How to secure ND

• ND takes place on-link (between adjacent nodes)

• ND messages are not to be routed

• Routers decrement TTL (Hop Count)

• TTL < 255 may mean 'the packet was routed' (NB: «0 – 1=255»!!)

• Generalized TTL Security Mechanism (GTSM) (RFC5082)