NDP Proxy and DAD Proxy

Neighbor Discovery Protocol (NDP) proxy functionality enables packet forwarding among hosts that are in the same subnet and restricted from communicating directly with each other. NDP proxy is required when you want to enable a host device on different physical segments with same subnet to communicate without an additional gateway and prefix. NDP proxy is like node or a router in the middle of multiple segments with same prefix. Duplicate Address Detection (DAD) proxy functionality enables a device to respond to DAD queries for a node that cannot communicate directly with other nodes in the same subnet.

Use the following commands to enable NDP and DAD proxies: 

• set interfaces interface-name family inet6 proxy-ndp 
• set interfaces interface-name family inet6 proxy-dad 

Use the following commands to disable NDP and DAD proxies: 

• set protocols neighbor-discovery proxy-ndp no-proxy-on-resolve 
• set protocols neighbor-discovery proxy-dad no-proxy-on-resolve 

The show system statistics icmp6 command is enhanced to add the following statistics: 

• interface-restricted ndp proxy requests 
• interface-restricted dad proxy requests 
• interface-restricted ndp proxy responses 
• interface-restricted dad proxy conflicts 
• interface-restricted dad proxy duplicates 
• interface-restricted ndp proxy resolve requests 
• interface-restricted dad proxy resolve requests 
• interface-restricted dad packets from same node dropped 
• interface-restricted proxy packets dropped with nomac