intermediate·20 min·مدفوع
Keep Guest Traffic Outside the Office LAN
A new guest network needs outbound access without exposing corporate systems.
السيناريو
Nightingale Insurance is opening guest Wi-Fi for visitors while keeping internal staff systems private. Guests should reach the upstream service, but they must not reach the corporate LAN or the internal application host. Build the intended separation and verify both the allowed outbound path and the protected internal paths.
أهداف التعلّم
- acl
- iptables
- greenfield segmentation
- verify all four directions
الطوبولوجيا والإعداد
تحتوي هذه البيئة على 5 جهازًا (4 Hosts, 1 Router). تقوم بإعداد واستكشاف أخطاء المهارات المذكورة أعلاه وإصلاحها.