Skip to content
LFCSNetworkingSingle Linux VMHard

Bond, bridge, IPv4/IPv6 addresses, a static route and name resolution

Scenario lfcs-net-001 · about 9 minutes · 9 points · 7 grader checks

Build an active-backup bond and a bridge from dummy interfaces, address the bridge with IPv4 and IPv6, add a static route and a hosts entry, all persistent.

  • bonding
  • bridge
  • ipv6
  • static-route
  • netplan
  • systemd-networkd
  • hosts

What you will practise

  • Create bond and bridge devices persistently
  • Assign static IPv4 and IPv6 addresses
  • Add a persistent static route
  • Configure local hostname resolution

Start this lab

With the CLI installed and signed in, this command provisions a fresh Ubuntu 24.04 LTS virtual machine on your Mac, applies the scenario setup and prints the task below.

goldenkube start lfcs-net-001

Task

The task text exactly as the CLI shows it. Solve it on the machine, then run goldenkube submit.

Three spare network interfaces exist on this host: lab0, lab1 and lab2. Do not change the configuration of the primary interface. Everything below must be active now and persist across reboots (use netplan, systemd-networkd or NetworkManager, whichever you prefer). 1. Create the bond bond0 in active-backup mode with the members lab1 and lab2. 2. Create the bridge br0 with the port lab0. 3. Give br0 the addresses 10.20.30.40/24 and fd00:20::40/64. 4. Route the network 10.99.0.0/16 via 10.20.30.1. 5. The name db.lab.internal must resolve to 10.20.30.50 on this host.

Requirements and details

Certification
LFCS · Linux Foundation Certified System Administrator
Domain
Networking
Difficulty
Hard
Environment
Single Linux VM
Recommended time
9 minutes
Points
9
Grader checks
7
Operating system
Ubuntu 24.04 LTS
Minimum CLI version
0.1.0
Scenario version
1
Published

Grading runs locally: 7 state checks read your machine when you submit; the scenario passes when every check passes. Hints, the reference solution and the check definitions are available only inside the CLI, not on this page.

Install the CLICreate a free account

More Networking labs

LFCSNetworkingEasy

Time synchronisation with chrony and the time zone

Point chrony at two internal time servers only, allow a client network to query it, enable it, and set the system time zone.

Single Linux VM · ~4 min · 6 points

  • chrony
  • ntp
  • time
  • timezone
  • timedatectl

goldenkube start lfcs-net-002

LFCSNetworkingMedium

Harden the OpenSSH server and set up a client profile

Make sshd listen on two ports with key-only logins limited to one group, then give a user a key pair and a host alias that works without prompts.

Single Linux VM · ~7 min · 8 points

  • openssh
  • sshd
  • ssh-keys
  • ssh-config
  • hardening

goldenkube start lfcs-net-003

LFCSNetworkingHard

Packet filtering, port redirection and NAT with nftables

Write a persistent nftables ruleset with a default-drop input chain, a port redirect and source NAT, and track down an unexpected listener.

Single Linux VM · ~8 min · 9 points

  • nftables
  • firewall
  • nat
  • port-redirection
  • ss
  • troubleshooting

goldenkube start lfcs-net-004

LFCSNetworkingMedium

Reverse proxy and load balancer with nginx

Publish two local backends behind one nginx virtual host with round-robin balancing, the original Host header and a status path answered by nginx itself.

Single Linux VM · ~6 min · 7 points

  • nginx
  • reverse-proxy
  • load-balancing
  • upstream
  • http

goldenkube start lfcs-net-005

Independent community project, not affiliated with or endorsed by CNCF or The Linux Foundation. Lab results are practice feedback, not an exam score.