What Is Stateless Address Autoconfiguration in Networking?
Also known as: Stateless Address Autoconfiguration, SLAAC, IPv6 autoconfiguration, Network+ SLAAC, CCNA SLAAC
This page mentions older exam versions. See the Current Exam Context and Legacy Exam Context sections below for the updated mapping.
On This Page
Quick Definition
SLAAC lets a device automatically create its own IP address when it connects to a network, using information from the router. It is like a new office worker reading a department directory and assigning themselves a desk number from the available range. No central server is required to hand out addresses, which makes it simple and efficient.
Must Know for Exams
SLAAC is a high-yield topic for both the CompTIA Network+ (N10-008 and N10-009) and Cisco CCNA (200-301) certification exams. On the Network+ exam, SLAAC appears in Domain 1.0 Networking Fundamentals, specifically under IPv6 addressing and autoconfiguration.
Candidates must understand the difference between stateless and stateful addressing, know that SLAAC uses Router Advertisements, and recognize that SLAAC does not provide DNS server information. Exam questions often ask which protocol allows devices to automatically obtain an IPv6 address without a DHCP server. The correct answer is SLAAC.
For CCNA, SLAAC is covered in the IPv6 section of the exam blueprint. Cisco expects candidates to understand how SLAAC works, including the roles of Router Solicitation and Router Advertisement messages, the process of Duplicate Address Detection, and how EUI-64 generates the interface identifier. Candidates may be asked to configure IPv6 on a Cisco router with the ipv6 unicast-routing command and other SLAAC-related settings.
Both exams test SLAAC in multiple-choice questions, scenario-based questions, and sometimes in simulation or lab environments. In scenario questions, you might be given a network diagram where devices are using SLAAC, and you need to identify what information the router provides versus what the device generates. Another common question pattern describes a network where users cannot browse the internet even though they have IPv6 addresses from SLAAC.
The answer is often that SLAAC did not provide the DNS server address, and the network lacks a stateless DHCPv6 server or manual DNS configuration. Trap questions may confuse SLAAC with DHCPv6, or suggest that SLAAC uses a central server. Some questions test the O (Other) and M (Managed) flags in Router Advertisements.
The M flag indicates that the host should use stateful DHCPv6 for address assignment, while the O flag indicates that DHCPv6 should be used for other configuration parameters like DNS. When both flags are set to zero, SLAAC is used. Understanding these flags is critical for exam success.
Additionally, candidates should know that SLAAC is defined in RFC 4862, that the default gateway comes from the router's link-local address, and that the prefix is typically a /64. For CCNA, candidates may also need to know how to verify SLAAC operation using show commands, such as show ipv6 interface and show ipv6 routers. Given the importance of IPv6 in modern networks, SLAAC is a topic that appears regularly, and exam candidates must be prepared to answer questions about its operation, advantages, limitations, and comparison with DHCPv6.
Simple Meaning
Imagine you move into a brand new apartment building. You do not have an apartment number yet. The building manager puts up a sign in the lobby that says, all apartments on floors 2 through 10 use numbers starting with 200, and the apartments here all begin with the prefix 2001:db8.
You then decide on your own unique apartment number, say 2001:db8:a1b2. You check to make sure nobody else in the building is using that number by knocking on the door and listening. If nobody answers, you put your name on that door and start living there.
That is essentially what SLAAC does. It is like a do-it-yourself address assignment system for devices connecting to an IPv6 network. The router announces the network prefix, which is like the building address and floor range, and each device picks its own unique host part, like the apartment number.
The device then verifies that no other device on the network is using that same full address before it starts using it. This process is automatic and requires no human intervention or a central DHCP server to keep track of who has which address. The device creates its address from two parts: the network prefix provided by the router, and its own interface identifier, often derived from its MAC address.
This is why it is called stateless. There is no server keeping a state or a list of assignments. Each device is responsible for its own address and for checking uniqueness. This approach is simple, scalable, and reduces administrative overhead.
It works well for home networks, mobile devices, and large enterprise environments where many devices come and go. SLAAC is defined in RFC 4862 and is a core feature of IPv6. It is one of the main reasons IPv6 can handle the huge number of devices expected in the Internet of Things, because it automates address configuration without needing a central authority for every single address assignment.
