Network Design and Implementation
Project - Designing and Developing a network solution for a medium sized organization
Scenario
You and your group members are working for the AusNet networking solution provider. Your team is asked to design a network solution for the requirements specified by the Seven Star Motors (SSM) Australia and test it using GNS3 emulation platform before deploying the real network and document the specifications.
Company - Seven Star Motors (SSM)
Seven Star Motors is a vehicle, motorcycle, and engine manufacturing company founded in 1916. It is one of the best-selling luxury automakers in the world. The company is a component of the Euro Stoxx 50 stock market index. SSM headquartered in Munich, Bavaria and owns Mini cars and is the parent company of Star Motor Cars. SSM has overseas subsidiaries in different countries such as Australia, Brazil, Canada, China, India, Japan, Mexico, South Africa and United States.
Seven Star Motor Company Requirements
SSM Australia maintains, hires out, buys and sells new and used premium branded motor vehicles in Australia. The head office of the company is situated in Sydney. It has branches in Melbourne, Perth and Brisbane. Company wants to Implement a network which supports potential growth over the next five years and they have hired AusNet to layout the network with an expectation of 50% growth of current IP requirements. (For the simplicity of the case study and to limit the scope we have ignored the connections to the international branches.)
At present, there are 125 employees at department of Sales and Hire, 45 employees in department of Marketing, 20 employees in department of Vehicle Maintenance, 25 employees in the department of Business Administration and 5 employees at department of Site Security providing their service to the head office which is stationed in Sydney. All members of department of Site Security require access to all the network via a wireless LAN at each site. Company has 20 employees working for the Technical Support Group, 5 employees at each site. Sydney head office also hosts the server farm for the network. These servers contain web servers and file servers which carry company sensitive information.
Sydney head office is spread across 2 major buildings which are 5km apart from each other. Building A is a three- storied building with 50 Sales and Hire employees on 2nd and 1st flow. Rest of the Sales and Hire Department employees and Site Security Group is stationed in the ground floor. Building B is a two-storied building with 1st flow for department of Marketing and Technical support group and the ground flow for the other departments.
Server Farm is hosted in building A. In connecting the major building of the head office, company has requested to set up a leased line with security measurements.
The Melbourne branch spans across a single area which is 150metres x 100 metres and has a building floor of size 25meters x 30 meters. It has a Hire Only department, Vehicle Maintenance department and Site Security department which employs 265, 20, 5 employees respectively.
Brisbane branch spans across a land of 100metres x 100 metres with 25metres x 40 metres building floor dimensions. It has a Sales Only department, Vehicle Maintenance department, site security department which employs 160,20,5 employees respectively. The Internet Service Provider (ISP) for the company is based in Brisbane. Use class C ISP network connection address.
Perth Branch is spread over a land of 125 metres x 100 metres with a single storied building of the floor size 20metres x 40 metres. Perth branch has a department of Sales Only, Vehicle maintenance and site security which employs 100,20,5 employees respectively.
Company also has a branch just started with 7 employees for, 5 in Hire Only department and 2 in Business Administration departments who are working for the Brisbane branch through a remote VPN connection. This branch located in a Brisbane inner suburb has internet connection through an ISP provider.
Further Company request at least one separate printer for each department in each Branch. Each department also has a separate server reserved. Main Network Administrator who is working for the Technical Support group in Sydney should have access to all the devices over the network to both monitor and configure as necessary using a secured connection. Company also insists upon automatic configuration of IP addresses to minimize administrative overhead. They also insist the network to be reliable and secured to the maximum extend.
Company prefers to use private addresses as a security concern and prefers to buy a range of public addresses which could be used for internet connections using Network Address Translation (NAT).
The company requires the implementation of following security policies to control the flow of IP traffic within its network and to the Internet.
For clarity, all the requirements requested by the company is listed in point form bellow.
- Access Rules for Server Farm LAN must be decided as to which VLANs can access which servers in the Server Farm VLAN. The servers need to be protected from malicious computer attacks and unauthorized access. Facility to carry out audit checks needs to be provided as well so as to keep track of the exact activity along with the date and time at which an employee of QW Australia carried out a computer
system based activity. The activity could include doing task(s) such as installation of new software, installing patches, taking backups and make changes in Webpage etc.
- Access Rules for Group Access VLANs
- All VLANs are permitted to access internet unless specifically denied below.
- VLAN to VLAN access, is denied unless specifically permitted below.
- PC hosts in the Sales and Hire VLAN are permitted access to the Business Administration VLAN.
- PC hosts in the Hire Only VLAN are permitted access to the Marketing VLAN and Sales and Hire VLANs.
- PC hosts in the Marketing VLAN are permitted access to the Business Administration VLAN, and
Hire Only LANs.
- PC hosts in the Business Administration VLAN are only permitted access to the Internet.
- PC hosts in Sales Only VLANs are permitted access to Marketing VLAN.
- PC hosts in Marketing VLAN are permitted access to Sales Only VLANs.
- PC hosts in the Site Security wireless LAN are permitted access to all VLANs.
- PC hosts in Technical Support VLANs are permitted access to all VLANs.
- PC hosts in Site Security wireless LAN denied access to the Internet.
(Use a Table H to record the testing of the ACLs - add Rows as needed)
AusNet Networking Company Requirements and Specifications
Your company expects you to configure eBGP peering between the enterprise and the ISP particularly on the enterprise side of the configuration. Ausnet ensures most efficient solutions for the clients and there for uses VLSM for their designs. Use table A to show the subnets that meet the company requirements. Clearly identify the subnets that are available for the future use.
Use the following specifications defined by the AusNet Networking to implement the IP address Plan.
IP Address Plan for Group A
|
SPECIFICATION INFORMATION
|
|
Specification Number
|
3.4
|
|
Class A -Internal Network Address
|
33.64.0.0 / 18
|
|
Class B -NAT Pool Public Address
|
133.4.0.0 / 23
|
|
Class C- ISP Network Connection Address
|
230.3.4.0 / 30
|
|
Class B -ISP Internet Web Server Address
|
133.19.3.0 / 30
|
IP Address Plan for Group B
|
SPECIFICATION INFORMATION
|
|
Specification Number
|
4.4
|
|
Class A -Internal Network Address
|
42.62.0.0 / 18
|
|
Class B -NAT Pool Public Address
|
136.4.0.0 / 23
|
|
Class C- ISP Network Connection Address
|
240.4.6.0 / 30
|
|
Class B -ISP Internet Web Server Address
|
145.22.5.0 / 30
|
Assessment Criteria and Instructions
As a part of your Assessment Criteria, you should prepare a formally written report supporting all your design choices implemented in GNS3, Presentation explaining your solution, and a prototype of the network implemented in GNS3.
The Case Study makes up 100% of your final mark. It is mandatory for your group to submit all the items to successfully complete the unit.
- Implementation
- Report
- Presentation
Use the table structures in the Appendix A when you are preparing the report for the project which are also being used for documentation of the project by Ausnet.
- Document the VLSM Design Using the Table A.
- Document Router and Switch Details for each site. Separate table should be created for each router and switch. Use the Table B and C.
- Document the IP address plan per Table D and E.
- Document the Switch details using the Table F.
- Document the Wireless Access Point Details using the Table G.
- Record ACL testing using Table H.
Attachment:- APPENDIX A.zip