Solve in your browser

Edit the files below. The Objectives tick green live as you work. Hit Check when they all pass and your verified proof page is issued automatically.

Objectives

Not met: The client's web traffic (TCP 80) to the server is permitted
Met: Telnet (TCP 23) to the server stays blocked
Not met: The server has a route back to the client subnet, so replies return
Not met: End to end, the client can use the web server

hostname r1
!
interface GigabitEthernet0/0
 ip address 10.0.1.1 255.255.255.0
 ip access-group GUARD in
interface GigabitEthernet0/1
 ip address 10.0.12.1 255.255.255.0
!
ip route 10.0.2.0 255.255.255.0 10.0.12.2
!
! GUARD: intended policy is allow web to the server, block telnet.
ip access-list extended GUARD
 deny tcp any host 10.0.2.10 eq 80
 deny tcp any host 10.0.2.10 eq 23
 permit ip any any
!
line vty 0 4
!

hostname r2
!
interface GigabitEthernet0/0
 ip address 10.0.12.2 255.255.255.0
interface GigabitEthernet0/1
 ip address 10.0.2.1 255.255.255.0
!
! No route back to the client subnet 10.0.1.0/24 — replies can't return.
!
line vty 0 4
!

Objectives update live as you edit. Hitting Check commits your proof.

No account needed to explore. When you're ready, browse the rest of the challenges or sign in to save a solve as a verified proof.