Full Technical Definition
Stateless Address Autoconfiguration (SLAAC) is a mechanism defined in RFC 4862 that enables an IPv6 host to automatically configure its own global unicast or link-local address without relying on a stateful configuration protocol such as DHCPv6. SLAAC operates in two primary phases: prefix discovery and address formation, followed by duplicate address detection (DAD). During prefix discovery, the host sends a Router Solicitation (RS) message to the all-routers multicast address ff02::2.
The router responds with a Router Advertisement (RA) message, which contains the network prefix, prefix length, and other configuration parameters such as default gateway and hop limit. The RA message may also indicate whether the host should use SLAAC, stateful DHCPv6, or a combination. The host then forms its address by concatenating the advertised prefix with a 64-bit interface identifier.
This identifier is typically derived from the MAC address using the EUI-64 format, which inserts 0xFF and 0xFE in the middle of the MAC address and inverts the universal/local bit. Alternatively, the host may use a randomly generated identifier for privacy, as specified in RFC 7217 and RFC 4941. After forming the tentative address, the host performs Duplicate Address Detection (DAD) by sending a Neighbor Solicitation (NS) message to the solicited-node multicast address of the tentative address.
If no Neighbor Advertisement (NA) is received in response, the address is assumed to be unique and is assigned to the interface. The host can then begin communicating using that address. SLAAC is stateless, meaning the router does not maintain any record of which addresses have been assigned.
Each host manages its own address lifecycle. SLAAC is preferred in many IPv6 deployments because it simplifies network configuration and scales well. However, it does not provide DNS server information, so in many real-world implementations, SLAAC is combined with stateless DHCPv6 to deliver DNS resolver addresses.
SLAAC is mandatory for all IPv6 nodes. It is supported by all modern operating systems including Windows, Linux, macOS, iOS, and Android. In enterprise networks, network administrators often use RA flags to direct hosts to use SLAAC for addressing and DHCPv6 for additional parameters.
SLAAC is also a key enabler for IoT networks where devices must configure themselves without manual setup. The protocol is defined in the IPv6 Neighbor Discovery Protocol (NDP) and uses ICMPv6 message types 133 (RS), 134 (RA), 135 (NS), and 136 (NA). Understanding SLAAC is essential for CCNA and Network+ candidates because it is a core IPv6 concept that appears frequently in exam objectives related to addressing and autoconfiguration.
Real-Life Example
Think of a large office building with many employees who work at hot desks. When an employee arrives in the morning, there is no assigned desk number waiting for them. Instead, the office manager puts up a sign on each floor that says, this floor uses desks in the 2000 block, and the desks on the east wing all use the prefix BLUE.
The employee then walks to the east wing, picks an empty desk that looks free, and puts their name tag on it. Before settling in, the employee knocks on the desk and says, is anybody sitting here? If no one answers, they sit down and start working.
That is exactly what SLAAC does. The router is like the office manager, announcing the network prefix, which is the floor and wing designation. The device is like the employee, who picks a unique host identifier, which is the individual desk number.
The Duplicate Address Detection is like knocking and listening for a response. If another employee is already using that desk, the knocker hears an answer and must choose a different desk. This analogy highlights the stateless nature of the process.
The office manager does not keep a list of who is sitting where. Each employee is responsible for finding their own spot and ensuring it is not taken. This works well when there are many employees coming and going, because no central system has to track everyone.
In the same way, SLAAC works excellently for networks with many mobile devices, laptops, phones, and IoT sensors that frequently connect and disconnect. The building manager also posts a note saying, if you need the company directory, there is a directory server on the second floor. Similarly, SLAAC can be combined with DHCPv6 to provide DNS server addresses, because the RA message itself does not include DNS information.
The beauty of this analogy is that it shows how SLAAC is both simple and self-managing. No central authority bottleneck, no single point of failure, and no complex configuration. Just a prefix announcement and a bit of polite checking before using the address.
Why This Term Matters
SLAAC matters because it solves one of the biggest problems in networking: how to assign IP addresses to a massive and growing number of devices without overwhelming network administrators. In IPv4, address assignment typically required a DHCP server or manual configuration. Managing DHCP servers, scopes, leases, and exclusions added complexity and administrative overhead.
