Link-local and ACLs

[Tore Anderson]

* David Farmer

> I think that means the Target address, and therefore the destination 
> address of the packet, could be a Link-Local, GUA, or ULA address, 
> and the source of the packet could be a Link-local address.

The source address could very well be GUA or ULA, too:

«If the source address of the packet prompting the solicitation is the
same as one of the addresses assigned to the outgoing interface, that
address SHOULD be placed in the IP Source Address of the outgoing
solicitation.»

https://tools.ietf.org/html/rfc4861#section-7.2.2

> When would a Neighbor Solicitations not using the Solicited-Node 
> Multicast Address normally occur?

During NUD, at least:

«Upon entering the PROBE state, a node sends a unicast Neighbor
Solicitation message to the neighbor using the cached link-layer address.»

https://tools.ietf.org/html/rfc4861#section-7.3.3

Tore