Authentic Assessment Network Project

Internet

Internet

Internet

Internet

Towson 4WS

UB 5WS

Bowe 5WS

UMCP 8WS

Class Rooms

and Labs

ES 4WS

UMES 8WS

UMBC 12WS

UMUC20WS

Library 25 WS

Class Rooms

UMB 15WS

Current Network Topology ShadyGrove

All the LANs at this site use 10-Mbps Ethernet although they can be upgraded to 100 Mbps. Every building is equipped with Category-5 cabling and wall plates in the various offices, classrooms, and labs, though the cabling and wall-plates are not used in some of the buildings. To support users in Building-3, multi-mode fiber-optic cabling was pulled through cabling conduits to Building-1 and Building-2. At the Shady Grove campus, XMUC uses the services of 4 ISPs for internet connections.

The college provides 10 Macintoshes and 25 PCs in the Computing Center (in Building-1) for student use. A LAN switch in the Computing Center connects hubs, servers, printers, and the router that connects to the Internet. Shady Grove campus does not have its own web server. For security, packet filtering firewall is used on some routers. The routers have default routes to the Internet and do not run routing protocols. Based on the advice of the Community Advisory Group, the president started the “Upgrade XUMUC Project” with the goal of upgrading the computer and networking facilities. The three network administrators and the Director of Operations for XUMUC formed the Project Task Force.

Table:-1 Shady Grove Inventories

Subnets	Devices	Comment
UMUC	20	Work Stations
UMES	8	Work Stations
UMCPTowson	8	Work Stations
Towson	4	Work Stations
UB	5	Work Stations
UMB	15	Work Stations
Eastern Shore	4	Work Stations
UMBC	12	Work Stations
Bowe	5	Work Stations
Class Rooms	150	Work Stations
Shady Grove Administrations	50	Application server, Data server, and SAN
Router	4	2600 series, Slow processing power
Switches	10 switches	All switches are without port security. No technology to reduce convergence time.
Patch Panel	4
Hubs	5
Printers	5	Commercial Type in Copy Centre
Network Printers and departments Printers	25

Voice Network:

Shady Grove campus has 200 telephones on a separate voice network. IP telephony is used for internal purpose. PSTN (Phone Company) network is used to dial out. The logical diagram is shown below

PBX Switch

200 Capaity

Call ManagerPSTN NetworkInternetIP Data NetworkIP Voice Network

Shady Grove Voice Network

Security:

The site recently experienced an increase in network attacks (DoS). The network was recently unavailable for a considerable time because of an attack. IT staff suspects that these attacks are coming from broad range of spoofed IP addresses, but unable to prevent these attacks. They have suggested installing NID so that they can monitor better and stop it while it is happening. Network availability is crucial for the university, because their revenue depends on availability of network.

Web server:

The director of the site wants to host a web site to increase revenue and share resources among all the universities located at this location. His main concern is that a hacker can access to internal network thru compromising web server.

RFP

The state government has funded this project on actual cost basis to upgrade XUMUC’s computer labs and campus network. Even though the project is funded on actual cost basis the challenge with the network design is that the school’s budget does not call for more money to be spent on network administration as needed, so the new design has to be manageable and simple. Project task force issued the following RFP to upgrade the network.

Business and Technical Goals

The University Advisory Group identified the following business goals for the Project:

· Increase the enrollment from to 400 to 500 students by the year 2011

· Reduce the attrition rate from 30 to 15 percent by the year 2011

· Attract students who leave the state to attend colleges with more technological advantages

· Provide more and bigger computer labs on campus

· Allow students to attach their notebook computers to the campus network to reach campus and Internet services

· Reduce telephone cost

· Provide faster services

· Maintain (or reduce if possible) the level of funding spent on network operations

The Project Task Force added the following technical goals:

· Centralize all services and servers to make the network easier to manage and more cost-effective. (Distributed servers will be tolerated but not managed, and traffic to and from these servers will not be accounted for when planning capacity)

· Centralize the Internet connection and disallow distributed departmental Internet connections

· Increase the bandwidth of the Internet connection to support new applications and expanded use of current applications

· Standardize on TCP/IP protocols for the campus network. Macintoshes will be tolerated but must use TCP/IP protocols or the Apple Talk Filling Protocol (AFP) running on top of TCP

· Provide extra capacity at switches so users can attach their notebook PCs to the network

· Install DHCP software to support notebook PCs

· Provide security to protect critical servers from the Internet connection and internal network from intruders. Implement a technology to stop DoS attack

· Provide a network that can scale to support future expanded usage of multi-media applications

· Use VPN technology to connect securely Shady Grove site to the main campus of XUMUC at Adelphi. Assume 2MB bandwidth available for data network to connect to remote sites

· Provide a network that uses state-of-the art technologies

· Provide wireless network access to network users and guest users from any point in the buildings. In conference room user will get a minimum 284 kbps worth of bandwidth. Other areas such as lobby, cafeteria a minimum bandwidth of 512 kbps bandwidth is required. (You can assume, that site survey is done and no sources of interference or RF discovered.