With SLAAC, IPv6 devices can configure themselves automatically when they connect to a network. This is crucial for modern IT environments where employees bring their own devices, IoT sensors are deployed by the thousands, and mobile devices frequently roam between networks. For network engineers, SLAAC reduces the need to maintain DHCP infrastructure, simplifies network onboarding, and improves scalability.
When a new device joins a network, it can have a usable IPv6 address within seconds, with no human interaction. This is particularly valuable in cloud infrastructure and data center environments where virtual machines and containers are spun up and torn down constantly. Each new instance can automatically configure its own IPv6 address using SLAAC, eliminating the need to pre-allocate addresses or run a DHCP service in every subnet.
SLAAC also enhances network resilience. Because there is no central DHCP server, there is no single point of failure for address assignment. If a DHCP server goes down in an IPv4 network, new devices cannot get addresses.
In IPv6 with SLAAC, devices still can autoconfigure even if the router is the only device providing the prefix. Additionally, SLAAC supports privacy extensions, which allow devices to generate temporary random addresses for outbound connections. This helps prevent tracking of devices based on their MAC address, which is important for security and privacy.
For cybersecurity professionals, understanding SLAAC is important because rogue Router Advertisements can be used in attacks. An attacker could send fake RAs to redirect traffic or perform man-in-the-middle attacks. RA Guard and other security measures are needed to protect against such threats.
In summary, SLAAC is a foundational IPv6 feature that reduces administrative burden, improves scalability, and enables the automatic configuration required for large-scale, dynamic networks. IT professionals working with IPv6 must understand SLAAC to design, troubleshoot, and secure modern networks.
How It Appears in Exam Questions
SLAAC appears in exam questions in several distinct formats. On the Network+ exam, multiple-choice questions often ask, what is the primary purpose of Stateless Address Autoconfiguration in IPv6? or which protocol allows IPv6 devices to automatically assign themselves an IP address without a central server?
The answer choices may include DHCPv6, SLAAC, APIPA, and BOOTP. The correct answer is SLAAC. Another common question type gives a scenario where a network administrator notices that devices can access the internet but cannot resolve domain names, and asks the candidate to identify the cause.
The answer is that SLAAC does not provide DNS server addresses. For CCNA, questions are more technical. A typical question might present a configuration snippet from a router interface and ask what the effect of the ipv6 nd prefix prefix /64 no-autoconfig command has.
The candidate must know that this command prevents hosts on that network from using SLAAC for that prefix. Another style presents a troubleshooting scenario: An engineer enables IPv6 on a router and configures the LAN interface with an IPv6 address. PCs on the LAN receive IPv6 addresses but cannot ping the default gateway.
The question asks why. The answer often involves missing the ipv6 unicast-routing command globally, which prevents the router from sending Router Advertisements. Simulation questions for CCNA may require the candidate to configure IPv6 on a router and verify that hosts on the attached LAN obtain addresses via SLAAC.
The candidate must enable IPv6 routing, assign an IPv6 address to the interface, and verify that PCs can autoconfigure. Drag-and-drop questions may ask the candidate to order the SLAAC process steps: Router Solicitation, Router Advertisement, Address Formation, Duplicate Address Detection, Address Assignment. Some questions focus on the flags in the Router Advertisement.
For instance, a question may state that a Router Advertisement has the Managed flag set to 1 and the Other flag set to 1. The candidate must conclude that hosts should use stateful DHCPv6 for both addressing and other parameters. Another tricky question might state that the O flag is set and the M flag is not set, and ask what the host should do.
The correct answer is that the host uses SLAAC for its address but uses DHCPv6 for additional configuration parameters like DNS. Candidates should also be prepared for questions that compare SLAAC with DHCPv6, or that ask which situation best suits SLAAC versus stateful DHCPv6. The correct answer for SLAAC is often in dynamic environments with many mobile devices or IoT sensors, where a stateless approach is beneficial.
Understanding the exact wording of questions and being able to eliminate wrong options based on the specific characteristics of SLAAC is key to success on these exams.
Practise Stateless Address Autoconfiguration Questions
Test your understanding with exam-style practice questions.
Example Scenario
A company called GreenTech has a large office with hundreds of employees who bring their own laptops and smartphones. The network team decides to deploy IPv6. They configure the core router, Router-GT, with an IPv6 address on the LAN interface and enable IPv6 routing.
