RFC 4890:Recommendations for Filtering ICMPv6 Mess...
RFC-Ref

interface


Click on the red underlined text to get to the source

... role including being an essential component in establishing and maintaining communications both at the interface level and for sessions to remote nodes ...
... These messages are also used to check the uniqueness of any addresses that an interface proposes to use (Duplicate Address Detection - DAD). Four messages -- Neighbor Solicitation ...
... IPv6 addresses associated with the link layer address of an interface (the inverse of Neighbor Discovery, where the link layer address ...


... valid address is available on the interface. If a valid link-local address ...
... also be acting as a router so that all the messages that might be used in configuring a router interface need to be accepted and generated. These messages should not transit through a firewall that ...


... link, it might be possible to invalidate legitimate addresses or disable interfaces. ...


... o Rules for ICMPv6 directed to interfaces on the firewall ...
... link-local messages that need to be allowed through are those directed to the host's interface. ...
... global unicast addresses, of interfaces on the local link. No special action is needed to filter ...
... ICMPv6 traffic addressed to an interface on a firewall. For a small number of messages, the desired behavior may differ between interfaces ...
... interface on a firewall. For a small number of messages, the desired behavior may differ between interfaces on the site or private side of the firewall and the those on the public Internet ...
... node and maintaining unicast and multicast communications through the interfaces of a node. These messages must not be dropped if the node ...
... It may be desirable to drop these messages, especially on public interfaces, if the firewall is not also providing mobile home agent ...
... special circumstances, such as if Redirect messages are accepted on private interfaces but not public ones. If a node ...
... node should respond to or accept Node Information messages on each interface: o Node ...


... Firewalls need to generate and accept these messages to allow them to establish and maintain interfaces onto their connected links. ...
... firewall will generally be behaving as a router) and accept these messages to allow them to establish and maintain interfaces onto their connected links. ...
... that also act as multicast routers need to process these messages on their interfaces. ...
... firewall but should not be accepted for local delivery on any of its interfaces. Unknown ICMPv6 Error messages ...



Google
Web
RFC-Ref