Planning And Designing A Network For MNO Enterprise: Essay Requirements.

1. 5 departments with 5 subnets. Only admin, HR and the finance department will have all the access to the services available. Engineering and sales have access to the print server and file server but not to the finance department.
2. IP network design
3. Hardware requirements with costs specification
4. Configuration details on the hardware (Routers and Switches) 

Report requirements: The report should have a detail explanation of the planning and designing of the network. It is recommended that bullet points are only included whenever necessary. 

1. Project Scope
2. Project requirements
3. Network design – Consider the human factor design concepts
4. IP addressing in a tabular form (include justification whenever necessary)
5. Network topology diagram (Netsim preferred)
   • Switch configuration
   • Router configuration
   • DHCP configuration
   • The access point and server configuration guidelines
   • Security configuration

Note: Student should show the demo of the network design in Week 11 lab. Demonstration marks will be awarded in regards to the stage of the completion of the design.  

Design Objectives

The network designed we are proposing is purposed to serve MNO business enterprises. The business enterprise has five departments namely admin, sales, engineering finance and human resource department to be served with the proposed network. It should be put into consideration that the network to be design will be constructed on employee instructional reasons but for administrative intentions. That is, the employees of MNO are not the ones to instruct the network construction engineers what they would want the network to do for them [1].

Design Objectives  

The network to be designed has to achieve the following business objectives:

• Scalability: the designed network will be flexible to introduce fresh departments without redesigning the network afresh. Additionally, the designed network will support MNO business enterprises in the next five or so years.
• Security: his network design intends to provide total security to enterprise’s computational environment. This will be achieved by use of access-lists and Sophos firewall device.

Intended network users  

Finance, administration, engineering, human resource and sales departments are the key intended users or the proposed network. Gussets and customers will be partial users of the network since they will obtain information that has been processed by the network. The later users will have no direct access to the network.

Project hardware requirements   

To implement the above mentioned network design, tabulated below are project hardware requirements.

Device name	Specifications	Quantity	Why needed?
Servers	ü Processor family: Intel ü Processor core: 28 ü Processors number: 2 ü Processor speed:3.6 GHz ü Cache level: L3 38.50 ü Memory slots: 20 DIMM ü Maximum Memory: 2TB, 128 GB DDR# RAM ü Network controller: HPE 1 GB 321i 4 adapter-ports	4	DNS, Print and File Sharing, DHCP and mailing and messaging services will be hosted by individual servers.
Router	ü Fixed USB 1.1 Ports : 2 ü DRAM: 512 MB ü Network slot module : 1 ü Interface Card Slots: 4. Each supports HWIC, WIC, and VWIC type modules. ü Compact Flash: 64 MB	1	Inter-VLAN routing and routing of packets in and outside our network will require router to be present
Switch	ü Flash memory: 64 MB ü DRAM: 128 MB ü RJ 45 ports: 48 ü Model: Cisco Switch 2900 series	5	To extend our network for it to be accessible with our departments, switches are required.
Firewall	ü Model: Sophos	1	Outgoing and incoming traffic will be monitored with the firewall
Wireless router	ü Flash memory: 256 MB ü DRAM : 512 MB ü Mini-USB port: 1 ü LAN interface: 4 fast Ethernet ports. ü Auxiliary port: RJ 45 Single Port ü WAN interface: 1 gigabyte Ethernet 0 and 1 Serial interfaces ü Model: Cisco router 3500 series.	5	Wireless network will support use of handheld devices. Each department has a provision of one Wireless AP.
Switch	ü Distribution Layer	1	Distribution layer switch will be necessary to implement router on stick technology.

  [2]

Other hardware requirements

Device name	Quantity	Justification
Patrice boxes	170 pieces	Used to terminate patch cods
Switch cabinets	4 (0.8 x 0.5  m) and 1 (2.8 x 0.5 m)	Cabinets will be hosting departmental and serer room switches and servers
RJ 45 male Clips	170 pieces	Used for termination of patch codes
Trunkings	70 pieces	Used to cover LAN cables
CAT 6  network cable	17000 meters	Used for building the LAN
UPS	4 (0.5 kVA), 1 (3.54 kVA)	For power backup to the server room and switch cabinets
Patch pane	5 pieces	Used for cable management in each of our cabinets
Patch codes	170 pieces each 0.5 meters	Used for cable management in the switch cabinets

P subnetting

In this task assignment, we assume our ISP provided IP address is 192.168.50.0/24. The subnetting table will look as below:

LAN area	Number of Nodes	Octet	Network Address	FUA	LUA	Mask
Finance	30	32	192.168.50.0	192.168.50.0	192.16.50.1	/27
Human Resource	30	32	192.168.50.32	192.168.50.33	192.168.50.62	/27
Administration	30	32	192.168.50.64	192.168.50.65	192.168.50.94	/27
Engineering	30	32	192.168.50.96	192.168.50.97	192.168.50.126	/27
Sales	30	32	192.168.50.128	192.168.50.129	192.168.50.158	/27
WAN	2	4	192.168.50.160	192.168.50.161	192.168.50.162	/27

