intermediate·20 min·Paid
The Config Backup Server Everyone Can Reach
Restrict a file transfer service to the segment that is supposed to use it.
Scenario
The configuration backup server holds a copy of every device config on the network, and it is currently reachable from the user LAN as well as from the management subnet. Nothing has been taken, and the protocol offers no authentication worth depending on. Restrict access to the management subnet, leaving the administrators' own backups working.
Learning objectives
- ftp
- acl
- nftables
- service exposure
Topology and configuration
This environment contains 4 devices (3 Hosts, 1 Router). You configure and troubleshoot the networking skills listed above.
Curriculum topics
Certification objectives
- ccna-200-301 · Objective 4.9: Describe the capabilities and function of TFTP/FTP in the network
- ccna-200-301 · Objective 5.6: Configure and verify access control lists
