What is the use of IPv6 snooping?
What is the use of IPv6 snooping?
IPv6 snooping is required for the operation of IPv6 RA (Router Advertisement) Guard. RA Guard is a security feature that allows a network to drop or filter out unwanted or malicious Router Advertisement messages that can disrupt network operation. IPv6 snooping is used to inspect and process these Router Advertisement messages, ensuring that only legitimate ones are accepted. This makes it a prerequisite for RA Guard to function properly.
D: correct IPv6 Snooping IPv6 snooping captures the IPv6 traffic and helps in populating the binding table. It gathers addresses in control messages such as Neighbor Discovery Protocol (NDP) or Dynamic Host Configuration Protocol (DHCP) packets. Depending on the security level, it blocks unwanted messages such as Router Advertisements (RA) or DHCP replies. This feature is a pre-requisite to the remaining security features mentioned here. https://www.cisco.com/c/en/us/td/docs/routers/7600/ios/15S/configuration/guide/7600_15_0s_book/IPv6_Security.html
Agree on TonyTe0 explanation
D is wrong answer, but the best of all options as it does NOT capture "ANY" traffic, it only capture DHCPV6 traffic to create binding table entries
IPv6 Snooping Enabled: IPv6 RA Guard relies on IPv6 snooping to inspect and filter IPv6 Router Advertisement (RA) messages received on Layer 2 interfaces. Therefore, IPv6 snooping must be enabled on the switch where RA Guard is configured.