opn_add_icmpv6_rules
Creates ICMPv6 firewall rules required for IPv6 operation, including Neighbor Discovery and Router Advertisements, to prevent IPv6 connectivity failures.
Instructions
Create essential ICMPv6 firewall rules required for IPv6 operation.
Use this when setting up IPv6 on an interface. ICMPv6 is MANDATORY for IPv6 — without it, Neighbor Discovery (NDP), Router Advertisements (RA), and Path MTU Discovery (PMTUD) all break.
Creates 5 rules per RFC 4890:
NDP Neighbor Solicitation (link-local -> multicast)
NDP Neighbor Advertisement (link-local -> any)
NDP Router Solicitation (link-local -> all-routers multicast)
NDP Router Advertisement (link-local -> all-nodes multicast)
ICMPv6 Echo (ping6) inbound
All rules use savepoint protection — auto-revert in 60 seconds unless confirmed with opn_confirm_changes.
Parameters:
interface: target interface (e.g. 'lan', 'opt1', 'opt2')
Returns: dict with 'revision' (str), 'rules' (list of created UUIDs), and instructions to confirm.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| interface | No | lan |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||