grceng.academy
YAML lab 40 bonus XP

Specify the clinic segment

Start labRead the room

Objectives

The clinic assigns a documentation-only segment to a simulation. An operator sets a /48 on the host VLAN and claims a DHCPv6 lease will supply the default router. The intended host model is autonomous address construction, not address leasing.

Complete the plan using the fixture's host and required controls. Write the canonical compressed subnet address, classify the observed local address, and name the address-formation mechanism and default-router discovery message. Enable IPv6 filtering and IPv6 logging; describe a test of the denied service path explicitly over IPv6, using deny, block or reject to state the expected outcome.

Simulation allocation and acceptance criteria

site_allocation: 2001:db8:42::/48
host: 2001:db8:42:7::17
host_subnet_length: 64
observed_local_address: fe80::27
router: advertises autonomous prefix and nonzero router lifetime
address_leasing: not required
service_policy: workstation segment must not reach records service TCP 8443
acceptance: IPv6 enforcement and traffic logs enabled; denied service test retained

Checks the server runs (6)

  • Subnet matches the host's /64
  • Local address is classified by scope
  • Host address formation matches the router option
  • Default-router discovery is separate from leasing
  • IPv6 filtering and logging are both enabled
  • Verification tests the IPv6 service deny

Check names are all you see here: the expectations that decide pass or fail, and the reference solution, stay on the server.

Step-by-step hints

The guided walkthrough, in full. It is free: no XP cost, and it does not touch the paid hint ladder or the reveal gate.

  1. Step 1

    Derive the network

    Find the boundary required by the host segment and clear only the bits to its right. Use the requested canonical notation rather than the site's broader allocation.

    Subnet matches the host's /64

  2. Step 2

    Separate scope and configuration

    Compare the observed local prefix with the address-scope ranges. Then determine whether the host builds an address or requests a lease.

    Local address is classified by scopeHost address formation matches the router option

  3. Step 3

    Identify who supplies a route

    Trace which received message actually makes a router eligible as the host's next hop. Do not assume every configuration value comes from the address-assignment service.

    Default-router discovery is separate from leasing

  4. Step 4

    Make the control testable

    Enable both enforcement and observation for the overlooked family. Describe a service connection test naming that family, the fixture's destination port, and the intended negative outcome.

    IPv6 filtering and logging are both enabledVerification tests the IPv6 service deny

Rules summary

  • XP on pass

    40 bonus XP the first time every check goes green.

  • Paid hints

    2 available. Each costs 25% of the lab XP (about 10 XP).

  • Reveal solution

    Scores 0 XP and unlocks only after 3 check runs.

  • Attempt cap

    60 check runs per learner. The runner warns you in the last 10.

  • Drafts

    Your editor content is saved in this browser, so a reload will not lose work.

  • Walkthrough

    Always free and never penalised: use it before spending a hint.