Mesh
lab — lighthouse online · Mandant isolation · enrollment open
Mesh is the lab entry point for a certificate-based encrypted overlay: each node carries a signed identity, peers discover each other via a coordinated lighthouse, and Mandant group policy controls who may talk to whom. Sign in with the same account and authenticator code you use for Access, then download your node package. After the Mandant isolation upgrade, re-download once so your package matches your organisation.
- Signed in
- —
- Mandant
- —
- Admin
- Mesh admin
- Mesh address
- not issued yet
Re-download required once — Mandant isolation is live. Download a fresh node package; old packages without your Mandant group are obsolete.
- Install the mesh agent binary for your OS (link above).
- Unpack the zip; keep
host.keyprivate. - Run the agent with the included
config.yml. - Ping the lighthouse overlay address shown in the README.
UDP to the lab coordinator must be allowed on your path (lab uses port 4242). Access lab remains a separate track.
What this track explores
- Certificate identity for every node
- Encrypted peer-to-peer mesh
- Mandant isolation via groups and trust roots