Edge Console · Larkfield Outfitters

Perimeter appliance — firewall rules
N10-009 · 4.3 AP NET · 3.5.C AP NET · 3.5.B
Brief

You're the new network tech at Larkfield Outfitters, a small outdoor-gear shop. The team just moved the public reservations site, res-web01, into a screened subnet (a DMZ) so customers on the internet can reach it without touching the staff network. The edge appliance already has the inbound address mapping in place — your job is the firewall pass rules that actually permit the traffic.

Make the edge do three things:

  1. Let the internet reach res-web01 on HTTP.
  2. Let the internet reach res-web01 on HTTPS.
  3. Let the staff LAN reach the whole screened subnet.
WAN (internet)untrusted — outside zone Staff LAN net10.20.10.0/24 Screened subnet (DMZ) net10.20.40.0/27 res-web01 host10.20.40.10 Services to openHTTP 80, HTTPS 443
Step 1 — Sign in to the appliance

Lab credentials are printed on your worksheet: labadmin / Cr0ss-Zone! — this is a simulator; no real device is contacted.

Firewall · Rules
You have unsaved firewall changes. They take effect after you apply them.

WAN rules

Rules are read top-to-bottom; the first match wins.
#ActionProtoSourceDestinationPortDescription
＋ Add a rule on WAN

Trace a packet

Pick a sample packet. The console walks the matching interface's rules top-to-bottom and reports the first rule that decides its fate — the way a real firewall does.

No trace run yet.
Tasks0 / 5
  • ○Sign in to the edge appliance.
  • ○WAN → res-web01, HTTP.Pass · TCP · source WAN net · dest host 10.20.40.10 · port 80 · with a description.
  • ○WAN → res-web01, HTTPS.Same target, port 443.
  • ○LAN → screened subnet, all traffic.On the LAN tab: Pass · source LAN net · dest DMZ net · port any · with a description.
  • ○Apply your changes.
Check your understanding0 / 5
Progress: tasks 0/5 · questions 0/5

Use a made-up callsign — never your real name, student ID, or email. Your instructor keeps the callsign-to-name list separately. Submitting captures an image of this lab area as evidence.

Edge Console simulator · clean-room original content built from public N10-009 & AP Networking objectives. © 2026 [AUTHOR / ORG — replace]. Replace with your library's license line.