Research Paper> COMPUTER S 123 Network Design Proposal for Small Office

downloaded from

Scholarfriends

https://scholarfriends.com Downloaded by: writerforacademic@gmail.com | https://scholarfriends.com/singlePaper/273787/research-paper-computer-s-123-networkpropasal-network-design-proposal-for-small-office Distribution of this document is illegal.

Network Design Proposal for Small Office

Prepared for:

Prepared by: Student Name

Table of Contents I.

Physical Network Design........................................................................................................4 A.

Network Topology............................................................................................................4 Business Needs........................................................................................................................4 Proposed Topology..................................................................................................................5 Justification..............................................................................................................................5

B.

Network Media.................................................................................................................6 Business Needs........................................................................................................................6 Proposed Network Media........................................................................................................6 Justification..............................................................................................................................7

C.

Network Devices...............................................................................................................8 Business Needs........................................................................................................................8 Vendors:...................................................................................................................................8 Justification..............................................................................................................................9

D.

Network Security Devices..............................................................................................10 Business Needs......................................................................................................................10 Proposed Network Security Devices.....................................................................................10 Justification............................................................................................................................10

E.

Computer Systems..........................................................................................................10 Business Needs......................................................................................................................10 Proposed Computer Systems.................................................................................................11 Justification............................................................................................................................11

II.

Network Addresses Design....................................................................................................11 A.

Subnetting.......................................................................................................................11 Business Needs......................................................................................................................11

Proposed Subnetting (include the calculations).....................................................................11 Justification............................................................................................................................12 III. A.

Network Services Design...................................................................................................13 Network Services............................................................................................................13 Business Needs......................................................................................................................13 Proposed Network Services...................................................................................................13 Justification............................................................................................................................13

B.

Network Security Measures............................................................................................13 Business Needs......................................................................................................................13 Proposed Network Security Measures...................................................................................14 Justification............................................................................................................................14

Bibliography..................................................................................................................................14

I.

Physical Network Design

A. Network Topology Business Needs Small office network is being setup with a secured environment to be in place. Generally, the small offices lack the network of corporate IT networks. There is two major requirement of the network in such a scenario straightforward access and network management being easy. The security requirement of the organization is to be updated to the latest requirements of the modern computing environments. The design is simple yet functional and secure with scope of scalable expansion of the network as the business grows up.

Proposed Topology Hard-wired networking is still the backbone for most LANs but with the capability of today’s wireless local area networks (WLANs) they are quickly taking the lead. “For many small companies, technology decisions boil down to providing the best possible customer service. Most application and a business-grade wireless network will enhance the business of any type of company, from manufactures and medical facilities to retail outlets and bistros.” Hard-wired networks have the edge when it comes to reliability but wireless allows for greater access where some places cannot be hard-wired. Utilizing both a hard-wired and wireless LAN gives the small office more flexibility, ease of use, growth capability, mobility, and cost.

Justification There are several requirements that must be met for in order for a successful and fully functional network security for the office with the occasional guest user. requirements are as follows: 1. Separate subnet for guest and LAN network

Those

2. Guess network should be restricted to access only Web Server and be protected with appropriate antivirus software.

3. An IP network design.

4. Hardware must be identified to include the switches and routers.

5. A wireless security with appropriate security features enabled.

6. Wireless network integration of access points for devices.

A network topology diagram

B. Network Media Business Needs Based on the requirement, switches and access points which have security features should be made available. A web security firewall appliance should be available to protect the web server from malicious attacks from the internet. The office will have 5-10 users (max of 100), which includes the occasional guest user. Access control lists are used for restricting access between the guest and the LAN network.

Proposed Network Media Switch: The small office could have a max of 100 users. There is also a web server which needs to be integrated. Access points are also required to setup for wireless access to the network and internet.

Access point: Access points which have appropriate security protocols to encrypt wireless data are recommended. Security protocols like WPA, SFTP, and TKIP is required for providing appropriate wireless security

Internet router: A router capable of ADSL internet sharing will be the standard to allow for all users to access the Internet

Figure 1: Wiring Diagram

Justification Two networks are proposed. One network for the connectivity between the firewall and the router, called the insecure network and the other network for the LAN network, called the secure network. This design is used for segregating the networks for better efficiency.

An IP network design table and network design will be defined, described and illustrated to paint the overall project design.

The Fig. 1 diagram illustrates a home network that includes a main PC for school work and photo editing and printing. There are three laptops used for school work, web

surfing, gaming and entertainment. The switch allows all computers and devices sharing capability for music, video, printing, gaming, and access to the internet and volunteer web server. Cloud computing is also available for storing and accessing files, photos, and media as well as access statistics from the visitors of the web server.

C. Network Devices Business Needs All hardware used is listed below with item descriptions, models, and quantity.

Item

Model

Broadband Router

Netgear DG834GT

Firewall

SPI Double firewall

Access Point

Linksys WAP54G Wireless-G Access Point

Switches

Cisco Catalyst 2960S24TD-L

Antivirus

McAfee Antivirus Plus 2016

Vendors: Vendors for the hardware and software are listed with support details for the hardware.

Vendor

Support

NETGEAR

http://support.netgear.com

Linksys

http://www.linksys.com

Cisco

http://www.cisco.com

McAfee

http://www.mcafee.com

Proposed Network Devices

Item

Model

Quantity

Broadband Router

Netgear DG834GT

1

Firewall

SPI Double firewall

1

Access Point

Linksys WAP54G Wireless-G Access Point

5

Switches

Cisco Catalyst 2960S24TD-L

5

Antivirus

McAfee AntiVirus Plus 2015

110 License (Desktops, Laptops and Servers)

Justification This will describe the process of installing and configuration of the network, routers, and all interfaces. Several key procedures will be utilized to ensure a useable and reliable network is readily available for use.

