Network Design Principles and Security Evaluation

Students who successfully complete this module will be able to:

1.Identify, analyse and communicate principles and processes of Network Design.

2.Critically analyse and evaluate business and technical Requirements.

3.Plan and design a Network Infrastructure (LAN/WAN/MAN).

4.Design and evaluate a management and implementation Strategy for a Network.

5.Collect and synthesise information to inform a choice of vendor solutions, with the module assignment providing a good opportunity to test this area.

6.Evaluate a range of information comparing alternative methods and techniques used in Network Design.

Be able to troubleshoot and maintain integrated, complex networks.

This assignment will assess the following learning outcomes:

1.Demonstrate a broad understanding of the knowledge base of this module, and its terminology and discourse

2.Evaluate network devices to be used for a particular area in the network in relation to requirement

3.Design and implement a fully functional network infrastructure based on requirement given in the assignment brief

4.Demonstrate autonomous learning context and draw on prior experiences reflecting and evaluating on new leaning outcome.

The original design has been configured based on some of the considerations listed as follows:

1-The existing network was not segmented into many VLAN due to the limited number of users which is 48.

2-Each and every department assigned a dedicated file server, which will be managed by the department staff and hence will be allocated as close to the users as possible to ease the management, for example, HR server will be close to the HR users and so is Finance etc..

3-The backup services will be performed automatically on an external Hard Disk Drive, the backup device will be placed as close to each server as possible and will be secured in a local cabinet.

The company director expressed concerns and asked you to evaluate the security which would result in a better designed security solution.  abc.org company uses private  network address of 192.168.0.0/24, and a public IP address of 10.11.12.160/29. Security, Availability and scalability are paramount and hence your design and configuration must be based on these criteria.  

Need a complete isolation from all users of other groups

Need a complete isolation from all users of other groups

All groups have the same security preferences, none cannot access Finance and HR

Each server will be positioned near the allocated users, HR, Finance and Users, permissions of files and folders are based on users and group privileges.

Web and email servers will be used by all users including external access.

The network given in the above scenario may have many areas of network security concerns. Evaluate the given network design in terms of security, availability and scalability. Your evaluation should include discussions of potential security impacts and potential solutions.

With the aid of diagram, design a new secured and reliable network. Your network design should include:

Description of the topology used

Description of all devices used,

Description of technology used to fulfil the requirements

Consideration the following area of concern, Spanning Tree Protocol (STP), Demilitarised Zone (DMZ)

Sample related configuration of Switches, Routers (a full configuration must be attached in  the appendix)

Sample security configuration and implementation with description

Devices configuration tables including end devices

Technology related configuration such as (VLANs, bandwidth aggregation, Trunking, VTP, DHCP, etc..)

Test the web, email and dns servers

Test the connectivity across network & to/from DMZ.