This read-write Integer32 (-2, -1, or 0..7) in the ND inspection policy table sets the minimum Cryptographically Generated Address (CGA) security level required, where -1 means unspecified and -2 disables the check entirely. An admin cares because raising this value tightens the bar for what counts as a valid secured neighbor discovery message, trading off compatibility against attack resistance. For example, setting this to 2 on policy "ndi-access" rejects any CGA-secured ND message whose security level is below 2, while setting it to -2 turns the whole check off for that policy.