Authentication header protocol was introduced to neighbor discovery protocol to ensure its security. A security neighbor discovery protocol model based authentication header was proposed. In this model, multicast Internet key exchange and management protocol was designed, star structure key management algorithm was presented, and IP addresses and link-layer address was bound in the AH authentication data. Compared with the current security neighbor discovery algorithm, experiments results show that the proposed security model can effectively ensure security of neighbors, and defense to forge IP address, and improve the security of next generation Internet.