multicast traffic
Click on the red underlined text to get to the source
... link-local
(e.g., Neighbor Discovery) and multicast traffic. Without this,
an attacker can pollute the IPv6 ...
... link-local
traffic multicast traffic would need to be identified, possibly
resulting in a long list of SPD entries. The second requirement ...
... tunnel is a much simpler
solution and also easily protects link-local and multicast traffic,
we do not recommend using tunnel mode in this context ...