Hello,
I need the Neighbour Discovery Protocol (NDP) to be activated on my machines in order to communicate to the internet via IPv6 and accept incoming connections over IPv6. For this the machine needs to broadcast Router Solicitations and receive Router Advertisements. Activating NDP in the firewall settings of my PVE also enables Neighbor Solicitation and Neighbor Advertisement. As of my understanding this is needed for the Router<->VM relation to make the machine known to the router (get incoming ipv6 connections) but I want to prevent the machines from discovering each other. For this I tried a workaround in the past:
I need the Neighbour Discovery Protocol (NDP) to be activated on my machines in order to communicate to the internet via IPv6 and accept incoming connections over IPv6. For this the machine needs to broadcast Router Solicitations and receive Router Advertisements. Activating NDP in the firewall settings of my PVE also enables Neighbor Solicitation and Neighbor Advertisement. As of my understanding this is needed for the Router<->VM relation to make the machine known to the router (get incoming ipv6 connections) but I want to prevent the machines from discovering each other. For this I tried a workaround in the past:
- I deactivated NDP in the firewall GUI
- I set the following rules in a security group on datacenter level which I can assign to the machines that should do ipv6:
