Project Scope
In this task, we are asked to design network infrastructure proposal for HiTech Telecommunications Company. HiTech Telecommunications Company has three branches that is Brisbane, Canberra and Melbourne which is the head quarter. The following are IT infrastructure requirement for each branch:
Melbourne
- Webserver to host website
- Internet connection to branches
- Security to protect IT infrastructure servers.
- File sharing which hosts homepage for business
- Messaging server
- Print server (8 printers)
- Mailing server
- WLAN service
Brisbane
- Print server to manage 8 printers
- Mailing server
- WLAN service
It is important to mention that, for Canberra and Brisbane have similar infrastructure, hence we have not listed for Canberra.
A project requirement denotes to what the system is expected to work and the behavior of how it will work. This defines functional and non-functional requirements respectively. For our project, the following are our functional requirements:
- Security: for every computing environment, security is one of the major hot topics that must be put into lengthy discussion. Many of the companies have been brought down to knees due to poor or no security functionality in their premises. For our network design we are implementing, we are going to use Sophos firewall to filter out unwanted packets from our network. In addition we will be using secure VPN to ensure that users accessing company resources remotely in a secure manner. Furthermore, visitors should be able to access WLAN but they are not supposed to access company resources
- WLAN access: our design should include wireless network that should support visitors who carry with the wireless computing devices. The WLAN also should support HiTech Telecommunications Company employees.
- Real-time chat service: webserver should be instant in terms of data transfer. Our network design will consider this attribute
- Email communication facility for users has to be implemented for employee communication.
- Printing service is also a necessary service that we will be implemented in our networking design.
This project will be a user-centric-approach strategy. We will be focusing the users of the network and what they need the network to do for them. In addition, the design strategy will pay attention to performance and reliability non-functional requirements. It is expected that there will be minimal downtime events.
It is diligent to mention here that the whole design will be kept simple and the configurations will be simple. This will make the HiTech Telecommunication IT support team have easy time during network troubleshooting just in case there is a technical problem.
Hardware device |
Device details |
Required quantity |
Explanation why required |
Cost in USD |
Servers |
Processors number: 2 Processor core: 28 Processor speed:3.6 GHz Processor family: Intel Maximum Memory: 2TB, 128 GB DDR# RAM Windows server 2012 r2 Network controller: HPE 1 GB 321i 4 adapter-ports |
4 |
2 servers used at Melbourne to host file, web, mail, messaging, and print server 1 at Brisbane to host print and mail service 1 at Canberra to host print and mail service |
26644*4 |
Switch |
Flash memory: 64 MB DRAM: 128 MB RJ 45 ports: 48 Model model of switches: Cisco Switch 2900 series |
3 |
1 switch for Canberra 1 for Melbourne 1 for Brisbane |
2481*3 |
Wireless router |
DRAM : 512 MB Auxiliary port: RJ 45 Single Port Flash memory: 256 MB LAN interface: 4 fast Ethernet ports. WAN interface: 1 gigabyte Model: Cisco router 3500 series. |
3 |
1 AP for Canberra 1 for Melbourne and 1 for Brisbane. WAP will be used to support wireless devices access WLAN |
65 |
Router |
Network slot module : 1 Fixed USB 1.1 Ports : 2 DRAM: 512 MB Compact Flash: 64 MB Interface Card Slots: 4. |
3 |
1 router for Canberra 1 for Melbourne 1 for Brisbane |
1491*3 |
Firewall |
Model of firewall: Sophos |
1 |
Firewall to sieve incoming and outgoing traffic |
2570.54 |
Switch configuration
Switch 1
witch>ena
Switch#confi ter
Switch(config)#inter f0/1
Switch(config-if)#switchport mode trunk
Switch(config-if)#switchport trunk encapsulation dot1q
Switch(config-if)#switchport trunk allowed vlan all
Switch(config-if)#inter f0/2
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 2
% Access VLAN does not exist. Creating vlan 2
Switch(config-if)#inter f0/3
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 3
% Access VLAN does not exist. Creating vlan 3
Switch(config-if)#inter f0/4
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 4
% Access VLAN does not exist. Creating vlan 4
Switch(config-if)#inter f0/5
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 5
% Access VLAN does not exist. Creating vlan 5
Switch(config-if)#inter f0/6
Switch(config-if)#switchport access vlan 6
% Access VLAN does not exist. Creating vlan 6
Switch(config-if)#switchport mode access
Switch(config-if)#inter f0/7
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 2
Switch(config-if)#inter f0/8
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 2
Switch(config-if)#exi
Switch(config)#vtp domain mahadi
Switch(config)#vtp password musavi
Switch(config)#vtp mode server
Switch(config)#end
Switch#copy run star
Switch#show vtp status
VTP Version : 2
Configuration Revision : 0
Maximum VLANs supported locally : 64
Number of existing VLANs : 10
VTP Operating Mode : Server
VTP Domain Name : mahadi
VTP Pruning Mode : Disabled
VTP V2 Mode : Disabled
VTP Traps Generation : Disabled
MD5 digest : 0xEE 0xB3 0xDC 0x9F 0xE2 0xE0 0x25 0xDF
Configuration last modified by 0.0.0.0 at 3-1-2012 04:55:57
Local updater ID is 0.0.0.0 (no valid interface found)
Switch>
Switch>ena
Switch#conf ter
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#inter f0/1
Switch(config-if)#switchport mode trunk
Switch(config-if)#switchport trunk encapsulation ?
dot1q Interface uses only 802.1q trunking encapsulation when trunking
Switch(config-if)#switchport trunk encapsulation dot1q
Switch(config-if)#switchport trunk allowed all
% Invalid input detected at ‘^’ marker.
Switch(config-if)#switchport trunk allowed vl all
Switch(config-if)#inter f0/8
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access 122
% Invalid input detected at ‘^’ marker.
Switch(config-if)#switchport access vla 122
% Access VLAN does not exist. Creating vlan 122
Switch(config-if)#inter f0/2
Switch(config-if)#switchport access vla 123
% Access VLAN does not exist. Creating vlan 123
Project requirements
Switch(config-if)#switchport mode access
Switch(config-if)#inter f0/3
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vla 124
% Access VLAN does not exist. Creating vlan 124
Switch(config-if)#inter f0/4
Switch(config-if)#switchport access vla 125
% Access VLAN does not exist. Creating vlan 125
Switch(config-if)#switchport mode access
Switch(config-if)#inter f0/5
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vla 126
% Access VLAN does not exist. Creating vlan 126
Switch(config-if)#inter f0/6
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vla 127
% Access VLAN does not exist. Creating vlan 127
Switch(config-if)#inter f0/7
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vla 128
% Access VLAN does not exist. Creating vlan 128
IP assignement to Melbourne devices
Switch 3
Switch>
Switch>ena
Switch#confi ter
Switch(config)#inter f0/1
Switch(config-if)#switchport mode tr
Switch(config-if)#switchport trunk encapsulation dot1q
Switch(config-if)#switchport trunk allowed vlan all
Switch(config-if)#exi
Switch(config)#inter f0/2
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 129
% Access VLAN does not exist. Creating vlan 129
Switch(config-if)#inter f0/3
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 130
% Access VLAN does not exist. Creating vlan 130
Switch(config-if)#inter f0/4
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 131
% Access VLAN does not exist. Creating vlan 131
Switch(config-if)#inter f0/5
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 132
% Access VLAN does not exist. Creating vlan 132
Switch(config-if)#inter f0/6
Switch(config-if)#switchport mode access
Switch(config-if)#switchport access vlan 133
% Access VLAN does not exist. Creating vlan 133
Switch(config)#vtp domain mahadi
Changing VTP domain from NULL to mahadi
Switch(config)#vtp password musavi
