intermediate·20 min·Paid

ACL: Block a Whole Subnet #1

A contractor network can reach a protected subnet that should remain isolated.

Scenario

Beacon Logistics is separating a newly connected contractor network from internal operations. The contractor hosts can currently reach systems in a protected subnet, but the router and other approved paths must continue working. Restrict the affected source network as intended and confirm that the boundary blocks the whole subnet rather than only one test host.

Learning objectives

  • acl
  • iptables
  • packet filtering

Topology and configuration

This environment contains 3 devices (2 Hosts, 1 Router). You configure and troubleshoot the networking skills listed above.

Curriculum topics

Certification objectives

  • ccna-200-301 · Objective 5.6: Configure and verify access control lists
  • comptia-network-plus-n10-009 · Objective 4.3: Apply network security features, defense techniques, and solutions
subnetica© 2026 · Learn, practice, retain.
AboutFAQPrivacy PolicyTerms & Acceptable UseAccessibilitycontact@subneti.ca
CCNA is a registered trademark of Cisco Systems, Inc. CompTIA Network+ and CompTIA Security+ are registered trademarks of CompTIA, Inc. Subnetica is an independent learning platform and is not affiliated with, endorsed by, or sponsored by Cisco Systems, Inc. or CompTIA, Inc.