· Provide provisions for video conference and multicast services.

The network administrators on the Project Task Force have been criticized in the past by the students and professors, and are looking forward to proving that they can develop a better network than the existing network. Getting support for this Project from the users and professors is not easy, and the administrators now need to deliver a network that performs well and has little downtime.

Network applications:

The XUMUC network is currently used for the following purposes:

· Writing papers and doing other homework, including printing the homework and saving the work on file servers

· Sending and receiving e-mail

· Surfing the Web using Netscape or Microsoft’s Internet Explorer applications to access information, participate in chat rooms, play games, and use other typical Web services

· Accessing the library card-catalog

· WebTycho applications accessing class.

Students and professors in the School also use the following applications:

· Weather modeling. Meteorology students and professors are participating in a project to model weather patterns in conjunction with other colleges and universities in the state.

· Telescope monitoring. Astronomy students and professors have set up a PC to continually download graphical images from a telescope located at the state university.

Two new applications are planned:

· Graphics upload. The Art Department wishes to upload large graphics files to an off-campus print shop that can print large scale images on a high speed laser printer. The print shop prints artwork that is file transferred to the shop via the Internet.

· Distance learning. The Computer Science department wishes to participate in a pilot distance-learning project with the state university. The state university will let WVCC students sign up to receive streaming video of a computer science lecture course that is offered at the state university. The students can also participate in a real-time “chat room” while attending the class.

As a consultant to the school you are required to:

1. Propose a campus upgrade design that solves the current problems, meet business and technical goals

2. Create a scalable network

3. Develop a campus upgrade design based on Enterprise Campus module. This module should compose of Campus Core layer, Building distribution layer, and Building access layer.

4. Provide redundancy at campus core layer and building distribution layer to avoid failure at one point. For Building Access layer provide redundant uplinks connection to Building Distribution layer.

5. Select appropriate Cisco switch model for each part of your enterprise campus model design from the Cisco Products Link, listed below and use the following assumptions in your selection process.

Selecting the Access layers switches:

a. Provide one port to each device

b. Make provision for 100% growth

Server farm switches

· Assume 6 NIC cards in each server and one NIC card uses one port of switch

· Dual processors and dual power supply

http://www.ciscowebtools.com/ProductAdvisor/child/1.0/switches.asp

6. Propose an IP addressing redesign that optimizes IP addressing and IP routing (including the use of route summarization). Provide migration provision to IPv6 protocol in future.

7. Propose a security plans to secure key applications and servers but encryption of all application is not acceptable. Firewalls can be used as necessary. Develop security policy to stop sniffing and man-in-the-middle attack. Your security plan must base on current industry standard Multilayer security or defense-in-depth.

8. Integrate voice and data network to reduce cost. Propose and develop a plan for migration to voice network with in XUMUC sites as shown below. For dialing outside the XUMUC, propose a plan for 100% connectivity with minimum number of outside lines.

9. Create a wireless network for students and Faculty and staff. The building2 and building3 have two conference rooms of seating capacity of 200 each and approximate size 40 feet by 60 feet. Building 3 has a cafeteria of approximate size of 60x60 square foot and a survey report indicated that not any time more than 20 guest use network services. Your task is to determine number of WLC and AP placements and how many of them to use and which model to use. For your ready reference, Cisco equipment guide is attached. In Reference Section, you will find a placement template and product ordering table for your guidance in selecting equipment.

Link for Cisco Web Site Product selection

http://cisco.com/en/US/prod/collateral/wireless/ps5679/ps6548/prod_brochure0900aecd80565e00_ps2706_Products_Brochure.html )

10. Assume any information (with proper justification) which you think is missing and critical to the development of the design.

