intermediate·20 min·付费
The Config Backup Server Everyone Can Reach
Restrict a file transfer service to the segment that is supposed to use it.
场景
The configuration backup server holds a copy of every device config on the network, and it is currently reachable from the user LAN as well as from the management subnet. Nothing has been taken, and the protocol offers no authentication worth depending on. Restrict access to the management subnet, leaving the administrators' own backups working.
学习目标
- ftp
- acl
- nftables
- service exposure
拓扑与配置
此环境包含 4 台设备（3 Hosts, 1 Router）。你将配置并排查上方列出的网络技能。
课程主题
认证考纲目标
- ccna-200-301 · 目标 4.9：Describe the capabilities and function of TFTP/FTP in the network
- ccna-200-301 · 目标 5.6：Configure and verify access control lists