IPv6 practice labs across vendors
12 guided labs that deploy and fix IPv6 on IOS, IOS XE, Junos and RouterOS: addressing, SLAAC and privacy addresses, NDP, DHCPv6 and prefix delegation, OSPFv3, IS-IS and BGP, RA guard and filters, 6in4, GRE and NAT64, path MTU, IPv6 for ISPs with PPPoE, two troubleshooting labs and a dual-stack capstone.
- Guided labs
- 12
- Follows
- IPv6 topics of Cisco CCNA 200-301, ENCOR and ENARSI, Juniper JNCIS-ENT and JNCIS-SP, MikroTik MTCIPv6E and CompTIA Network+
- Runs every lab
- Standard
- Devices
- Alpine Linux, IOSv, RouterOS, vSRX NextGen template and CSR 1000v
Who these labs are for
For anyone deploying dual stack, and anyone preparing for the IPv6 parts of CCNA, ENCOR, ENARSI, JNCIS-ENT, JNCIS-SP, MTCIPv6E or Network+.
The checks read the outcome: the address a host really learned, the route chosen, the Packet Too Big a router really sent, and the packet delivered, not just whether a line of configuration exists.
The 12 labs
Every lab in the folder, as the workspace lists them, with what each runs and the smallest plan that fits. Read on 2 November 2026.
IPv6 in practice course 12 labs
Shared folderIPv6 in practice across vendors guided labs
From addressing and NDP to routing, transition and ISP edges, then two troubleshooting labs and a capstone.
-
01An addressing plan - SLAAC EUI-64 and privacy addresses
Turn a /48 into a plan, then bring a staff LAN to life. Work out an EUI-64 address by hand, and watch IOS, RouterOS and Linux each configure themselves from the same router advertisement, with privacy addresses on the Linux host.
2× Alpine Linux, 2× IOSv, 1× RouterOS
5 vCPU, 2,304 MBFits LiteRuns in the free demo
-
02NDP in depth - RS RA NS NA DAD and the M and O flags
Replace ARP in your head. Capture every Neighbor Discovery message on a live LAN, watch Duplicate Address Detection stop a clash on Linux and IOS, then change the M, O and A flags and router preference and see hosts react.
2× Alpine Linux, 2× IOSv
4 vCPU, 2,048 MBFits LiteRuns in the free demo
-
03DHCPv6 - stateless stateful and prefix delegation
Run all three DHCPv6 services from one IOS router. Hand out DNS settings on a SLAAC LAN, lease addresses on a managed LAN to IOS, RouterOS and Linux, then delegate a /56 to a branch router that numbers its own LAN from it.
3× IOSv, 2× Alpine Linux, 1× RouterOS
6 vCPU, 2,816 MBFits LiteRuns in the free demo
-
04Static routes and OSPFv3 across IOS Junos and RouterOS
Join an office and a depot across three routers from three vendors. Build IPv6 static routes with global and link-local next hops, run OSPFv3 over the top, steer traffic with cost, and watch floating statics take over when OSPFv3 stops.
2× Alpine Linux, 1× IOSv, 1× RouterOS, 1× vSRX NextGen template
6 vCPU, 5,888 MBFits LiteRuns in the free demo
-
05IS-IS and BGP - the dual-stack control plane
Run one IGP for both address families and one BGP design for both. Bring up multi-topology IS-IS between IOS and Junos, then iBGP over loopbacks and eBGP to a RouterOS provider, with IPv4 and IPv6 in separate sessions.
2× IOSv, 1× Alpine Linux, 1× RouterOS, 1× vSRX NextGen template
6 vCPU, 5,888 MBFits LiteRuns in the free demo
-
06IPv6 security - RA guard ACLs and firewall filters
A rogue router is handing out a bad prefix on the staff LAN. Stop it with RA guard, make the edge refuse spoofed sources with an IOS IPv6 ACL, then lock down a Junos control plane and a RouterOS management address, without breaking Neighbor Discovery on the way.
2× RouterOS, 1× Alpine Linux, 1× IOSv, 1× vSRX NextGen template
6 vCPU, 5,632 MBFits LiteRuns in the free demo
-
07Transition - dual stack 6in4 and GRE tunnels and NAT64
IPv6 rarely arrives everywhere at once. Carry IPv6 across an IPv4-only provider with 6in4 and GRE tunnels and compare what each one costs, then let an IPv6-only PC reach an IPv4-only server through stateful NAT64 on IOS XE.
3× Alpine Linux, 2× IOSv, 1× CSR 1000v
6 vCPU, 6,656 MBFits LiteRuns in the free demo
-
08PMTUD and fragmentation - why ICMPv6 must not be blocked
Small pages load but large downloads hang from the office, and yet the warehouse is fine. Follow a Packet Too Big message to the filter that eats it, see why IPv6 routers never fragment, and compare the proper fix with an MSS clamp.
3× Alpine Linux, 3× IOSv
6 vCPU, 3,072 MBFits LiteRuns in the free demo
-
09IPv6 for ISPs - PPPoE prefix delegation and aggregation
Be the ISP. Build a RouterOS broadband gateway that gives a PPPoE customer and a plain Ethernet customer a /56 each, then hide every customer route behind one aggregate towards the IOS core.
2× Alpine Linux, 2× IOSv, 2× RouterOS
6 vCPU, 2,560 MBFits LiteRuns in the free demo
-
10Troubleshooting 1 - a Monday of IPv6 tickets
Six faults from a weekend change window sit across IOS and RouterOS. Work through three tickets from the host upwards: no address, no gateway, no routes, and then a route that goes nowhere.
