advanced·20 min·付费
Divested Business Firewall Separation
Separate companies sharing a building must not share network access
场景
Following a corporate divestiture, what used to be one company operating from one office building is now legally two separate, independent companies — for a transition period, both still occupy the same building and, for cost reasons, continue sharing the same physical network cabling and core switching infrastructure. Legal and compliance have been explicit: from a data-separation standpoint, the two companies' networks must now be treated as if they belong to entirely unrelated third parties, with zero reachability between them in either direction, despite the shared physical infrastructure.
学习目标
- acl
- nftables
- least privilege
拓扑与配置
此环境包含 4 台设备（3 Hosts, 1 Router）。你将配置并排查上方列出的网络技能。