Device	Interface	IP configuration	Connected interface
Administration PC	Fe 0	192.168.50.3/27	Administration Swit fa0/3
Administration Switch	F0/3		Administration PC fe0
Administration Switch	F0/2		Administration Wireless AP fe0
AdministrationSwitch	F0/1		DistriLayer f0/3
Administration Wireless AP	Fe0	192.168.50.2/27	AdministrationSwitch fa0/2
HUMAN RESOURCE switch	Fa0/1		Ditri layer fa0/4
HUMAN RESOURCE Switch	Fa0/3		HUMAN RESOURCE Wireless AP fe0
Human Resource Switch	F0/4		HUMAN RESOURCE pc e0
Human Resource PC	E0	192.168.50.35/27	Human Resource switch fa0/4
HUMAN RESOURCE wirelessAP	Fe0	192.168.50.34/27	Human Resource Switch f0/3
DistriLayer	Fa0/1		MainRouter fa0/0
DistriLayer	Fa0/2		Fin Switch fa0/1
DistriLayer	Fa0/3		Administration Switch fa0/1
DistriLayer	Fa0/4		HUMAN RESOURCE Switch fa0/1
DistriLayer	Fa0/5		Engi fa0/1
DistriLayer	Fa0/6		Sales Switch fa0/1
DistriLayer	Fa0/7		Mail&Mess e0
DistriLayer	Fa0/8		DNS E0
DistriLayer	Fa0/9		DHCP Server e0
DistriLayer	Fa0/10		Print&FileSharing e0
MainRouter	Fa0/0	192.168.50.94/27	DistriLayer fa0/1
Print&File sHuman Resourceing	E0	192.168.50.70/27	DistriLayer fa0/10
DHCP	E0	192.168.50.67	DistriLayer fa0/9
DNS server	E0	192.168.50.6827	DistriLayer Fa0/8
Mail&Messaging	E0	192.168.50.69/27	DistriLayer fa0/7
Finance Switch	Fa0/4		Fina WirelessAP
Finance Switch	Fa/7		Fin PC fe0
Finance Switch	F0/1		DistributionLaryer fa0/2
Fina Wireless Ap	Fe0	192.168.50.66/27	Fin fa0/4
Engineering Switch	Fa0/3		Eng Wireless AP fe0
Engineering Switch	Fa0/4		Engi PC e0
Engineering Switch	Fa0/1		DistriLayer fa0/5
Engineering Wireless AP	Fa0	192.168.50.98	Eng Switch f0/3
Sales Switch	Fa0/2		Sales WirelessAP fe0
Sales Switch	Fa0/3		Sales Dep PC e0
Sales Switch	Fa0/1		Distribution Switch fe0/6
Sales Dep PC	E0	192.168.50.158/27	Sales Switch fa0/3
Sales Wireless Ap	Fe0	192.168.50.150/27	Sales Switch fa0/2
Item Name	Local Interface	IP configuration	Remote  interface
Admin PC	Fe	192.168.50.3/27	AdminSwit fa0/3
Admin Switch	F0/3		Admin PC fe0
Admin Switch	F0/2		Admin Wireless AP fe0
AdminSwitch	F0/1		Distribution Layer f0/3
Admin Wireless AP	Fe0	192.168.50.2/27	AdminSwitch fa0/2
HR switch	Fa0/1		Ditribution layer fa0/4
HR Switch	Fa0/3		HR Wireless AP fe0
Hr Switch	F0/4		HR pc e0
Hr PC	E0	192.168.50.35/27	Hr switch fa0/4
HR wirelessAP	Fe0	192.168.50.34/27	Hr Switch f0/3
DistributionLayer	Fa0/1		MainRouter fa0/0
DistributionLayer	Fa0/2		Fin Switch fa0/1
DistributionLayer	Fa0/3		Admin Switch fa0/1
DistributionLayer	Fa0/4		HR Switch fa0/1
DistributionLayer	Fa0/5		Engi fa0/1
DistributionLayer	Fa0/6		Sales Switch fa0/1
DistributionLayer	Fa0/7		Mail&Mess e0
DistributionLayer	Fa0/8		DNS E0
DistributionLayer	Fa0/9		DHCP Server e0
DistributionLayer	Fa0/10		Print&FileSharing e0
MainRouter	Fa0/0	192.168.50.94/27	DistributionLayer fa0/1
Print&File shring	E0	192.168.50.70/27	DistributionLayer fa0/10
DHCP	E0	192.168.50.67	DistributionLayer fa0/9
DNS server	E0	192.168.50.6827	DistributionLayer Fa0/8
Mail&Messaging	E0	192.168.50.69/27	DistributionLayer fa0/7
Finance Switch	Fa0/4		Fina WirelessAP
Finance Switch	Fa/7		Fin PC fe0
Finance Switch	F0/1		DistributionLaryer fa0/2
Fina Wireless Ap	Fe0	192.168.50.66/27	Fin fa0/4
Engineering Switch	Fa0/3		Eng Wireless AP fe0
Engineering Switch	Fa0/4		Engi PC e0
Engineering Switch	Fa0/1		DistributionLayer fa0/5
Engineering Wireless AP	Fa0	192.168.50.98	Eng Switch f0/3
Sales Switch	Fa0/2		Sales WirelessAP fe0
Sales Switch	Fa0/3		Sales Dep PC e0
Sales Switch	Fa0/1		Distribution Switch fe0/6
Sales Dep PC	E0	192.168.50.158/27	Sales Switch fa0/3
Sales Wireless Ap	Fe0	192.168.50.150/27	Sales Switch fa0/2
Device	Interface	IP configuration	Connected interface
Admin PC	Fe	192.168.30.3/27	AdminSwit fa0/3
Admin Switch	F0/3		Admin PC fe0
Admin Switch	F0/2		Admin Wireless AP fe0
AdminSwitch	F0/1		Distribution Layer f0/3
Admin Wireless AP	Fe0	192.168.30.2/27	AdminSwitch fa0/2
HR switch	Fa0/1		Ditribution layer fa0/4
HR Switch	Fa0/3		HR Wireless AP fe0
Hr Switch	F0/4		HR pc e0
Hr PC	E0	192.168.30.35/27	Hr switch fa0/4
HR wirelessAP	Fe0	192.168.30.34/27	Hr Switch f0/3
DistributionLayer	Fa0/1		MainRouter fa0/0
DistributionLayer	Fa0/2		Fin Switch fa0/1
DistributionLayer	Fa0/3		Admin Switch fa0/1
DistributionLayer	Fa0/4		HR Switch fa0/1
DistributionLayer	Fa0/5		Engi fa0/1
DistributionLayer	Fa0/6		Sales Switch fa0/1
DistributionLayer	Fa0/7		Mail&Mess e0
DistributionLayer	Fa0/8		DNS E0
DistributionLayer	Fa0/9		DHCP Server e0
DistributionLayer	Fa0/10		Print&FileSharing e0
MainRouter	Fa0/0	192.168.30.94/27	DistributionLayer fa0/1
Print&File shring	E0	192.168.30.70/27	DistributionLayer fa0/10
DHCP	E0	192.168.30.67	DistributionLayer fa0/9
DNS server	E0	192.168.30.6827	DistributionLayer Fa0/8
Mail&Messaging	E0	192.168.30.69/27	DistributionLayer fa0/7
Finance Switch	Fa0/4		Fina WirelessAP
Finance Switch	Fa/7		Fin PC fe0
Finance Switch	F0/1		DistributionLaryer fa0/2
Fina Wireless Ap	Fe0	192.168.30.66/27	Fin fa0/4
Engineering Switch	Fa0/3		Eng Wireless AP fe0
Engineering Switch	Fa0/4		Engi PC e0
Engineering Switch	Fa0/1		DistributionLayer fa0/5
Engineering Wireless AP	Fa0	192.168.30.98	Eng Switch f0/3
Sales Switch	Fa0/2		Sales WirelessAP fe0
Sales Switch	Fa0/3		Sales Dep PC e0
Sales Switch	Fa0/1		Distribution Switch fe0/6
Sales Dep PC	E0	192.168.30.158/27	Sales Switch fa0/3
Sales Wireless Ap	Fe0	192.168.30.130/27	Sales Switch fa0/2

