Network Infrastructure Design: Security, Availability, Scalability

Task

You are working as a network engineer in, your company, based in London, contracted a third party company to design and implement a network for their new branch in London.

Given below is the third party company network infrastructure design including recommendation submitted to which includes the network floor diagram, network topology as expressed in figure 1 and 2

Figure 1: Existing network floor diagram

Figure 2: Proposed Network topology

The third party company decided that there is no need to allocate a room specifically for the server, as each department will keep their server close to the users as possible for ease of management, so Sales server will be close to the Sales users and so is the Engineers�. �The backup is carried out in the main fileserver using an external hard disk, which is stored in a locked cabinet next to the server.

Based on the number of users, the third party company decided that there is no need to segment the network as there is a limited number of users and hence there will be no large broadcast domains

The company director expressed concerns and asked you to evaluate the third party network solution based on which you are to design a new solution.

Uses private network address of 192.168.221.0/24, and a public IP address of 210.211.212.160/28. Security, availability and scalability are paramount and hence your design and configuration must be based on these criteria.

Table 1 shows the users distribution and requirement according to policy.

Deliverables

The network given in the above scenario may have many areas of network security concerns, you are to perform the following task and provide the following:

Evaluate the given network design in terms of security, availability and scalability. Your evaluation should include discussions of potential security impacts of the given network.

With the aid of diagram, design a new secured and reliable network. Your network design should include:

• Analysis and evaluation of topology used including Network documentation (topology documentation, Devices configuration tables and end devices configuration table).
• Analysis and evaluation of devices, protocol and technologies used.
• Network security consideration.
• Sample related configuration of switches and routers should be discussed in the assignment body
• Produce a test report on all network including web, email and dns servers functionality and connectivity across all network including to/from DMZ.
• Include network simulation file in your assignment appendices.