A lab leaf uses DHCP on a production management VLAN and pulls a production configuration. What design control best prevents this failure mode?
Select an answer to reveal the explanation.
Short Explanation
Lab gear on the production DHCP lane is like a trainee grabbing the live city playbook. Keep lab and production provisioning domains separate so a lab leaf cannot lease production options and configs. Segregation beats hoping nobody notices.
Full Explanation
Provisioning domain isolation prevents lab devices from receiving production DHCP options and configuration files. Shared VLANs and identical option sets create exactly the accidental production pull described. EVPN advertisement of lab MACs into production worsens blast radius. Enforce separate scopes, VLANs/VRFs, and file repositories for lab versus production ZTP.