{
  # DHCPv6 deny unknown client config
  # empty configs are not accepted by Kea
  /// This configuration declares some subnets but has no interfaces-config
  /// Reference Kea #245
  "Dhcp6": {
    "valid-lifetime": 1800,
    "subnet6": [
      # subnet declaration
      {
        "id": 1,
        "subnet": "2001::/64",
        "pools": [
          # pool declaration
          {
            # avoid empty pool
            "pool": "2001::100 - 2001::200",
            /// From:
            ///   deny unknown clients
            "client-class": "gen#_AND_#KNOWN#"
          }
        ]
      }
    ],
    "client-classes": [
      {
        "name": "gen#_AND_#KNOWN#",
        "test": "member('KNOWN')"
      }
    ]
  }
}