Comprehensive AAP and Powerpoint slide.

1. LAN Implementation

1.1. Overview

1.1.1. World Wide Trading Company (WWTC) has requested the development of a state of the art network for their new office located on Wall Street in New York City, New York. Group3 Corporation has studied the design requirements as supplied by WWTC and is supplying the following response in regard to those requirements.

1.1.2. Group3 Corporation will work directly with the customer to ensure proper configuration of the LAN. Providing advanced network services requires planning with all interested members of WWTC and Group3 Corporation, complete systems documentation, and implementation of the install. As per the design requirements the following items must be accomplished for LAN implementation:

· design a state of the art network to meet business and technical goals - modular and scalable

· Redundancy at building core layer and building distribution layer to avoid single point of failure.

· Provide redundant uplinks for Access layers to the building Distribution layer.

· Selecting the Access layers switches:

· Provide one port to each device

· Make provision for 100% growth

· Server farm switches

· Assume 6 NIC cards in each server and one NIC card uses one port of switch

· Dual processors and dual power supply

· Propose an IP addressing redesign that optimizes IP addressing and IP routing (including the use of route summarization). Provide migration provision to IPv6 protocol in future.

· Integrate voice and data network to reduce cost.

· Provide aggregate routing protocols with hierarchal IP scheme.

· Centralize all services and servers to make the network easier to manage and more cost-effective.

· Provide LAN speed minimum 100 MB and Internet speed minimum 54 MB.

· Provide wireless network access to network users and guest users in limited area (Lobby and Conference room). In conference room and the lobby, the user will get a minimum 54 Mbps of bandwidth. (You can assume that site survey is done and no sources of interference or RF were discovered.)

· Provide provisions for video conference and multicast services.

· Standardize on TCP/IP protocols for the network. Macintoshes will be accessible only on guest notebook but must use TCP/IP protocols or the Apple Talk Filling Protocol (AFP) running on top of TCP.

1.2. Services

1.2.1. Group3 Corporation shall provide the equipment specified in the network Hardware list (section 2). The contractor shall ensure that the equipment is designed per the requirements of WWTC

1.2.1.1. In addition to the hardware requirements listed in Section 2, Group3 Corporation will require various tools to perform the setup and configuration of the LAN.

Tool	Purpose
Laptop with Serial port	For Console Access to Cisco devices
PuTTY	Software to provide terminal for console
50 micron fiber optic cabling (Laser Optimized)	Cable optimized for 10Gbps connections between devices.
Spool of cat6 cable (Plenum and non Plenum)	Cat6 cable and connectors required to cable patch panels, desks, office spaces, and phones.
Cat6 connectors
Ethernet Crimpers	Secure Cat6 connector to cable.
Fiber Optic cleaning kit	Clean optics to ensure optimal dB signal on fiber
Patch panels	To make connections between access switches in telecom closet and office wall ports
Cable snake	To run cables Underfloor, Ceilings, or pipes

1.2.2. Group3 Corporation will provide a modular and scalable network. This will be accomplished using a hierarchical design and using best practices for designing a modular network.

1.2.3. Group3 Corporation will implement a full mesh network to achieve redundancy. Core network redundancy will be provided through the use of two Cisco Catalyst 6504 Chassis with dual supervisors. BGP, routing, and IP services on the core will be made redundant using Hot Standby Router protocol (HSRP), and Link Aggregation Control Protocol (LACP) links between switches. The distribution network will utilize two Nexus 5548 switches running in an active/active configuration. Through the use of active/active mode on the Nexus 5548 both distribution switches can process traffic at the same time and pass data between core and access layers. In addition, through the use of Virtual Port-Channels (vPC) upstream and downstream switches will have connectivity to both switches ensuring that in the event of device failure there is zero downtime waiting for spanning-tree recalculations. Access switches will utilize LACP for their uplinks to the distribution switches.

1.2.4. Group3 Corporation has calculated the total system count on the access layer and selected hardware quantities that provide for support for existing equipment and 100% growth.

