Firewall Troubleshooting

Get Started
30 minutes
  • 3 Learning Objectives

About this Hands-on Lab

In this learning activity, there is a fairly simple, but broken, firewall configuration. The firewall on `Server1` (10.0.1.10) should be configured to permit web requests from `Client1` (10.0.1.11).

You will need to determine why the firewall isn’t working as intended, and resolve the issue.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Verify That the Issue Exists

Prior to beginning the troubleshooting, you should verify that the issue actually exists.

Attempt to curl the headers for 10.0.1.10 from 10.0.1.11:

$ curl -I 10.0.1.10

Resolve the Problem by Creating a New Zone

You can resolve this issue by creating a new zone, adding the http service to it, and designating 10.0.1.11 as a source for the zone. Use these commands:

 [root@$host ~]# firewall-cmd --permanent --new-zone=api
 [root@$host ~]# firewall-cmd --reload
 [root@$host ~]# firewall-cmd --permanent --zone=api --add-service=http
 [root@$host ~]# firewall-cmd --permanent --zone=api --add-source=10.0.1.11
 [root@$host ~]# firewall-cmd --reload
Verify That the Problem Is Resolved

From Client1 (10.0.1.11), run:

curl -I 10.0.1.10

Additional Resources

A business unit is complaining that their host (10.0.1.11) is unable to access the web API on 10.0.1.10. They are asserting that a system administrator has already added the firewall rule necessary for these hosts to be able to communicate.

You will need to assess the current firewall configuration, and make the changes necessary that will permit port 80 requests from 10.0.1.11 to 10.0.1.10, while still preserving the generic rule that blocks 10.0.1.0/24 traffic.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Get Started
Who’s going to be learning?

How many seats do you need?

  • $499 USD per seat per year
  • Billed Annually
  • Renews in 12 months

Ready to accelerate learning?

For over 25 licenses, a member of our sales team will walk you through a custom tailored solution for your business.


$2,495.00

Checkout
Sign In
Welcome Back!
Thanks for reaching out!

You’ll hear from us shortly. In the meantime, why not check out what our customers have to say about ACG?