NETGEAR ProSAFE SRX5308 Reference Manual page 123

Hosts and routers in the LAN use NDP to determine the link-layer addresses and related
information of neighbors in the LAN that can forward packets on their behalf. The VPN
firewall periodically distributes router advertisements (RAs) throughout the DMZ to provide
such information to the hosts and routers in the DMZ. RAs include IPv6 addresses, types of
prefixes, prefix addresses, prefix lifetimes, the maximum transmission unit (MTU), and so on.
In addition to configuring the RADVD, you also need to configure the prefixes that are
advertised in the DMZ RAs.
The following table provides an overview of how information is obtained in the DMZ when you
have configured a stateless DHCPv6 server and the RADVD:
Table 26. DHCPv6 and RADVD interaction in the DMZ
Flags in the RADVD
Managed RA flag is set
Other RA flag is set
When the Managed flag is set in the RADVD, the DHCPv6 server can assign IP addresses,
and the RADVD also assigns IP addresses in the sense that it provides information that
allows IPv6 clients to configure their own IPv6 address.
When the Other flag is set, the DHCPv6 server does not assign IP addresses but provides
DNS server and other configuration information only.

To configure the Router Advertisement Daemon for the DMZ:
1. Select Network Configuration > DMZ Setup.
2. In the upper right of the screen, select the IPv6 radio button. The DMZ Setup screen
displays the IPv6 settings (see
3. Click the RADVD option arrow to the right of the DMZ Setup tab. The RADVD screen for the
DMZ displays. (The following figure contains some examples.)
ProSAFE Gigabit Quad WAN SSL VPN Firewall SRX5308
DHCPv6 Server Provides
• IP address assignment
• DNS server and other configuration
information
DNS server and other configuration information
Figure 65
LAN Configuration
RADVD Provides
•
•
•
•
•
•
•
•
on page 119).
123
IP address assignment
Prefix
Prefix length
Gateway address
IP address assignment
Prefix
Prefix length
Gateway address