Recover large transfers through an IPv4 tunnel

A hands-on N10-009 lab. You produce the real artefact and 10 automated checks verify it behaves the way the exam expects.

Try this labAll N10-009 practice

Certification
N10-009
Format
Structured configuration
Difficulty
hard
Estimated time
35 min
Automated checks
10

The brief

Edit mtu-plan.json with exactly endpoints, defaultAction and feedbackRules. Endpoints must contain exactly branch and dc. Each setting has id, innerMtu, tcpPayloadLimit, udpPayloadLimit, acceptFeedback and copyDf. Use integer innerMtu 576..9000, TCP payload limit 1..8960, UDP payload limit 1..8972 and boolean switches. Keep innerMtu plus encapsulation overhead within the local outer MTU. Enable validated feedback processing and preserve inner DF into outer IPv4. Keep defaultAction deny. FeedbackRules is an ordered list of at most 32 rules, each with id, action, source, destination, types and codes. Ids are unique trimmed strings of 1..80 characters; action is allow or deny; addresses are canonical IPv4 CIDRs with /32 for single hosts. Types and codes are inclusive two-integer ranges from 0 to 255. First matching rule wins. Permit every approved feedback tuple and deny every other modeled address/type/code tuple; these address rules do not authenticate ICMP or validate its quotation. Both capable packetizers must carry the full message range in both directions and phases without fragmentation. Choose adaptive discovery or fixed direction-specific budgets. Retain a post-path payload ceiling of at least 1200 bytes for each protocol in every path: this authored capacity floor is not a throughput measurement. Run tests and use the byte sizes, phase, router and first matching feedback rule to diagnose each failure. Repair the saved artifact without Reset.

What the checks verify

Your work is graded on 10 independent properties, not on matching one reference answer.

  • Endpoint settings and feedback rules use exact bounded fields.
  • The plan configures exactly branch and dc.
  • Each configured inner MTU plus fixed overhead fits its local outer interface.
  • Both endpoints preserve inner DF in the outer IPv4 header.
  • Every approved edge-to-endpoint type 3/code 4 tuple is permitted.
  • Default deny and the effective filter allow only the four approved diagnostic tuples.
  • Both capable packetizers accept validated tunnel PMTU information.
  • TCP packetization fits every message length in both directions and phases without fragmentation.
  • The capable UDP application's packetization fits the same full message range without fragmentation.
  • Every protocol and direction retains at least a 1200-byte post-path payload ceiling.

Where this sits in the N10-009 blueprint

Domain
Network Troubleshooting
Objective
Performance Faults
Skill
Congestion, Loss and Wireless Interference

Part of N10-009 preparation

Labs are written by ExamNova to teach the decisions the exam tests. They are not reproductions of vendor lab content.