Question 440
At fictional Fernstone Logistics, during a dual-stack transit pilot, engineers report: Two adjacent IPv6 devices have valid unicast addresses, but ping fails because an ACL blocks required ICMPv6 neighbor discovery messages. Which ongoing control would most directly detect or prevent the same failure from recurring?
Explanation
Correct Answer
Test ICMPv6 neighbor discovery after applying IPv6 filters or host-security policies. This monitors the behavior that failed at Fernstone Logistics; the most useful acceptance signal is that neighbor Solicitation and Advertisement complete and the destination's link-layer neighbor entry becomes usable.
Incorrect Answers
The control protects IPv6 static next-hop scope. It does not establish the ongoing IPv6 neighbor discovery filtering behavior required in this network. IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist.
Track IPv4 and IPv6 IS-IS reachability separately in dual-stack health checks. The monitored boundary differs from IPv6 neighbor discovery filtering, so the original weakness might reappear unnoticed. IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist.
The control protects RSVP PATH and RESV signaling. It does not establish the ongoing IPv6 neighbor discovery filtering behavior required in this network. IPv6 Neighbor Discovery uses ICMPv6 to resolve on-link next hops; blocking it disrupts forwarding even if static routes exist.