U N I V E R S I T YU N I V E R S I T Y

Shady Grove CampusBaltmore CampusEurope CampusXUMUC Adelphi Main Campus

Adelphi Campus 1000 Phones

Shady Grove Campus 200 Phones

Baltimore Campus 100 Phones

Europe Campus 20 Phones

XUMUC Phones RequirementsHigh Level PSTN Diagram

Reference:

WLC and AP ordering Guide

Table 4. Ordering Information for Cisco Wireless LAN Controllers

Product	Features	Customer Requirements	Part Number
Wireless LAN Controllers
Cisco 4400 Series Wireless LAN Controller	• Modular support of 12, 25, 50, or 100 Cisco Aironet access points • The Cisco 4402 with 2 Gigabit Ethernet ports supports configurations for 12, 25, and 50 access points • The Cisco 4404 with 4 Gigabit Ethernet ports supports configurations for 100 access points • IEEE 802.1D Spanning Tree Protocol for higher availability • IPSec encryption • Industrial-grade resistance to electromagnetic interferences (EMI)	• For midsize to large deployments • High availability	• AIR-WLC4402-12-K9 • AIR-WLC4402-25-K9 • AIR-WLC4402-50-K9 • AIR-WLC4404-100-K9 See the Cisco Wireless LAN Controllers Data Sheet for more information.
Cisco 2100 Series Wireless LAN Controller	• Supports up to 6, 12 or 25 Cisco Aironet access points • Eight Ethernet ports, two of which can provide power directly to Cisco APs • Desk mountable	• For retail, enterprise branch offices, or SMB deployments	• AIR-WLC2106-K9 • AIR-WLC2112-K9 • AIR-WLC2125-K9 See the Cisco 2106 Wireless LAN Controller Data Sheet for more information.
Cisco Catalyst® 6500 Series /7600 Series Wireless Services Module (WiSM)	• Wireless LAN Controller for Cisco Catalyst 6500 or Cisco 7600 Series Router • Supports 300 Cisco Aironet access points • IPSec encryption • Industrial-grade resistance to electromagnetic interferences (EMI) • Intrachassis and interchassis failover • Interoperable with Cisco Catalyst 6500 Series Firewall and IDS services modules	• Embedded system for the Cisco Catalyst 6500 Series and Cisco 7600 Series Router infrastructure • For large-scale deployments • High availability	• WS-SVC-WISM-1-K9 • WS-SVC-WISM-1-K9= (spare) See the Cisco Catalyst Wireless Services Module Data Sheet for more information.
Cisco Catalyst 3750G Integrated WLAN Controller	• Cisco Catalyst 3750G Series Switch with wireless LAN controller capabilities • Modular support of 25 or 50 Cisco Aironet access points per switch (and up to 200 access points per stack*) • IPSec encryption • Industrial-grade resistance to electromagnetic interferences (EMI)	• For midsize to large deployments • High availability	• WS-C3750G-24WS-S25 • WS-C3750G-24WS-S50 See the Cisco Catalyst 3750G Integrated Wireless LAN Controller Data Sheet for more information.
Cisco Wireless LAN Controller Module for Cisco Integrated Services Routers	• Wireless LAN controller integrated into Cisco integrated services routers • Supports 6, 8, 12, or 25 Cisco Aironet access points	• Embedded system for Cisco 2800/3800 Series and Cisco 3700 Series routers • For retail, small to medium-sized deployments or branch offices	• NME-AIR-WLC6-K9 • NME-AIR-WLC6-K9= (spare) • NME-AIR-WLC8-K9 • NME-AIR-WLC8-K9= (spare) • NME-AIR-WLC12-K9 • NME-AIR-WLC12-K9= (spare) • NME-AIR-WLC25-K9 • NME-AIR-WLC25-K9= (spare) See the Cisco WLAN Controller Modules Data Sheet for more information.

Please refer to the Cisco Wireless LAN Controller Ordering Guide supplement to learn when to add the following SKUs to track the deployment of voice and context-aware mobility applications.

Table 2. Cisco Aironet Indoor Rugged, Indoor, Wireless Mesh, and Outdoor Rugged Access Points