2× Alpine Linux, 2× IOSv, 1× RouterOS
5 vCPU, 2,304 MBFits LiteRuns in the free demo
-
11Troubleshooting 2 - firewall BGP and tunnel faults at the edge
IPv4 is fine and IPv6 is not. Seven faults sit across a Junos firewall, an IOS edge router, a RouterOS provider and a tunnel to the branch, and each one looks like something else until you check it.
3× Alpine Linux, 3× IOSv, 1× RouterOS, 1× vSRX NextGen template
9 vCPU, 7,424 MBFits Standard
-
12Capstone - a dual-stack branch and ISP edge
IPv4 already works. Add IPv6 from the provider's core to the staff PC, without touching it: an ISP edge with PPPoE, delegation and BGP, then a branch with PD, OSPFv3, a zone firewall, SLAAC and stateless DHCPv6, across IOS, RouterOS and Junos.
3× Alpine Linux, 2× IOSv, 2× RouterOS, 1× vSRX NextGen template
9 vCPU, 7,168 MBFits Standard
Devices and images
The exact Add Node images the labs use, and the vCPU and RAM their nodes are set to. Your plan counts what each running node is set to.
| Device | Image in Add Node | Set to | Labs | Nodes |
|---|---|---|---|---|
| Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB | 12 | 26 |
| Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB | 12 | 25 |
| MikroTik RouterOS | mikrotik-7.14.2 | 1 vCPU, 256 MB | 9 | 12 |
| Juniper vSRX NextGen template | vsrxng-23.4R2-S3.9 | 2 vCPU, 4,096 MB | 5 | 5 |
| Cisco CSR 1000v | csr1000vng-universalk9.17.03.08a-serial | 1 vCPU, 4,096 MB | 1 | 1 |
How to open the labs
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
IPv6 in practice across vendors guided labs.Open a lab and start its nodes, then open Lab Tasks for the steps.
The labs are read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change a lab, rebuild it in your own folder.


Questions about the IPv6 in practice labs
Are these IPv6 in practice labs free?
They’re included with every lab plan, with nothing extra to pay, rather than free. Plans start at £3 a day or £0.50 an hour. To try one first, the free demo gives you 30 minutes with 6 vCPU and 8 GB, enough to run 10 of these labs.
Which plan do I need for these labs?
Standard, with 12 vCPU and 16 GB, runs every lab here. Lite runs 10 of the 12. EVE-NG admits a node by the vCPU and RAM configured on it, so a lab needs the total its running nodes are set to. The biggest here, “Troubleshooting 2 - firewall BGP and tunnel faults at the edge”, needs 9 vCPU and 7,424 MB. Each lab’s Lab Tasks pane names the plan it needs.
Can I change these labs?
You can start the nodes and configure the devices, but the labs are read-only: changes to the topology can’t be saved. To change one, rebuild it in your own folder.
Are these labs from the vendors or exam bodies?
No. CloudLabBox wrote them to follow the topics of Cisco’s CCNA 200-301, ENCOR 350-401 and ENARSI 300-410, Juniper’s JNCIS-ENT and JNCIS-SP, MikroTik’s MTCIPv6E and CompTIA’s Network+ (N10-009), where they cover IPv6. They aren’t training material from the vendors or exam bodies, and CloudLabBox is independent of Cisco, CompTIA, Juniper Networks and MikroTik.
Do I need vendor licences for these labs?
No. The vSRX nodes use the image’s built-in 60-day trial, and the other images need none for these labs. CloudLabBox doesn’t provide vendor licences or subscriptions.
Which plan do I need?
Ten of the 12 labs fit Lite. Labs 11 and 12 need Standard.
Does RA guard work in these labs?
Lab 06 enforces it with a RouterOS bridge filter, because the IOSvL2 image accepts RA guard policies but doesn’t enforce them. The pane says so.
Try a lab before you choose
The free demo is a real workspace for 30 minutes, with 6 vCPU and 8 GB: enough to run 10 of these labs. No card and no email.
More practice labs
- CCNA practice labs online
- CompTIA Network+ practice labs
- CCNP ENCOR practice labs
- CCNP ENARSI practice labs
- CCNP Service Provider practice labs
- Cisco NX-OS data centre practice labs
- CCIE Enterprise Infrastructure practice labs
- Network automation practice labs
- Cisco ASA firewall practice labs
- Packet analysis labs with Wireshark and tcpdump
- FortiGate practice labs
- FortiGate SD-WAN practice labs
- Cisco Catalyst SD-WAN CLI practice labs
- Palo Alto firewall practice labs
- Check Point CCSA practice labs
- Check Point CCSE practice labs
- Multi-vendor firewall and VPN practice labs
- BGP practice labs across vendors
- Nokia SR OS NRS I practice labs
- MPLS and L3VPN practice labs
- VXLAN EVPN practice labs across vendors
- Linux labs for network engineers
- Multi-vendor troubleshooting practice labs
- JNCIA-Junos practice labs
- JNCIS-ENT practice labs
- JNCIA-SEC and JNCIS-SEC practice labs
- JNCIS-SP JN0-364 practice labs
- JNCIP-ENT JN0-650 practice labs
- Arista EOS practice labs
- HPE Aruba Networking CX switching labs
- Huawei HCIA-Datacom practice labs
- HCIP-Datacom Core practice labs
- MikroTik MTCNA practice labs
- MikroTik MTCRE practice labs
- MikroTik MTCINE practice labs
- MikroTik MTCSE practice labs
- MikroTik MTCTCE practice labs
- MikroTik MTCIPv6E practice labs
- All practice labs
CloudLabBox is independent of Cisco, CompTIA, Juniper Networks and MikroTik. The labs follow exam topics and aren’t vendor training material; vendor names identify the exams and the images in the workspace.