Networking II — Segmentation & Traffic
Guest Wi-Fi and the finance servers share one flat network. Segment it before the auditor arrives Friday.
- Configure VLANs, NAT and basic ACLs
- Capture and read traffic
- Identify exposed services
- Routing / switching
- VLANs & segmentation
- NAT
- VPNs, proxies, load balancers
- IDS / IPS
Four-mode learning matrix
Configure two VLANs; capture with a tap or SPAN port.
Labs 3–4 — Read container logs; identify exposed services.
Build segmentation with virtual equipment; inspect a firewall. Role: Network engineer.
No headset? Desktop segmentation simulator. Printed and mobile versions are also available.
Analyze a provided PCAP and flag anomalies.
Segment the team lab into user and server zones.
- Managed switch
- Network tap or SPAN-capable switch
- Wireshark host
- Docker
- Wireshark
- tcpdump
Segmentation is one of the highest-value controls a network team can deploy and is required by PCI DSS and 62443.
Tail proxy and webapp logs during a login attempt; capture the request line.
From student-ws, scan server-net and record the open ports; repeat from external.