1.2.5. Group3 Corporation has selected the 172.16.32.0/21 subnet to provide internal network access to WWTC systems. The subnet will be variably subnet and placed into VLANs as specified in the table of section 3.1. Additionally the 192.168.32.0/24 subnet for maintenance and point-to-point routing, and the 192.168.33.0/24 subnet for wireless guest access will be utilized.

1.2.6. Using the provided floor plan for WWTC, Group3 Corporation has segmented the floor space into quadrants. Each quadrant will utilize specific VLANs and IP address segments to allow for easier maintenance and troubleshooting of the network if issues should arise. The configurations for these networks can be found in the table of section 3.1.

1.2.7. Group3 Corporation has selected hardware that provides 1 Gigabit and 10 Gigabit network performance throughout the entire network. Uplinks between devices will utilize 10 Gbps optics with 50 micron, laser optimized fiber. Access points will utilize CAT6 cable to ensure minimal crosstalk between devices and handle the 1 Gbps traffic.

1.2.8. Group3 Corporation will provide a separate network to allow authorized users to attach their laptops to the network. This network will utilize a VLAN and IP address scheme to keep it separated from the workstation PC network.

1.2.9. Group3 Corporation will implement a VoIP phone system utilizing the Cisco MCS 7828-I3 and Cisco 7841 phones. The 7841 phone provides 1 Gigabit access to the network and allows a workstation to connect to the device minimizing port count and reducing cabling expenses in the infrastructure. The VoIP system will tie into a PSTN network which it will failover to in the event of internet access failure.

1.2.10. Group3 Corporation will install wireless access in the lobby and the conference room of the WWTC office space. The network will utilize the 192.168.33.0/24 subnet to address systems using the wireless network. IP address will be assigned utilizing DHCP and SSIDs will be generated for each WAP on the network. The proposed SSIDS are:

1.2.10.1. WWTC-Lobby

1.2.10.2. WWTC-NW-Conf-RM

1.2.10.3. WWTC-SE-Conf-RM

2. Network Hardware List

2.1. Core Network

2.1.1. The network core will consist of two Catalyst 6504-E Chassis equipped with two Supervisor 720 cards for chassis redundancy, one Adaptive Security Appliance Service Module for firewall capability, and one 6900 series 8-port 10 gigabit line card. For the classified network a single chassis will be acquired to standup the classified core. The required part numbers are:

· Chassis: WS-6504-E, 4 port 6500 chassis,

· Quantity: 3

· Power supply: PWR-2700-AC/4, 2700W power supply

· Quantity: 6

· Fan Tray: FAN-MOD-4HS, Fan tray for 6500

· Quantity: 3

· Line Cards

· Supervisor Card: WS-SUP-720-3B, Supervisor 720 Card

· Quantity: 6

· 10 Gigabit Line Card: WS-X6908-10G-2T, 8 port 10GbE Line Card

· Quantity: 3

· Firewall/Adaptive Security Appliance Service Module: WS-SVC-ASA-SM1-K9,

· Quantity: 3

· Optics:

· 10 Gigabit Optics: Cisco X2-10GB-SR

· Quantity: 12

· Cisco TwinGig Converter: CVR-X2-SFP

· Quantity: 12

· Cisco 1 Gigabit optic: GLC-SX-MM

· Quantity: 30

2.2. Distribution Network

2.2.1. The distribution network will consist of two Nexus 5548 switches. The 5548 switch is a 10 Gigabit network switch that allows two physical network devices to appear a single device using Virtual Port Channel technology. This allows network processing for traffic to occur on one switch versus two, provides a fully redundant and active network. The hardware minimizes downtime in an active-active configuration by allowing software upgrades without network downtime. A single Nexus 5548 will be acquired to standup the classified distribution network. The required part numbers are:

· Chassis: N5K-C5548UP-FA, 5548 w/ 32 10 Gigabit SFP ports and front to back airflow

· Quantity: 1

· Power Supply: N55-PAC-750W(=), 750W Power supply

· Quantity: 6

· 10 Gigabit 16 port Expansion Module: N55-M16UP(=)

