Remote Connectivity

Medical Needs is a company providing medical devices to people as prescribed by their doctor, this could be anything from, crutches, braces, cpaps and many other medical needs. The offices are presently located in Nashville and Chattanooga with plans to expand to other areas of Tennessee in the future. The two companies are both rather small currently, with approximately ten employees in each location.

Medical Needs realizes the current network in place is outdated and is not as efficient as it should be if growth and expansion is the intended plan. We will require a functioning and reliable network for this office. This company will use a larger network capacity to handle the volume of data and resource requests. LAN and WAN are going be utilized in this configuration to distribute and collect information outside of the organization. This company's main goal is to have an improved network that lets them provide better customer service and gives them room to expand in the future.

Using both a web and intranet-based web server will ensure that information is secure on neighborhood servers that will enable access to only people that require and have been approved access. Using a client/server model will enable a few choices to store and recover information through the LAN by utilizing the for the managed network storage for the information (Rouse, 2008). The intranet will comprise of a neighborhood, web server to incorporate equipment and programming, firewall equipment and programming, content, administration programming and application programming.

The company will utilize the Microsoft Azure DNS server while interfacing with the web. This will allow accelerating of DNS objectives similarly as progressive customized updates to DNS records. This will allow expanding pace of DNS objectives similarly as ordinary modified updates to DNS records. The DNS is a tradition inside a great deal of checks that regulates how PCs exchange data on private frameworks and the web. The DHCP server will provide redundancy and high availability. DHCP servers provide logging and management interfaces that aid administrators manage their IP address scopes.

It works inside the TCP/IP suite and is accountable for turning the Internet Protocol Address (IP) from numbers that has been apportioned by the dynamic host setup tradition to a less demanding to comprehend space name (Roos, 2007) and is the tradition that is used to dole out and process web relationship for client PCs that don't have a static IP address, for instance, subnet cover, IP addresses, default switches, and other IP parameters. Other framework traditions that affiliation will utilize are the Microsoft Exchange Server 2016 for email. MS Exchange 2016 will utilize the SMTP/IMAP4 and POP3 capacities with respect to laborers to get the chance to email while on the LAN, remotely related or through an online application.

NetBIOS will be utilized for naming goals for reports and WINS will be utilized to help NetBIOS over TCP/IP which is required for in a condition in which a client gets to assets that have NetBIOS names. WINS name targets decline NetBIOS names question bestowed by direct investigating the server as opposed to broadcasting the demand. WINS and DNS are both name destinations associations for TCP/IP systems. While WINS settle names in the NetBIOS namespace, DNS settle names in the DNS space namespace.

WINS in a general sense reinforces clients that run increasingly settled adjustments of Windows and applications that use NetBIOS. Windows 2000, Windows XP, and Windows Server 2003 use DNS names despite NetBIOS names. Circumstances that fuse a couple of PCs that use NetBIOS names and diverse PCs that use territory names must join the two WINS servers and DNS servers (What is wins? 2003).

The company will use certificate services to improve security by using the precaution to affirm the character of a device, individual, or organization to a private key. This will be developed by technique for utilizing a server that is planned as an affirmation master. The server handles the association and substance of the announcements and after that issues them to customers, PCs, and organizations similarly as setting up and checking the identity of the validation holder. This proposed network solution will meet all the requirements of the company

After serious consideration, we have chosen a similar setup as described above in Proposed Network Solution. This will still use a client/server with both web and intranet-based web server. The company data center will be located at Nashville that will act as the brain of the company as it dictates data and information flow. The main data center will also include a WAN connection to be used to collect information outside of the organization. This means that the company needs to use a line of top high-end servers. The proposed physical design has four major features. First, the cabling is done using CAT 6. Second, manageable switches have been used to connect to various offices. The manageable switches help in managing and controlling LAN which offers a better control of information and data transfer. Also, the manageable switches use the SNMP protocol for the monitoring of devices on the organization network. Lastly, a firewall, which is utilized to deny access to unauthorized users (Lammle & Swartz, 2013).

The DHCP will automatically configure the TCP/IP and IP addresses by assigning an address to each workstation connecting to the LAN automatically. This is important because each computer must have its’ own unique address whenever it is online in order to retrieve information that is asked for. The unique address allows the information to be sent directly to the requesting computer. The DHCP is responsible for leasing IP addresses from an available “pool” of addresses that is assigned to the network and is responsible for either maintaining the lease or reassigning a new IP address when the lease has expired (What is DHCP?, 2017)

To meet the company requirements, the relevant logical design is Cisco SAFE architecture. This is because the main objective of this design is to provide the very best practice for implementing a secure network. In addition, this design implements a modular approach which allows flexibility in troubleshooting. A Cisco SAFE architecture takes what one would refer to as a defense-in-depth approach where various or multiple layers are strategically located throughout the organization network (Kurose & Ross, 2009). Ensuring that the appropriate connections and security are in place are crucial to the success of the organization. Each of the locations should be able to share information that is stored centrally. The network configuration will be one that consist of a central location where the primary file servers will reside. In addition, the remote locations will be connected via the Internet and a VPN to ensure that the communication between them is secure as it travels over the Internet.

DNS will provide the primary components for the organization to access internal servers as well as external routing to servers on the Internet. DHCP is a preferred protocol since it is highly flexible in assigning IP addresses based on the available ranges in the routers to which devices are connected.: (Hughes, 2016) Network protocols will be the typical used in many organizations focused around TCP/IP.

Addressing will involve subnetting the IP addresses for the different connected facilities, super netting and private IP addressing. IP routing will involve the use of class inter-domain routing where facilities connected to Medical Needs would be assigned a range of IP addresses, use of routing policies and various routing protocols such as BGP or RIP. The Server will offer certificate services and will receive digital certificates over transport protocols such as HTTP and HTTPS. Certificate services will enable administrators in the remote locations to add components to a certificate revocation list (CRL) and publish CRLs on a constant basis. Within the network there will be multiple router access points to allow for proper routing of data across the remote offices. Each location will have a patch panel and multiple switches if necessary dependent on the number of users within the location. Each location will have an Intrusion Detection System (IDS) and will use a firewall to prevent unauthorized access.

Remote and mobile data terminal users will be connected by using Wi-Fi or through the use of an issued Broadband Hotspot Device, provided by the organization's ISP.

Once connected the user will access through a VPN to authenticate and safeguard the data sent to and from the main servers. VPN routers will be used for setting up VPN connections and the users will utilize a two-step authentication process that will assign a token or code upon each sign on. The VPN will also include an IPsec tunneling protocol and a generic routing encapsulation as well as other technologies. Other than VPNs, use of firewalls, encryption, routing filters and definition of security zones will be employed to help protect the Office’s data and system resources from damage or theft. Here is an example of the Network Design.