When an employee named Priya opens her laptop in the conference room, her device automatically sends a Router Solicitation message to all routers on the network. Router-GT responds with a Router Advertisement that contains the IPv6 prefix 2001:db8:green::/64 and the default gateway address. Priya's laptop then uses its MAC address to generate a unique interface identifier and forms a tentative IPv6 address, 2001:db8:green:0:1234:5678:9abc:def0.
Before using this address, the laptop performs Duplicate Address Detection by sending a Neighbor Solicitation to check if any other device is already using that address. Since no other device responds, the laptop assigns that address to its network interface and begins communicating on the network. Priya can now browse the internet and access internal servers.
However, she notices that she cannot resolve any domain names. This is because SLAAC only provides the address and default gateway, not the DNS server. The network team later adds a stateless DHCPv6 server to provide DNS information, which solves the problem.
This scenario illustrates the complete SLAAC process from discovery to address assignment, as well as the well-known limitation that SLAAC does not deliver DNS server addresses. Candidates for Network+ and CCNA exams should be able to identify each step and understand what SLAAC provides and what it does not.
Common Mistakes
Thinking SLAAC uses a central server to assign addresses.
SLAAC is called stateless precisely because there is no central server keeping state. The router only provides the prefix. Each device generates its own address and verifies uniqueness locally.
Remember that SLAAC is like a do-it-yourself system. The router announces the network number, and each device picks its own host part. No server is involved in assigning the actual address.
Believing SLAAC provides DNS server addresses along with the IP address.
The Router Advertisement message in SLAAC does not include DNS server information. DNS configuration is a separate function that must be provided by stateless DHCPv6 or manual configuration.
Understand that SLAAC gives you an address and a default gateway. For DNS, you need either DHCPv6 (stateless) or manual setup. This is a classic exam trap.
Confusing SLAAC with APIPA (Automatic Private IP Addressing).
APIPA is an IPv4 fallback mechanism that assigns addresses in the 169.254.0.0/16 range when a DHCP server is unavailable. SLAAC is a primary IPv6 autoconfiguration method that uses Router Advertisements.
Remember that APIPA is only for IPv4 and only used when DHCP fails. SLAAC is the normal way IPv6 devices get their addresses. They are different protocols for different purposes.
Assuming SLAAC is the same as stateful DHCPv6.
Stateful DHCPv6 uses a DHCP server that keeps track of address assignments, similar to DHCP in IPv4. SLAAC has no such server. The host manages its own address.
Focus on the word stateless. If a server is keeping a record, it is not SLAAC. SLAAC is like a self-service kiosk; stateful DHCPv6 is like a receptionist who hands out keys and keeps a log.
Thinking Duplicate Address Detection is optional or not part of SLAAC.
DAD is a mandatory part of the SLAAC process. Without DAD, two devices could accidentally use the same address, causing network conflicts.
Always include DAD when describing SLAAC. The device must verify the address is unique before using it. It is not optional.
Exam Trap — Don't Get Fooled
An exam question states that an IPv6 host uses SLAAC to obtain its IP address. It asks what else the host automatically receives from this process. One attractive wrong answer is the DNS server address, because learners often assume that address configuration also includes DNS.
Memorize the specific components that SLAAC provides: an IPv6 address (prefix + self-generated interface ID), the default gateway (the router's link-local address), and prefix length. Write down that DNS is not included. When you see SLAAC in a question, immediately think limited to addressing and gateway, not DNS.
If the question asks about DNS, look for stateless DHCPv6 or manual configuration as the answer.
Commonly Confused With
Stateful DHCPv6 uses a DHCP server that maintains a record of which address is assigned to which device. SLAAC is stateless and does not use a server for address assignment. In stateful DHCPv6, the server decides the address, while in SLAAC, the device decides its own address.
Stateful DHCPv6 is like a hotel receptionist who checks you in and gives you a room key, keeping a log of who is in which room. SLAAC is like a co-working space where you pick your own desk and write your name on it, and the manager does not keep a list.
APIPA is an IPv4 fallback method that generates addresses in the 169.254.0.0/16 range when no DHCP server is found. SLAAC is the primary autoconfiguration method for IPv6, not a fallback, and it uses Router Advertisements.
