Goldfish Networks wordmark
AdvancedPublished 2026-08-23

CCNA IPv6 Capstone: Dual-Stack Site with OSPFv3 & ACL

Archive lab

Build an enterprise-clean dual-stack site end-to-end. IPv4 is complete and forwarding on day start; you will deploy IPv6 across the same topology. Enable IPv6 routing, assign prefixes, bring up OSPFv3 with explicit router-ids, keep the access LAN autoconfiguring via SLAAC with stateless DHCPv6 for DNS, and enforce an IPv6 ACL to allow one client flow to the server while denying another. Verify from the hosts and troubleshoot like a real operator.

Track
Est. time
95 minutes
Difficulty
Advanced
Topics

Learning objectives

  • Enable and validate IPv6 forwarding on Cisco IOS routers
  • Design and assign IPv6 /64s (and a /126 on the point-to-point transit) without overlap
  • Deploy OSPFv3 with explicit router-id and per-interface activation, using passive-interface hygiene
  • Operate a SLAAC access LAN with stateless DHCPv6 (DNS + other-config-flag)
  • Author and apply an IPv6 named ACL with ND permits to selectively filter client-to-server reachability
  • Verify from hosts using ping6 and from routers using show ipv6 commands

Troubleshooting focus

  • OSPFv3 starts but shows no neighbors if ipv6 unicast-routing is missing
  • OSPFv3 configured but zero routes installed if per-interface activation is omitted or the interface is left shutdown
  • SLAAC fails if the router has no IPv6 address on the LAN or if an IPv6 ACL blocks ND
  • DHCPv6 options not learned by hosts if other-config-flag or ipv6 dhcp server binding is missing on the LAN interface
  • ACL has no effect if applied in the wrong direction or on the wrong interface

Topology

Subscribe to preview this lab's topology.

See plans

Related labs

More hands-on Cisco Modeling Labs practice on the same track and topics.

Grade your work

How this lab is graded
  • Build it your way. Where a lab lets you choose a value — a VLAN name, an interface description — grading checks that you configured it, not which name you picked. Names that another line has to reference, like an ACL applied with access-class, are stated in the guide and do have to match.
  • Addresses, modes and protocol keywords are exact. An IP address, a subnet mask, switchport mode trunk, an encapsulation — these carry the meaning of the lab, so they are graded as written in the guide.
  • Grading reads your saved configuration. Export the lab from CML after you have configured it, and make sure anything you set is in the running-config — a change that only exists in a terminal session never reaches the grader.
  • You can submit as many times as you like. Your best score stands, and each attempt tells you which checks passed so you can work the gaps.
  • Scored something you believe is correct? Use Report an issue on this page — that is exactly how the grading fixes in the changelog got found.

Create a free account to submit your lab for grading.

Create a free account
Found a problem with this lab?

Please sign in to report a problem — tying it to your attempts lets us reproduce and fix it faster.