Hi all,
I just configured IPv6 (dual-stack) on an ASA in version 9.0x.
After few hours, I've seen the following messages in the logs :
Dec 22 2014 12:07:13: %ASA-1-106021: Deny IPv6-ICMP reverse path check from :: to ff02::16 on interface xxxxx
Dec 22 2014 12:07:17: %ASA-1-106021: Deny IPv6-ICMP reverse path check from :: to ff02::1:ffe8:abcd on interfacexxxx
....
After some researches, I found that this type of packet rely on IPv6 MLDv2 reports and Neighbor Solicitation messages from devices connected on the interface..
The source is "::" but it's a normal behavior in both cases. As described in the following RFC : http://tools.ietf.org/html/rfc3810#section-5.2.13 for MLDv2.
=> So, uRPF is dropping "normal" IPv6 multicast packets.
Does someone else saw this issue ?
I have done some searches in release notes and bug search tool and found nothing about this issue.
Thanks.