Router configuration

Router>

Router>enable

Router#config ter

Router(config)#hos HQMainRouter

HQMainRouter(config)#banner motd @This our HQ router. Do not tamper with it@

HQMainRouter(config)#ena secr cisco

HQMainRouter(config)#ser pass

HQMainRouter(config)#inter fa0/0

HQMainRouter(config-if)#ip add 200.2.2.2 255.255.255.0

Distribution layer switch configuration

Switch>ena

Switch#conf ter

Switch(config)#hos InterVLANDistribution__Layer_Switch

InterVLANDistribution__Layer_Switch(config)#bann motd @This my Core Switch@

InterVLANDistribution__Layer_Switch(config)#line vty 0 15

InterVLANDistribution__Layer_Switch(config-line)#pass cisco

InterVLANDistribution__Layer_Switch(config-line)#logi

InterVLANDistribution__Layer_Switch(config-line)#logg sy

InterVLANDistribution__Layer_Switch(config-line)#exi

InterVLANDistribution__Layer_Switch(config)#line c 0

InterVLANDistribution__Layer_Switch(config-line)#pass cisco

InterVLANDistribution__Layer_Switch(config-line)#logi

InterVLANDistribution__Layer_Switch(config-line)#logg sy

InterVLANDistribution__Layer_Switch(config-line)#exi

InterVLANDistribution__Layer_Switch(config)#ser password-encryption

InterVLANDistribution__Layer_Switch(config)#ena secr                                                   

InterVLANDistribution__Layer_Switch(config)#ena secr cisco

InterVLANDistribution__Layer_Switch(config)#vlan 2

VLAN 2 added:

    Name:VLAN0002

InterVLANDistribution__Layer_Switch(config-vlan)#vlan 3

VLAN 3 added:

    Name:VLAN0003

InterVLANDistribution__Layer_Switch(config-vlan)#vlan 4

VLAN 4 added:

    Name:VLAN0004

InterVLANDistribution__Layer_Switch(config-vlan)#vlan 5

VLAN 5 added:

    Name:VLAN0005

InterVLANDistribution__Layer_Switch(config-vlan)#vlan 6

VLAN 6 added:

    Name:VLAN0006

InterVLANDistribution__Layer_Switch(config-vlan)#inter vla 2

InterVLANDistribution__Layer_Switch(config-if)#ip add 192.168.50.33 255.255.255.224