Switch(config)#vtp mode server
Assigning IP Addresses to Switch devices
Switch 1
Department 1 Device
Department 2 Device
Department 3 Device
Department 4 Device
Department 5 Device
Department server Device
Switch 2
Department 1
Department 2
Assigning ip address to brisbane devices
Router configuration
Router#conf ter
Router(config)#inter fa0/0
Router(config-if)#description Mahadi
Router(config-if)#no shu
Router(config-if)#inter fa0/0.134
Router(config-subif)#ena
Router(config-subif)#encapsulation dot1q 134
Router(config-subif)#ip add 172.16.134.1 255.255.255.0
Router(config-subif)#inter fa0/0.135
Router(config-subif)#encapsulation dot1q 135
Router(config-subif)#ip add 172.16.135.1 255.255.255.0
Router(config-subif)#inter fa0/0.136
Router(config-subif)#ip add 172.16.136.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 136
Router(config-subif)#inter fa0/0.137
Router(config-subif)#encapsulation dot1q 137
Router(config-subif)#ip add 172.16.137.1 255.255.255.0
Router(config-subif)#inter fa0/0.138
Router(config-subif)#ip add 172.16.138.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 138
Router(config-subif)#exi
Router(config)#inter s0/0
Router(config-if)#no shu
Router(config-if)#description Musavi
Router(config-if)#ip add 172.16.120.1 255.255.255.0
Router(config-if)#bandwidth 64000
Router(config-if)#clock rate 64
Router(config-if)#no shu
Router(config-if)#exi
Router(config)#router rip
Router(config-router)#network 172.16.120.0
Router(config-router)#network 172.16.134.0
Router(config-router)#network 172.16.135.0
Router(config-router)#network 172.16.136.0
Router(config-router)#network 172.16.137.0
Router(config-router)#network 172.16.138.0
Router(config-router)#version 2
Router(config-router)#no auto
Router(config-router)#exi
Router(config)#service dhcp
Router(config)#ip dhcp excluded-address 172.16.134.1 172.16.134.10
Router(config)#ip dhcp pool HiTech
Router(dhcp-config)#net
Router(dhcp-config)#network 172.16.134.0 255.255.255.0
Router(dhcp-config)#lease 2 5 0
Router(dhcp-config)#default-router 172.16.134.1
Router(dhcp-config)#exi
Router(config)#access-list 126 deny tcp 172.16.139.0 0.0.0.255 any
Router(config)#access-list 126 permit tcp 172.16.139.0 0.0.0.255 any eq wwww
Router(config)#inter f0/0
Router(config-if)#ip access-group 126 out
Router(config-if)#end
Router#copy run star
Router Melbourne
Router>ena
Router#conf ter
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#inter s0/0
Router(config-if)#no shu
00:30:52: %LINK-3-UPDOWN: Interface Serial0/0, changed state to up
00:30:52: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up
Router(config-if)#bandwidth 64000
Router(config-if)#clock rate 64
Router(config-if)#ip address 172.16.120.2 255.255.255.0
Router(config-if)#inte f0/0
Router(config-if)#no shu
Router(config-if)#inter f0/0.122
Router(config-subif)#ip address 172.16.122.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 122
Router(config-subif)#inter f0/0.123
Router(config-subif)#encapsulation dot1q 123
Router(config-subif)#ip address 172.16.123.1 255.255.255.0
Router(config-subif)#inter f0/0.124
Router(config-subif)#ip address 172.16.124.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 124
Router(config-subif)#inter f0/0.125
Router(config-subif)#encapsulation dot1q 125
Router(config-subif)#ip address 172.16.125.1 255.255.255.0
Router(config-subif)#inter f0/0.126
Router(config-subif)#ip address 172.16.126.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 126
Router(config-subif)#inter f0/0.127
Router(config-subif)#encapsulation dot1q 127
Router(config-subif)#ip address 172.16.127.1 255.255.255.0
Router(config-subif)#inter f0/0.128
Router(config-subif)#ip address 172.16.128.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 128
Router(config-subif)#exi
[6]
Brisbane router
Router>
Router>ena
Router#conf ter
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#inter s0/1
Router(config-if)#no shu
01:55:46: %LINK-3-UPDOWN: Interface Serial0/1, changed state to up
Router(config-if)#ip add 172.16.121.2 255.255.255.0
Router(config-if)#ba
Router(config-if)#bandwidth 64000
Router(config-if)#clock 64
^
% Invalid input detected at ‘^’ marker.
