Fundamentals · browser room
Network Routing & Switching
Objective
Internet → router → firewall → switches → hosts — path and trust zones.
Cyber Flow Explorer · 3 steps · Network / Sequence / Packet / Code.
Answer panel
Challenge workspace
Complete the room tasks, then submit here to mark the room done.
Teaching simulation · not live capture
Lab diagram only.
Real world · Enterprise traffic enters from the Internet, hits an edge router/firewall, then fans out through access switches to servers and workstations.
Attack · Flat networks let attackers pivot L2/L3 once inside — segmentation limits blast radius.
Defense · Default-deny firewall rules, VLANs, and DMZ placement keep exposure intentional.
- Control · Default-deny perimeter + explicit allow rules
- Control · Separate LAN / DMZ / management VLANs
- Control · Least-privilege east-west (microseg when mature)
1. Edge
Ingress
- #1 client → fw Edge Ingress
Space · ← → · R restart
Hint
Segment exposed services.
Why this is correct
Routing + switching + firewall policy create trust zones.