intermediate·20 min·Paid

The Config Backup Server Everyone Can Reach

Restrict a file transfer service to the segment that is supposed to use it.

Scenario

The configuration backup server holds a copy of every device config on the network, and it is currently reachable from the user LAN as well as from the management subnet. Nothing has been taken, and the protocol offers no authentication worth depending on. Restrict access to the management subnet, leaving the administrators' own backups working.

Learning objectives

  • ftp
  • acl
  • nftables
  • service exposure

Topology and configuration

This environment contains 4 devices (3 Hosts, 1 Router). You configure and troubleshoot the networking skills listed above.

Curriculum topics

Certification objectives

  • ccna-200-301 · Objective 4.9: Describe the capabilities and function of TFTP/FTP in the network
  • ccna-200-301 · Objective 5.6: Configure and verify access control lists
subnetica© 2026 · Learn, practice, retain.
AboutFAQPrivacy PolicyTerms & Acceptable UseAccessibilitycontact@subneti.ca
CCNA is a registered trademark of Cisco Systems, Inc. CompTIA Network+ and CompTIA Security+ are registered trademarks of CompTIA, Inc. Subnetica is an independent learning platform and is not affiliated with, endorsed by, or sponsored by Cisco Systems, Inc. or CompTIA, Inc.