Scenario. Crumb & Current Bakeries is launching an online-order
portal. As the network lead (callsign your choice), you must place the public
web server web-pub01 and mail relay mx-relay01 in a
screened subnet — a buffer between the internet edge and the internal LAN —
so that compromising a public server cannot directly reach internal hosts. The perimeter
firewall edge-fw01 is three-legged (outside, screened-subnet, inside).
The internal core router is core-rtr01; the screened-subnet switch is dmz-sw01.
Addressing plan — outside link 203.0.113.0/29 · screened subnet
198.51.100.0/28 (gw .1, web .10, relay .20) · internal LAN 10.42.10.0/24.
Place mode: tap a device below, then tap a zone on the canvas to drop it in.