APIPA is like a hotel guest finding no front desk and just picking any empty room. SLAAC is like a guest arriving at a hotel where the manager announces the floor and the guest picks a specific room number.
IPv4 DHCP is a stateful service that assigns IP addresses, subnet masks, default gateways, and DNS servers from a centralized server. SLAAC is stateless, IPv6-only, and does not involve a server for address assignment.
IPv4 DHCP is like a bank teller who gives you a pre-assigned account number. SLAAC is like a co-op where each member creates their own account number as long as it fits the bank's format.
Manual configuration requires a network administrator to type the full IPv6 address, prefix, and gateway on each device. SLAAC automates this entirely, with no manual input needed.
Manual configuration is like writing your own address on a form and submitting it. SLAAC is like the device reading a street sign and automatically determining its own house number.
Step-by-Step Breakdown
Router Solicitation (RS)
When an IPv6 host connects to a network, it sends a Router Solicitation message to the all-routers multicast address ff02::2. This message asks any router on the link to respond with configuration information. This is like a new student raising their hand in class to ask for the class rules.
Router Advertisement (RA)
The router responds with a Router Advertisement message sent to the all-nodes multicast address ff02::1. The RA contains the network prefix, prefix length, default gateway (the router's link-local address), and flags indicating whether hosts should use SLAAC, DHCPv6, or both. This is like the teacher handing out a syllabus with the course number and rules.
Address Formation
The host uses the prefix from the RA and generates its own 64-bit interface identifier, often derived from its MAC address using EUI-64 or a random number for privacy. It concatenates the prefix and the identifier to form a tentative full IPv6 address. This is like a student taking the course code and adding their own unique student ID number.
Duplicate Address Detection (DAD)
The host sends a Neighbor Solicitation message to the solicited-node multicast address of the tentative address. If any other device responds with a Neighbor Advertisement, the address is already in use, and the host must generate a new one. If no response comes, the address is unique. This is like the student checking the class roster to ensure no one else has the same student ID number.
Address Assignment
Once DAD confirms the address is unique, the host assigns the address to its interface. It can now use this IPv6 address for all communication on the network, both local and global. This is like the student officially writing their name next to that student ID number on the official list.
Ongoing Prefix Lifetimes
The RA also includes preferred and valid lifetimes for the prefix. As the lifetimes expire, the host must either send another RS or listen for periodic RAs to refresh the prefix information. If no RA is received, the address eventually becomes deprecated and then invalid. This is like a student ID card that expires and needs to be renewed.
Practical Mini-Lesson
SLAAC is not just a theoretical concept. It is a practical tool that network professionals must understand to design and troubleshoot IPv6 networks. When you deploy an IPv6 network, you typically enable SLAAC by default on Cisco routers when you configure an IPv6 address on an interface and enable IPv6 routing globally with the command ipv6 unicast-routing.
Without that global command, the router will not send Router Advertisements. In a real enterprise, you might use SLAAC for general user devices but combine it with stateless DHCPv6 to provide DNS and other parameters. This combination is often called SLAAC + stateless DHCPv6.
On Cisco routers, you configure this by setting the ipv6 nd other-config-flag on the interface, which tells hosts to use SLAAC for addressing but DHCPv6 for additional configuration. You can also set the ipv6 nd managed-config-flag to force hosts to use stateful DHCPv6 for everything. As a professional, you should know how to verify SLAAC operation.
Use show ipv6 interface gigabitethernet 0/0 on a Cisco router to verify that the router is sending RAs and to see the prefix being advertised. On a Windows host, use netsh interface ipv6 show addresses to see the SLAAC-assigned addresses. On Linux, use ip -6 addr show.
For troubleshooting, if devices are not getting IPv6 addresses, first check if the router has IPv6 routing enabled globally. Then check if the interface has an IPv6 address assigned. Also verify that the interface is not configured with the ipv6 nd prefix prefix no-autoconfig command, which suppresses SLAAC for that prefix.
Security is another important consideration. SLAAC relies on Router Advertisements, which can be spoofed. An attacker on the same network could send fake RAs, causing devices to configure wrong prefixes or gateways, leading to traffic interception.
