A technique similar to the one that prevents ARP cache poisoning (in IPv6 ND cache poisoning) is ossible but it requires DHCPv6 snooping. Firewalls can enforce the DHCPv6 usage and make the HCPv6 address assignment the default method, thus making DHCPv6 snooping easier to mplement.Currently no DHCPv6 snooping support is available for any networking device.

IPv6 can provide an option to prevent ND cache poisoning in the case of stateless autoconfiguration ia snooping the Neighbour Solicitation and Neighbour Advertisement messages: Neighbour olicitation messages contain an informational pair [source_IPv6, source_MAC] that can be stored, hile Neighbour Advertisement messages contain two informational pairs: [source_IPv6, ource_MAC] and [destination_IPv6, destination_MAC] which can be also stored. Any case of a ismatch can be diagnosed from the previously stored ND entry and the switch can disable the busing port. A "light version" of the above protocol can be implemented in Firewalls: detect and eport ND entry changes i.e. different IP address with same MAC address etc.