InterVLANDistribution__Layer_Switch(config-if)#no shu

InterVLANDistribution__Layer_Switch(config-if)#inter vla 3

InterVLANDistribution__Layer_Switch(config-if)#ip add 192.168.50.1 255.255.255.224

InterVLANDistribution__Layer_Switch(config-if)#no shu

InterVLANDistribution__Layer_Switch(config-if)#inter vla 4

InterVLANDistribution__Layer_Switch(config-if)#ip add 192.168.50.129 255.255.255.224

InterVLANDistribution__Layer_Switch(config-if)#no shu

InterVLANDistribution__Layer_Switch(config-if)#inter vla 5

InterVLANDistribution__Layer_Switch(config-if)#ip add 192.168.50.97 255.255.255.224

InterVLANDistribution__Layer_Switch(config-if)#no shu

InterVLANDistribution__Layer_Switch(config-if)#inter vla 6

InterVLANDistribution__Layer_Switch(config-if)#ip add 192.168.50.65 255.255.255.224

InterVLANDistribution__Layer_Switch(config-if)#no shu

InterVLANDistribution__Layer_Switch(config-if)#inter fa0/1

InterVLANDistribution__Layer_Switch(config-if)#no switchport

InterVLANDistribution__Layer_Switch(config-if)#ip address 200.2.2.1 255.255.255.0

InterVLANDistribution__Layer_Switch(config-if)#no shu

InterVLANDistribution__Layer_Switch(config-if)#exi

InterVLANDistribution__Layer_Switch(config)#ip route 0.0.0.0 200.2.2.2

InterVLANDistribution__Layer_Switch(config)#ip route 0.0.0.0 0.0.0.0 200.2.2.2

Assigning IP address to Client PC

Press Enter to begin

C:>ipconfig /ip 192.168.50.3 255.255.255.224

C:>ipconfig /dg 192.168.50.1

DHCP CONFIGURATION

Router>enable

Router#config ter

Enter configuration commands, one per line.  End with CNTL/Z.

Router(config)#hos HQMainRouter

HQMainRouter(config)#banner motd @This our HQ router. Do not tamper with it@

HQMainRouter(config)#ena secr cisco

HQMainRouter(config)#ser pass

HQMainRouter(config)#inter fa0/0

HQMainRouter(config-if)#ip add 200.2.2.2 255.255.255.0

HQMainRouter(config-if)#

HQMainRouter(config-if)#end

HQMainRouter#conf ter

Enter configuration commands, one per line.  End with CNTL/Z.

HQMainRouter(config)#ip dhcp pool MNOLAN

HQMainRouter(dhcp-config)#network 192.168.50.1 0.0.0.255

HQMainRouter(dhcp-config)#network 192.168.50.1 0.0.0.31

QMainRouter(dhcp-config)#ne

HQMainRouter(dhcp-config)#net

HQMainRouter(dhcp-config)#network 192.168.50.0

HQMainRouter(dhcp-config)#default-router ?

hostname or a.b.c.d     Router's name or IP address

HQMainRouter(dhcp-config)#default-router 200.2.2.2

HQMainRouter(dhcp-config)#dns 192.168.50.68

HQMainRouter(dhcp-config)#lease 2 12 0

HQMainRouter(dhcp-config)#exi

HQMainRouter(config)#inter f0/0

HQMainRouter(config-if)#ip helper-address 192.168.50.67

Access point configuration

To configure our access points, follow the steps below:

1. Make sure the access point is powered.
2. Insert network cable to one of the ports on the AP
3. Insert the other end of the cable in your computer.
4. Read behind the AP the default settings. NB. Most of the default settings are 192.168.1.1 as the default gateway and admin admin as the username and passcode respectively.
5. Change the IP address of your computer to statically match that one of AP’s LAN.
6. Access the browser from your laptop
7. Type in the URL the default gateway of the AP
8. Configuration interface will be displayed as below
9. Setting the IP address range

Configure the ip address as below. Make sure your LAN IP address match respectively. Click “Save Changes”. The AP will automatically restart.Configure Wireless access point SSID as shown below.

