Lab
A Cloud Guru

Create Firewall Rules on a Google Cloud VPC Network

In this hands-on lab, we will be presented with a custom VPC that has four instances spread across three subnets with zero firewall rules created. We will configure two different firewall rules: one to allow SSH access to all instances on the network, and another one using specific network tags to only allow ICMP (ping) access to one instance, and only from a specific subnet. This will demonstrate using both wide-scope and narrow-scope firewall rules.

Try for free Contact sales

Path Info

Level

Intermediate

Duration

30m

Published

Mar 12, 2019

Challenge

Create First Firewall Rule

Create a wide-scope rule to allow SSH access to the entire network from all public sources.
Challenge

Apply Network Tag

Apply a network tag to the vm-2 instance which will only allow a later firewall rule to apply to that one instance.
Challenge

Confirm Implementation of Firewall Rules

SSH into various instances to confirm both firewall rules are correctly implemented.
Challenge

Create Second Firewall Rule

Create a firewall rule that will only allow ICMP traffic to vm-2, while also only allowing traffic from subnet-a as the source.

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.