Keep Neighbor Discovery on its trust boundary
05Link-local checks limit some remote injection but do not authenticate every local sender.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 11 ↗
RFC 4861 · § 11EXAMPLE
3 / 3
03
A valid Hop Limit alone still does not prove a trusted router identity.
A valid Hop Limit alone still does not prove a trusted router identity.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
RFC 2461RFC 4861 Appendix F
The revision removes assumptions about IPsec AH/ESP in message validation and adds a separate securing-ND discussion.
Read the updated RFC section ↗ND messages have message-specific validation, including Hop Limit 255.
- ND messages have message-specific validation, including Hop Limit 255.
- An on-link attacker can still forge valid-looking control traffic without additional protection.
The drawing is a simplified worked example. Follow the linked RFC and its updates for implementation requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy