intermediate·20 min·有料
Keep Guest Traffic Outside the Office LAN
A new guest network needs outbound access without exposing corporate systems.
シナリオ
Nightingale Insurance is opening guest Wi-Fi for visitors while keeping internal staff systems private. Guests should reach the upstream service, but they must not reach the corporate LAN or the internal application host. Build the intended separation and verify both the allowed outbound path and the protected internal paths.
学習目標
- acl
- iptables
- greenfield segmentation
- verify all four directions
トポロジーと設定
この環境には5台のデバイス(4 Hosts, 1 Router)が含まれます。上記のネットワーキングスキルを設定し、トラブルシューティングします。