Router(config-if)#clock rate 64
Router(config-if)#inter f0/0
Router(config-if)#no shu
Router(config-if)#inter fa0/0.129
Router(config-subif)#ip add 172.16.129.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 129
Router(config-subif)#inter fa0/0.130
Router(config-subif)#encapsulation dot1q 130
Router(config-subif)#ip add 172.16.130.1 255.255.255.0
Router(config-subif)#inter fa0/0.131
Router(config-subif)#ip add 172.16.131.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 131
Router(config-subif)#inter fa0/0.132
Router(config-subif)#encapsulation dot1q 132
Router(config-subif)#ip add 172.16.132.1 255.255.255.0
Router(config-subif)#inter fa0/0.133
Router(config-subif)#ip add 172.16.133.1 255.255.255.0
Router(config-subif)#encapsulation dot1q 133
Router(config-subif)#exi
Router(config)#router rip
Router(config-router)#network 172.16.121.0
Router(config-router)#network 172.16.129.0
Router(config-router)#network 172.16.130.0
Router(config-router)#network 172.16.131.0
Router(config-router)#network 172.16.132.0
Router(config-router)#network 172.16.133.0
Router(config-router)#version 2
Router(config-router)#no aut
Router(config-router)#end
Router#copy run star
DHCP configuration
Access point configuration guidelines
The following procedure is used to configure access points in our project.
- Power on the access point device
- Connect one end of a patch code to the personal computer’s Ethernet port and the other end on WAP Ethernet port.
- In your personal computer’s control panel in adapter setting, change the IP address to be in the same subnet as the access point. Give it a default gateway number equal to the WAP’s IP address.
- Go to the browser and type the default gateway mounted behind the WAP. Press Enter.
- In case popup for credentials appears, type admin admin.
- Click on “Quick Setup”
- Type the SSID name in the “Wireless” area.
- In the security field, “WPA2-PSK” type a standard password.
- Click “Next”, then “Finish”. The device is functional and can be used [7]
Server configuration guidelines
The configurations guide lines are taking place in a windows server 2012 r environment. Below are the guidelines.
- Access windows server manger tool
- Click “Tools”. Click on “File and Storage shares ”, click New Share
- Choose “SMB share”. Click Next
- Select Server, click next.
- Type share name, click next
- Make custom permissions as per HiTech Telecommunication’s requirements.
- Counter check every step and click “Create”. We have successfully created shared folder.[8]
Demonstrations
Ping of Melbourne Device from Brisbane
Ping of Canberra device from Bribane
References
[1] |
Arad, Nir, T. Daniel and M. Mondaeev, Hardware implementation of network testing and performance monitoring in a network device., 2010. |
[2] |
A. Bianco and F. Neri, Next Generation Optical Network Design and Modelling, New York City: Springer, 2013 . |
[3] |
M. Palmer, Hands-On Networking Fundamentals, Boston: Cengage Learning, 2012. |
[4] |
J. Pyles, . L. Carrell and . Tittel, Guide to TCP/IP: IPv6 and IPv4, Boston: Cengage Learning, 2016. |
[5] |
M. M. Alani, Guide to Cisco Routers Configuration: Becoming a Router Geek, New York City: Springer, 2017. |
[6] |
M. Duggan, Cisco CCIE Routing and Switching v5.0 Configuration and Troubleshooting, Indiana Polis: Cisco Press, 2014. |
[7] |
M. Duggan, Cisco CCIE Routing and Switching v5.0 Configuration Practice Labs, Indianapolis: Cisco Press, 2014. |
[8] |
L. Wang, . Jajodia and . Singhal, Network Security Metrics, New York City: Springer, 2017 . |