1. NB, each step all the changes required to be saved at every step. The Wireless AP is ready for use.

DHCP server configuration

Once the server is powered and running, IP should be assigned manually. Follow the images below on how to do it.The DHCP service will be enabled as the figure below. Be keen on the parameters being used 

Security configuration

The security will be implemented by use of access lists. Router will be the tool of implementation. Commands below are employed

HQMainRouter(dhcp-config)#ne

HQMainRouter(dhcp-config)#net

HQMainRouter(dhcp-config)#network ?

a.b.c.d                 Network number in dotted-decimal notation

HQMainRouter(dhcp-config)#network 192.168.50.0 ?

/nn or a.b.c.d          Network mask or prefix length

<cr>                    

HQMainRouter(dhcp-config)#network 192.168.50.0

HQMainRouter(dhcp-config)#default-router ?

hostname or a.b.c.d     Router's name or IP address

HQMainRouter(dhcp-config)#default-router 200.2.2.2

HQMainRouter(dhcp-config)#dns 192.168.50.68

HQMainRouter(dhcp-config)#lease 2 12 0

HQMainRouter(dhcp-config)#exi

HQMainRouter(config)#inter f0/0

HQMainRouter(config-if)#ip helper-address 192.168.50.67

HQMainRouter(config-if)#exi

HQMainRouter(config)#access-list 107 deny tcp 192.168.50.96 0.0.0.64 192.168.50.64 0.0.0.32

HQMainRouter(config)#access-list 107 permit tcp 192.168.50.96 0.0.0.64 192.168.50.70 0.0.0.0

HQMainRouter(config)#access-list 107 permit ip any any

HQMainRouter(config)#inter fa0/0

HQMainRouter(config-if)#ip access-group 107 in

Switch configurations

We will display one of the switches here. NB. Rest of the switch configuration will use the same syntax commands changing only the parameters.

Switch>ena

Switch#confi ter

Enter configuration commands, one per line.  End with CNTL/Z.

Switch(config)#hos AdminDepSwitch

AdminDepSwitch(config)#ena se cisco

AdminDepSwitch(config)#li c 0

AdminDepSwitch(config-line)#pas cisco

AdminDepSwitch(config-line)#logi

AdminDepSwitch(config-line)#line vty 0 15

AdminDepSwitch(config-line)#pass cisco

AdminDepSwitch(config-line)#logi

AdminDepSwitch(config-line)#exi

AdminDepSwitch(config)#inter range f0/1-48

AdminDepSwitch(config-if-range)#switchport mode access

AdminDepSwitch(config-if-range)#switchport access vlan 2

References

[1]	G. (. D. Oberlender, Project Management for Engineering and Construction, Third Edition, McGraw Hill Professional, 2014 .
[2]	C. A. Ogaja, A Practical Guide to Project Design, Boca Raton: crc press, 2016.
[3]	T. Nguyen, Understanding TCP/IP Subnetting, EnCognitive.com., 2015.
[4]	J. Pyles, ‎. L. Carrell and ‎. Tittel, Guide to TCP/IP: IPv6 and IPv4, Boston: Cengage Learning, 2016.
[5]	W. Panek, ‎. Wentworth and ‎. Chellis, MCTS Windows Server 2008 Network Infrastructure Configuration Study Guide, Hoboken: John Wiley & Sons, 2015 .
[6]	D. Rountree, Windows 2012 Server Network Security: Securing Your Windows Network Systems, Boston: Newnes, 2013.
[7]	R. Nobel, ‎. Ziliotto and ‎. Lovison, CCIE Wireless Exam (350-050) Quick Reference: CCIE Wirel Quick Ref ePub _1, Indianapolis: Cisco Press, 2012.
[8]	M. Duggan, Cisco CCIE Routing and Switching v5.0 Configuration and Troubleshooting, Indiana Polis: Cisco Press, 2014.