To prevent this, use RA Guard, which is a switch feature that blocks unauthorized RA messages. On Cisco switches, configure ipv6 nd raguard on the access ports. In summary, SLAAC is simple in concept but requires careful configuration and security measures in practice.
Know how to enable it, how to verify it, how to combine it with DHCPv6, and how to protect it. This knowledge is directly applicable to real-world network administration and to certification exam scenarios.
Memory Tip
Think of SLAAC as Self-Labeling And Addressing Configuration. The device labels itself with an address the same way you label your lunch in a shared fridge. The router only announces that this is the company fridge (the prefix), and you write your own name on your container. No one keeps a master list.
Covered in These Exams
Current Exam Context
Current exam versions that test this topic — use these objectives when studying.
Legacy Exam Context
Older materials may mention these exam versions, but learners should use the current objectives for their target exam.
N10-008N10-009(current version)Related Glossary Terms
802.1Q is the networking standard that allows multiple virtual LANs (VLANs) to share a single physical network link by tagging Ethernet frames with VLAN identification information.
5G is the fifth generation of cellular network technology, designed to deliver faster speeds, lower latency, and support for many more connected devices than previous generations.
An A record is a DNS record that maps a domain name to the IPv4 address of the server hosting that domain.
802.1X is a network access control standard that authenticates devices before they are allowed to connect to a wired or wireless network.
Frequently Asked Questions
What is the main difference between SLAAC and DHCPv6?
SLAAC is a stateless method where the device generates its own address from a prefix provided by the router. DHCPv6 is stateful, meaning a central server assigns the address and keeps a record of it.
Does SLAAC provide DNS server information?
No, the Router Advertisement does not include DNS server addresses. To provide DNS, you must combine SLAAC with stateless DHCPv6 or configure DNS manually on the device.
Is SLAAC secure?
SLAAC itself has no built-in security against rogue Router Advertisements. An attacker can send fake RAs to redirect traffic. You need RA Guard on switches or Secure Neighbor Discovery (SEND) to protect against this.
What is Duplicate Address Detection (DAD) in SLAAC?
DAD is the process where a device checks if its tentative IPv6 address is already in use by another node on the network. It sends a Neighbor Solicitation and waits for a response. If none comes, the address is unique.
Can SLAAC be used on all types of IPv6 networks?
Yes, SLAAC is mandatory for all IPv6 nodes. It works on any network where a router sends Router Advertisements. It is commonly used in home networks, enterprise LANs, and IoT environments.
What should I do if SLAAC is not working on my network?
First ensure that IPv6 routing is enabled globally on the router. Then verify that the interface has an IPv6 address and that it is sending Router Advertisements. Check for access lists that might block ICMPv6 messages. Also verify that the device supports IPv6.
How does SLAAC handle privacy?
By default, SLAAC uses the MAC address to generate the interface identifier, which can be used to track devices. Privacy extensions (RFC 4941) allow the device to generate temporary random identifiers for outbound connections, making tracking harder.
What is the role of the Router Advertisement flags in SLAAC?
The M (Managed) flag tells hosts to use stateful DHCPv6 for addressing. The O (Other) flag tells hosts to use DHCPv6 for additional configuration like DNS. When both are zero, hosts use SLAAC.
Summary
Stateless Address Autoconfiguration is a core IPv6 mechanism that allows devices to automatically generate their own IP addresses using information from the router. It eliminates the need for a central DHCP server for address assignment, making it ideal for large, dynamic networks with many devices. The process involves four main steps: Router Solicitation, Router Advertisement, Address Formation, and Duplicate Address Detection.
SLAAC is efficient, scalable, and easy to implement, but it does have a key limitation it does not provide DNS server addresses, so it is often paired with stateless DHCPv6 in real deployments. For certification exams, remember that SLAAC is stateless, uses RAs, relies on DAD for uniqueness, and does not handle DNS. Common mistakes include confusing SLAAC with stateful DHCPv6, assuming it provides DNS, and forgetting that DAD is mandatory.
Focus on the flags in the RA, the fact that the router does not keep a state, and the practical combination of SLAAC with DHCPv6 for complete configuration. Mastering SLAAC is essential for anyone pursuing a career in networking, as IPv6 adoption continues to grow across enterprise, cloud, and IoT environments.