Guided mission
intermediate
Configure a basic firewall allow rule
Symptom: The new web server WEB1 is unreachable from the office LAN. FW1 currently denies everything.
Objective: Allow the LAN to reach WEB1 on TCP/80 only — without opening everything.
- Allow only TCP 80 from 192.168.10.0/24 to 172.16.0.10.
- SSH (TCP 22) from the LAN must stay blocked.
- Rules are evaluated top-down; first match wins.
Objectives
- PC-A reaches WEB1 on TCP/80
- TCP/22 from the LAN still denied
- ICMP from the LAN not opened
Evidence: 0 diagnostic commands · 0 config changes
Finish unlocks when every check passes in the simulator.
0 errors · 0 warnings
Link / device state
Up / healthy
Warning (e.g. VLAN mismatch)
Down / no link
Device error
Simulated console. Commands read the current lab state. Type help.