Product	Features	Customer Requirements	Part Number
Indoor Rugged Access Points
Cisco Aironet 1250 Series	• Industry's first business-class access point based on the IEEE 802.11n draft 2.0 standard • Provides reliable and predictable WLAN coverage to improve the end-user experience for both existing 802.11a/b/g clients and new 802.11n clients • Offers combined data rates of up to 600 Mbps to meet the most rigorous bandwidth requirements	• Designed for both office and challenging RF environments • Especially beneficial for environments with the following characteristics: • Challenging RF environments (for example, manufacturing plants, warehouses, clinical environments) • Bandwidth-intensive applications (for example, digital imaging, file transfers, network backup) • Real-time, latency-sensitive applications such as voice and video • Need to support existing 802.11a/b/g and new 802.11n wireless clients	Access point platform with pre-installed radio modules: • AIR-AP1252AG-x-K9: 802.11a/g/n-draft 2.0 2.4/5-GHz Modular Autonomous Access Point; 6 RP-TNC • AIR-AP1252G-x-K9: 802.11g/n-draft 2.0 2.4-GHz Modular Autonomous Access Point; 3 RP-TNC • AIR-LAP1252AG-x-K9: 802.11a/g/n-draft 2.0 2.4/5-GHz Modular Unified Access Point; 6 RP-TNC • AIR-LAP1252G-x-K9: 802.11g/n-draft 2.0 2.4-GHz Modular Unified Access Point; 3 RP-TNC See the Cisco Aironet 1250 Series Ordering Guide for more information.
Cisco Aironet 1240AG Series	• Second-generation 802.11a/g dual-band indoor rugged access point • 2.4-GHz and 5-GHz antenna connectors for greater range or coverage versatility and more flexible installation options using the broad selection of Cisco antennas available	• Ideal for challenging indoor RF environments • Recommended for offices and similar environments • Ideal for deployments above suspended ceilings • Recommended for outdoors when deployed in a weatherproof NEMA-rated enclosure	• AIR-AP1242AG-x-K9: 802.11a/g Nonmodular Cisco IOS Software- Based Access Point; RP-TNC • AIR-LAP1242AG-x-K9: 802.11a/g Nonmodular LWAPP Access Point; RP-TNC See the Cisco Aironet 1240AG Series 802.11a/b/g Data Sheet for more information.
Indoor Access Points
Cisco Aironet 1130AG Series	Low-profile, enterprise-class 802.11a/g access point with integrated antennas for easy deployment in offices and similar RF environments	Ideal for offices and similar environments	• AIR-AP1131AG-*X-K9 See the Cisco Aironet 1130AG Series Ordering Guide for more information.
Wireless Mesh Access Points
Cisco Aironet 1520 Series	• Next-generation outdoor wireless mesh access point • Integrated dual band 802.11 a/b/g radios, Ethernet, fiber and cable modem interface • Provides easy and flexible deployments for outdoor wireless network • Available in a lightweight version only	• Ideal for outdoors • Recommended for industrial deployments and local government, public safety, and transit agencies	• AIR-LAP1522AG-X*-K9: See the Cisco Aironet 1520 Series Lightweight Outdoor Mesh Access Point Ordering Guide for more information.
Cisco Aironet 1500 Series	• Mesh access point that enables cost-effective, scalable deployment of secure outdoor wireless LANs for metropolitan networks or enterprise campuses • Available in a lightweight version only	• Ideal for outdoors • Recommended for providing wireless services and applications to local government, public safety, and transit agencies	• AIR-LAP1510AG-*X-K9: • Cisco Aironet 1510AG Lightweight Outdoor Mesh Access Point, FCC configuration See the Cisco Aironet 1500 Series Ordering Guide for more information.
Outdoor Rugged Access Points
Cisco Aironet 1400 Series	• High-speed, high-performance outdoor bridging solution for line-of-sight applications • Offers affordable alternative to leased-line services • Available in a standalone version only	• High-speed building-to-building or campus connectivity • Share LAN/Internet access between two or more sites • Fast installation	• AIR-BR1410A-*X-K9: With integrated antenna • AIR-BR1410A-A-K9-N: With N-Type connector for use with external antennas See the Cisco Aironet 1400 Series Bridge Data Sheet for more information.
Cisco Aironet 1300 Series	Outdoor access point/bridge offers high-speed and cost-effective wireless connectivity between multiple fixed or mobile networks and clients	Ideal for outdoor areas, network connections within a campus area, temporary networks for portable or military operations, or outdoor infrastructure for mobile networks	● AIR-BR1310G-X-K9: With integrated antenna ● AIR-BR1310G-X-K9-R: With RP-TNC connector for use with external antennas ● AIR-BR1310G-A-K9-T: For transportation applications See the Cisco Aironet 1300 Series Ordering Guide for more information.

*X = regulatory domain

(Source: Curtsy Cisco Web site

http://cisco.com/en/US/prod/collateral/wireless/ps5679/ps6548/prod_brochure0900aecd80565e00_ps2706_Products_Brochure.html )

WLC and AP Placement Templates

Suggested Placement Table Wireless Network

Building	Access Point Requirements	Wireless LAN Controller Requirements	Total AP	Total WLC
Building3
Lobby	2
Cafeteria	10			2
Conference room	10		22
Building 2
Cafeteria
Conference Room	15
				2

Suggested Product Table (WLC)

WLC	Cisco Part Number	Quantity	Cost
Cisco 2100 Series Wireless LAN Controller	AIR-WLC2106-K9	2

Suggested Product Table (AP)

AP	Cisco Part Number	Quantity	Cost
Cisco Aironet 1250 Series	AIR-AP1252AG-x-K9: 802.11a/g/n-draft 2.0 2.4/5-GHz Modular Autonomous Access Point; 6 RP-TNC	20