Question

A network administrator is adding ACLs to a new IPv6 multirouter environment. Which IPv6 ACE is automatically added implicitly at the end of an ACL so that two adjacent routers can discover each other? permit ip any host ip_address permit icmp any any nd-na permit ip any any deny ip any any

Answer 1

The implicit IPv6 ACE added at end of an ACL for router discovery is 'permit icmp any any nd-na', allowing Neighbor Advertisement as part of NDP.

Step-by-step explanation:

When a network administrator is adding Access Control Lists (ACLs) to a new IPv6 multi-router environment, an implicitly added IPv6 Access Control Entry (ACE) at the end of an ACL enables routers to discover each other. This ACE permits IPv6 Neighbour Discovery packets, which is essential for router advertisement and solicitation messages. The correct implicitly added ACE is permit icmp any any nd-na, which allows the Neighbour Advertisement messages that are part of the Neighbour Discovery Protocol (NDP) to be exchanged between the adjacent routers.