Visual Learning · 06 · Live
Network Routing & Switching
Internet → firewall → router → host — zones, default-deny, DMZ path.
CYNARKS|Cyber Flow Explorer
Teaching simulation · not live capture
Network Routing & Switching
Lab diagram only.
Real world · Enterprise traffic enters from the Internet, hits an edge router/firewall, then fans out through access switches to servers and workstations.
Attack · Flat networks let attackers pivot L2/L3 once inside — segmentation limits blast radius.
Defense · Default-deny firewall rules, VLANs, and DMZ placement keep exposure intentional.
- Control · Default-deny perimeter + explicit allow rules
- Control · Separate LAN / DMZ / management VLANs
- Control · Least-privilege east-west (microseg when mature)
1. Edge
Internetuser
Firewallpolicy
RouterL3
HostDMZ
Edge
Packet from the Internet arrives at the enterprise edge firewall.
Ingress
- #1 client → fw Edge Ingress
Space · ← → · R restart