 does not support authentication, and the advertisement interval in the VRRP packet is 12 bits rather than eight bits. Also, for both VRRP version 3 and Monitored Circuit for IPv6 interfaces, the hello interval is measured in centiseconds rather than seconds. In version 3, the first address in the packet must be an IPv6 link-local address. For general information about VRRP, see “Virtual Router Redundancy Protocol (VRRP)” on page 183.

For more information about how to configure Check Point NG with Application Intelligence for VRRP for IPv6 see, “Configuring Check Point NGX for VRRP” on page 197

Note

Check Point NG with Application Intelligence does not support user, session, or client authentication for IPv6 interfaces.

Also, Check Point NG does not support state synchronization for IPv6 interfaces. When a master router of a VRRP pair fails, and the backup router becomes the new master, all previously established connections are lost because state synchronization does not occur.

As part of the new support of VRRP for IPv6 interfaces, only the router in a VRRP master state sends router discovery advertisements, and the advertisements are sent with the virtual IP address as the source address and the virtual MAC address as the MAC address. Routers in a VRRP backup state do not send router discovery advertisements. When VRRP failover occurs,

Nokia Network Voyager for IPSO 4.0 Reference Guide 277