intermediate·20 min·付费
Keep Guest Traffic Outside the Office LAN
A new guest network needs outbound access without exposing corporate systems.
场景
Nightingale Insurance is opening guest Wi-Fi for visitors while keeping internal staff systems private. Guests should reach the upstream service, but they must not reach the corporate LAN or the internal application host. Build the intended separation and verify both the allowed outbound path and the protected internal paths.
学习目标
- acl
- iptables
- greenfield segmentation
- verify all four directions
拓扑与配置
此环境包含 5 台设备（4 Hosts, 1 Router）。你将配置并排查上方列出的网络技能。