GSP314

Overview

In a challenge lab you’re given a scenario and a set of tasks. Instead of following step-by-step instructions, you will use the skills learned from the labs in the course to figure out how to complete the tasks on your own! An automated scoring system (shown on this page) will provide feedback on whether you have completed your tasks correctly.

When you take a challenge lab, you will not be taught new Google Cloud concepts. You are expected to extend your learned skills, like changing default values and reading and researching error messages to fix your own mistakes.

To score 100% you must successfully complete all tasks within the time period!

This lab is recommended for students who have enrolled in the Set up a Google Cloud Network skill badge. Are you ready for the challenge?

Setup

Before you click the Start Lab button

Read these instructions. Labs are timed and you cannot pause them. The timer, which starts when you click Start Lab, shows how long Google Cloud resources will be made available to you.

This hands-on lab lets you do the lab activities yourself in a real cloud environment, not in a simulation or demo environment. It does so by giving you new, temporary credentials that you use to sign in and access Google Cloud for the duration of the lab.

To complete this lab, you need:

• Access to a standard internet browser (Chrome browser recommended).

• Time to complete the lab---remember, once you start, you cannot pause a lab.

Challenge scenario

You are tasked with setting up a Virtual Private Cloud (VPC) network in Google Cloud Platform (GCP) and ensuring proper connectivity between virtual machines (VMs) in different subnets. You will also configure firewall rules to manage access and test network connectivity between the VMs.

As part of this challenge, you will need to create the following:

• A VPC network with two subnetworks and firewalls need to be created to connect new resources together.
• Launch two VMs in each subnet and verify that these machines can successfully communicate with each other using the protocols you've configured.

Task 1. Create networks

Create a VPC network with two subnets and firewalls to open connections between resources.

1. Create a VPC network named with two subnets: and . Use a Regional dynamic routing mode.

2. For set the region to .

   • Set the IP stack type to IPv4 (single-stack)
   • Set IPv4 range to 10.10.10.0/24

3. For set the region to .

   • Set the IP stack type to IPv4 (single-stack)
   • Set IPv4 range to 10.10.20.0/24

Task 2. Add firewall rules

On this network your team will need to be able to connect to Linux and Windows machines using SSH and RDP, as well as diagnose network communication issues via ICMP.

1. Create a firewall rule named .

   • For the network, use .
   • Set the priority to 1000, the traffic to Ingress and action to Allow
   • The targets should be set to all instances in the network and the IPv4 ranges to 0.0.0.0/0
   • Set the Protocol to TCP and port to 22

2. Create a firewall rule named .

   • For the network, use .
   • Set the priority to 65535, the traffic to Ingress and action to Allow
   • The targets should be set to all instances in the network and the IPv4 ranges to 0.0.0.0/24
   • Set the Protocol to TCP and port to 3389

3. Create a firewall rule named .

   • For the network, use .
   • Set the priority to 1000, the traffic to Ingress and action to Allow
   • The targets should be set to all instances in the network and the IPv4 ranges to 10.10.10.0/24 and 10.10.20.0/24
   • Set the Protocol to icmp

Click Check my progress to verify the objective. Create network, subnetworks and firewalls.

Task 3. Add VMs to your network

Create a virtual machine in each subnet, and confirm that the machines can communicate with each other using a protocol that you already set up. Each machine will use network tags that the firewall rules need to allow network traffic.

1. Create an instance name us-test-01 in and set the zone to .

2. Create an instance name us-test-02 in and set the zone to .

Verify you can connect your VM.

Now do a few exercises to test the connection to your VMs.

Switch back to the Console and navigate to Compute Engine.

Click the SSH button corresponding to the us-test-01. This opens an SSH connection to the instance in a new window.

In the SSH window of us-test-01, type the following command to use an ICMP echo against us-test-02, adding the Internal IP address for the VM in-line:

Use ping to measure latency

Use ping to measure the latency between instances between all the regions.

To observe the latency, run the following command after opening an SSH window on the us-test-01:

Click Check my progress to verify the objective.

Congratulations!

In this challenge lab you have shown that you know how to create a network, add subnets and virtual machines, and confirmed that the VMs can communicate with each other.

Google Cloud training and certification

...helps you make the most of Google Cloud technologies. Our classes include technical skills and best practices to help you get up to speed quickly and continue your learning journey. We offer fundamental to advanced level training, with on-demand, live, and virtual options to suit your busy schedule. Certifications help you validate and prove your skill and expertise in Google Cloud technologies.

Manual Last Updated September 19, 2024

Lab Last Tested September 19, 2024

Copyright 2024 Google LLC All rights reserved. Google and the Google logo are trademarks of Google LLC. All other company and product names may be trademarks of the respective companies with which they are associated.