CloudLabBox
Try the free demo

IPv6 in practice lab 12 of 12

Capstone: a dual-stack branch and ISP edge

IPv4 already works. Add IPv6 from the provider's core to the staff PC, without touching it: an ISP edge with PPPoE, delegation and BGP, then a branch with PD, OSPFv3, a zone firewall, SLAAC and stateless DHCPv6, across IOS, RouterOS and Junos.

Run this lab

It needs Standard: its 8 nodes are set to 9 vCPU and 7,168 MB in total.

In your workspace: Shared, then IPv6 in practice across vendors guided labs, then 12 - Capstone - a dual-stack branch and ISP edge

Run it on Standard from £5 a day

The free demo can’t run it: it has 6 vCPU and 8 GB, and this lab’s nodes need 9 vCPU and 7,168 MB together. Every lab plan includes every guided lab.

Level
Advanced
Time
About 150 minutes
Nodes need
9 vCPU, 7,168 MB
Smallest plan
Standard

The scenario

Kestrel Freight's new Leeds branch runs on IPv4 today. PPPoE to Harbour Fibre works, the firewall works, and the staff PC reaches the internet through NAT. The brief for this project is simple: add IPv6 end to end, and leave IPv4 alone. You hold both pens for a day, so you do the ISP's edge as well as the branch.

This is everything from the course in one network. Plan it first, and then build from the provider inwards, checking as you go.

The ISP side

ItemValue
Harbour FibreAS 64500 on BNG, router ID 198.18.1.2
UpstreamAS 64496 on CORE, router ID 198.18.1.1
CORE to BNG2001:db8:f000:a::/64, CORE ::1, BNG ::2
Internet server LAN2001:db8:e000:1::/64, CORE Gi0/1 ::1, NET ::10 (already set on NET)
PPPoE link pool2001:db8:f700::/48, /64 each
Delegation pool2001:db8:f800::/40, /56 each. The branch gets the first: 2001:db8:f800::/56

The branch plan, inside the /56

SubnetPrefixAddresses
0: EDGE to SRX12001:db8:f800::/64EDGE ether2 ::1, SRX1 ge-0/0/0 ::2
1: SRX1 to R12001:db8:f800:1::/64SRX1 ge-0/0/1 ::1, R1 Gi0/0 ::2
10: Staff LAN2001:db8:f800:10::/64R1 Gi0/1 ::1, H1 by SLAAC (and a fixed ::10)
20: Server LAN2001:db8:f800:20::/64R1 Gi0/2 ::1, SRV ::10
ff: loopbacks2001:db8:f800:ff::1, ::2, ::3EDGE, SRX1, R1

Router IDs: EDGE 10.20.255.1, SRX1 10.20.255.2, R1 10.20.255.3. DNS server: 2001:db8:f800:20::53, domain leeds.kestrel.example.

DeviceRunsHow to log in
CORE, R1Cisco IOSv 15.9The console opens at >; enable has no password.
NET, H1, SRVAlpine Linuxroot, no password.
BNG, EDGEMikroTik RouterOS 7.14admin / Lab-admin1
SRX1Juniper vSRX 23.4lab / lab123. It takes about 10 minutes to boot.

What you’ll practise

  • Plan a branch from a delegated /56
  • Add IPv6 to a working ISP edge with PPPoE, DHCPv6-PD, an aggregate and eBGP
  • Bring a delegated prefix into OSPFv3, with a default route from the CPE
  • Add IPv6 to an SRX zone design, with policies for both families
  • Run SLAAC with stateless DHCPv6 on a LAN
  • Prove the outcome for both families, including PMTUD across PPPoE

The tasks

  1. Start the Linux hosts, and prove IPv4 first
  2. The upstream
  3. The ISP edge
  4. The CPE
  5. The firewall
  6. The branch router and LANs
  7. Prove it

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Capstone - a dual-stack branch and ISP edge8 nodes, 7 links. Every link is listed as text below the diagram.CORENETBNGEDGESRX1R1H1SRVGi0/0ether1Gi0/1eth0ether2ge-0/0/0ge-0/0/1Gi0/0Gi0/1eth0Gi0/2eth0ether2ether1
8 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • CORE Gi0/0 to BNG ether1
  • CORE Gi0/1 to NET eth0
  • BNG ether2 to EDGE ether1
  • EDGE ether2 to SRX1 ge-0/0/0
  • SRX1 ge-0/0/1 to R1 Gi0/0
  • R1 Gi0/1 to H1 eth0
  • R1 Gi0/2 to SRV eth0
Nodes in Capstone: a dual-stack branch and ISP edge, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
CORECisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
NETAlpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
BNGMikroTik RouterOSmikrotik-7.14.21 vCPU, 256 MB
EDGEMikroTik RouterOSmikrotik-7.14.21 vCPU, 256 MB
SRX1Juniper vSRX NextGen templatevsrxng-23.4R2-S3.92 vCPU, 4,096 MB
R1Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
H1Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB
SRVAlpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder IPv6 in practice across vendors guided labs.

  3. Open 12 - Capstone - a dual-stack branch and ISP edge and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More IPv6 in practice labs

All IPv6 in practice labs

Related labs in other courses

CloudLabBox is independent of Cisco, CompTIA, Juniper Networks and MikroTik. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.