← Lock down the server subnet without locking yourself out

Lab

A live network, in your browser. Configure each device in the editor or its terminal, watch the topology converge, and run show, ping and traceroute, all computed from your config. Hit Check when it works.

Objectives

  • Met: A user host can reach the server (10.0.2.10) on TCP 80
  • Not met: A user host is denied other access to the server subnet (e.g. TCP 22)
  • Met: The admin host retains access to the server
rtruseradminserver
Connected to rtr. Type ? for help.
RTR>
Type ? for commands · Tab to complete · ↑ for history
Objectives update live as you work. Hitting Check commits your proof.

No account needed to explore. When you're ready, browse the rest of the challenges or sign in to save a solve as a verified proof.