NETGEAR SRX5308-100NAS Switch User Manual


 
LAN Configuration
97
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Note: The reserved address is not assigned until the next time the
computer or device contacts the VPN firewall’s DHCP server.
Reboot the computer or device, or access its IP configuration and
force a DHCP release and renew.
Note: The saved binding is also displayed on the IP/MAC Binding screen
(see Figure 112 on page 188).
Manage the IPv6 LAN
DHCPv6 Server Options
Configure the IPv6 LAN
Configure the IPv6 Router Advertisement Daemon and Advertisement Prefixes for the
LAN
An IPv6 LAN typically functions with site-local and link-local unicast addresses. Each
physical interface requires an IPv6 link-local address that is automatically derived from the
MAC addresses of the IPv4 interface and that is used for address configuration and neighbor
discovery. (Normally, you would not manually configure a link-local address.)
Traffic with site-local or link-local addresses is never forwarded by the VPN firewall (or by any
other router), that is, the traffic remains in the LAN subnet and is processed over the default
VLAN only. A site-local address always starts with fec0 (hexadecimal); a link-local unicast
address always starts with FE80 (hexadecimal). To forward traffic from sources with a site
local or link-local unicast address in the LAN, a DHCP server is required. For more
information about link-local unicast addresses, see Configure ISATAP Automatic Tunneling
on page 64.
Because each interface is automatically assigned a link-local IP address, it is not useful to
assign another link-local IP address as the default IPv6 LAN address. The default IPv6 LAN
address is a site-local address. You can change this address to any other IPv6 address for
LAN use.
Note: Site-local addresses, that is, addresses that start with fec0, have
been depreciated. However, NETGEAR has implemented a
site-local address as a temporary default IPv6 LAN address that you
can replace with another LAN address. The firewall restricts external
communication of this default site-local address.