1. The switches will be interconnected to each other using appropriate cables.

2. The desktop computers are connected to the ports on the switches.

3. The access points are connected to the switch ports.

4. The web server is connected to a switch port.

The web application firewall is connected to the internet router as well as to a port on the switch. This would ensure that all traffic originating from the internet is scanned for malicious traffic before it reaches the LAN or the web server

D. Network Security Devices Business Needs Firewalls are used to separate networks with differing security requirements, such as the Internet and an internal network that houses devices with covered data, or internal networks that house varying protection levels of covered data (protection level 1 data network vs. protection level 2 data network). Since one of the primary functions of a

firewall is to prevent unwanted traffic from entering a network (and, in some cases, from exiting it), firewalls should be placed at the edge of logical network boundaries. It’s important to design the network optimally such that the managed firewall is positioned to inspect all incoming or outgoing network traffic. In the case where multiple entry points (ingress points) allow traffic into the covered network, traffic through each of the entry points should be routed through a firewall (or multiple firewalls) to ensure malicious traffic that would normally be blocked by the main entry point can enter the network by other means.

Proposed Network Security Devices Web security firewall: A firewall which would protect the web server from malicious attacks is required. The firewall will be capable of understanding attacks based on application layer protocols and for added and consolidated means will also be a part of the router.

Justification Since we have two networks that are going to communicate with each other one is secure and another being insecure, the best possible security device is firewall in order to merge these two networks securely into the one network.

E. Computer Systems Business Needs According to the system and network requirements the Desktop and Laptops would be needed.

Proposed Computer Systems a. Newest Dell Inspiron 3000 Premium High Performance Small Desktop, Windows 7/10 professional, Quad Core Intel i5-4460S 6M Cache up to 3.40GHz, 8GB DDR3, 1TB 7200rpm HDD, DVD/CD RW Drive, HDMI, VGA: 80 Pieces

b. 2016 Newest lenovo IdeaPad High Performance Premium 15.6" HD LED Backlit Display Laptop, Intel Gen 5 Core i5-5200 up to 2.7GHz CPU, 6GB RAM, 1TB HDD, Bluetooth, HDMI, DVD+/-RW, Win 10, 0.89 Inch Thin.: 20 Pieces Justification As the Desktop and laptop provides the required features required for the network and all the office works can be successfully performed and worked upon.

II.

Network Addresses Design A Subnetting Business Needs According to the current requirement of the Network and the topology decided for the layout of the network, the subnetting is used in order to manage the two parts of the network to work efficiently without any network security loop hole being left.

Proposed Subnetting (include the calculations) Insecure network address – 192.168.5.0/24 Component

IP Address

LAN interface of router

192.168.5.1

LAN interface 1 of web firewall

192.168.5.2

LAN network address – 192.168.6.0/24 Component

IP Address

LAN interface 2 of Web firewall

192.168.6.1

Web Server

192.168.6.2

User Computers

192.168.6.3. - 192.168.6.103

Wireless Laptops (Assuming 10)

192.168.6.104 - 192.168.6.114

Access Points

192.168.6.115 - 192.168.6.120

Justification Since we have two networks that are going to communicate with each other one is secure and another being insecure, the best possible security device is firewall in order to merge these two networks securely into the one network.

III.

Network Services Design A Network Services Business Needs The different services from the network are to associate the work and help in performing all the work necessary in order to establish the secure network around which all the secured resources are being shared and worked upon.

Proposed Network Services Following Network Services are being proposed: 1. Directory services 2. e-Mail 3. File sharing 4. Instant messaging 5. Printing 6. File server 7. Voice over IP 8. Video on demand 9. World Wide Web 10. Simple Network Management Protocol Justification All the mentioned network services are the services that are being used in offices in order to maintain the office resources and office work is being streamlined.

F. Network Security Measures Business Needs The network security measures are the ones that are used in order to make the business of the office secure and make secured environment in order to make successful office transactions.

Proposed Network Security Measures Monitoring: The process of the network activity to monitor the external and internal network in order to manage the overall security and take measures according to the layout of the network.

Training: The training of the employees is also needed apart from the security officials so that deliberate and silly security issues are not raised by the act of the internal network users.

Maintenance: In order to manage network and maintenance to be done, all the important files would be backed up the cloud network so that in case of the failure the system can be easily restored and minimal the down time.

Justification Security is very important as it lets the network and company data flow through the network securely without being there an issue of the network breach and attacks.

Bibliography Bhattacharya, S., Kirani, S. and Tsai, W. (n.d.). Quadtree interconnection network layout. [1992] Proceedings of the Second Great Lakes Symposium on VLSI. Cheung, H., Hamlyn, A., Wang, L., Yang, C. and Cheung, R. (2007). Computer Network Security Strategy for Coordinated Distribution System Operations. 2007 Large Engineering Systems Conference on Power Engineering.

Lincke, S. and Holland, A. (2007). Network security: Focus on security, skills, and stability. 2007 37th annual frontiers in education conference - global engineering: knowledge without borders, opportunities without passports.

Marin, G. (2005). Network Security Basics. IEEE Security and Privacy Magazine, 3(6), pp.68-72.

Meyer, B. (n.d.). Competitive learning of network diagram layout. Proceedings. 1998 IEEE Symposium on Visual Languages (Cat. No.98TB100254).

Radvansky, M., Kudelka, M., Horak, Z. and Snael, V. (2013). Network Layout Visualization Based on Sammon's Projection. 2013 5th International Conference on Intelligent Networking and Collaborative Systems.