Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Google Virtual Private Cloud (VPC)

Currently I'm preparing for GCP Associate Cloud Engineering certification. I have a lab to completed. Please help me in getting it completed.

Name of the lab: Google cloud networking challenge in platform.qa.com

I'm able to complete the below step:

1) Need to create two networks in VPC - Database network and Webserver network with subnets.

But unable to achieve those,

1) The Database Network Doesn't Have Internet Connection validation check function's status has been set to: failed
The Database Network Doesn't Have Internet Connection. For security reasons, you must not publicly expose the MySQL resources (that listen on port 3306 TCP) inside the database-network. Ensure that the MySQL resources are private and not reachable from the Internet.

2) The Webserver Network Allows SSH and HTTP Traffic validation check function's status has been set to: failed. The Webserver Network Allows SSH and HTTP Traffic. Your next task also relates to security. webserver-network contains web server VMs, so you are required to allow HTTP (port 80) traffic from all the Internet. Your manager also requires you to allow SSH (port 22) traffic from the webmaster computer which has a public IP of 152.89.1.10. This way he can manually manage VMs inside the network. There should only be these two firewall rules associated with the webserver-network.

3) The Database Network Allows MySQL Traffic validation check function's status has been set to: failed.
The Database Network Allows MySQL Traffic. You also need to provide security features for the database-network. You are required to allow MySQL (port 3306) traffic only from the webserver-network, so make sure to allow traffic coming from the two subnets into the webserver-network.

Warning: Make sure to create only one firewall with two ranges for the database network.

Thanks in advance

1 1 53
1 REPLY 1

For your scenario, double-check the firewall name and the inbound/outbound policies. Then review the route table, NAT gateway and VPC configuration. Be sure to follow the naming conventions specified in the lab instructions.

Regards,
Mokit