· Quantity: 3

· Optics: SFP-10G-SR, 10Gigabit, Short Range SFP+

· Quantity: 144

2.3. Access Network

2.3.1. The access network will be provided using two different devices. In the server room, Cisco 2248T Fabric extenders will be connected off the Nexus 5548 switches using a virtual port channel. The fabric extenders are configured as part of the 5548 configuration and do not have a separate IOS that runs on them for management. This allows for easier maintenance of the devices. For the office spaces the access will be provided using Cisco Catalyst 3750X 48 port switches with Power over Ethernet. This will allow us to provide access and voice vlans, as well as power, over one link to a workstation and phone in the office area. Additionally the 3750X offers StackWise technology which will allow multiple 3750X switches to be connected and act as one logical switch. This provides additional redundancy and allows for future growth of the system. Each stack of 3750s will be connected to a virtual port channel on the 5548 for redundancy and load balancing of traffic. The classified core will utilize a stackwise configuration of 3 3750PF-S systems to provide access to classified workstations.

· Switch: WS-C3750X-48PF-S, 3750X 48 Port 1 gigabit ethernet and PoE+, 1100W power supply

· Quantity: 16

· Redundant Power Supply: C3KX-PWR-1100WAC, 1100W AC Power Supply

· Quantity: 16

· Optics:

· 10GbE SFP+ Module: C3KX-NM-10G

· Quantity: 16

· SFP-10G-SR: 10Gigabit, Short Range SFP+

· Quantity: 30

2.4. Wireless Network

2.4.1. The wireless network will consist of one Cisco 2500 series wireless controller and one Cisco Aironet 3700 Access point. This wireless controller delivers 802.11n/ac reliability. It also has centralized security policies to detect rogue access points and protect against denial-of-service attacks. Utilizing wireless N or AC would enhance the performance and also provide congestion avoidance. The Cisco Aironet 3700 is 802.11ac wave 1 provides a rate of up to 1.3 Gbps. The Aironet has three antennas to enable three separate data streams. It also has a fourth antenna that enables people to be seamlessly connected from any wireless device, even those with weak wireless signals, at a greater distance from the access point with up to 30 percent faster performance.

· Network Controller: AIR-CT2504-5-K9, 5 Access Point, 1 gigabit ethernet each port, to 240 VAC input power

· Quantity: 1

· Access Point: AIR-CAP3702I-x-K9: Dual-band, controller-based 802.11a/g/n/ac, 100 to 240 VAC Power Supply

· Quantity: 3

2.5. Telephony Hardware

2.5.1. The telephony networking design will leverage Cisco 7841 VoIP phones. The 7841 VoIP phone is a simple, secure, and budget friendly enterprise level phone best suitable for both small and large business organizations. This phone model supports Class 1 Power over Ethernet (PoE). Additionally the 7841 phone supports integration with Cisco EnergyWise Energy Management Suite, allowing for lower power consumption and easy energy management processes. The Cisco 7841 VoIP phones have an integrated IEEE 10/100/1000 onboard switch to help reduce the overall networking footprint across the entire design. Through the use of the integrated phone switches on each and every phone in conjunction with PoE supported distribution switches, workstations will not require their own distribution switch ports. Workstations and devices requiring Ethernet connectivity will chain link off of their local VoIP phone. Chain linked devices will still receive up to 1 GB connection speed. 

390 to 400 Cisco 7841 VoIP phones will be required for WWTC telephony network. Each office and cubicle will be outfitted with exactly two telephones. 390 to 400 PoE network ports will be required to power and provide network connectivity to all VoIP phones. In order to account for 100% growth, 780 to 800 PoE network ports will be required, total. 

· VoIP Controller: BE6S-FXO-M2-K9 (Cisco Business Edition 6000S)

· Quantity: 1

· Phones: Cisco 7841

· Quantity: 400

2.5.2. Video conferencing capabilities will leverage the Cisco VOIP solution and expand functionality of the Cisco Unified Communications Manager. Cisco TelePresence Conductor will manage and control video conferencing resources across the network, allowing easy provisioning of equipment. It supports up to 2400 concurrent call sessions and 30 conference bridges. Cisco TelePresence Server will be used to allow desktop and mobile users, both local and remote, access to high-quality video conferencing. It also supports multi-user conference room meetings. Video conferencing services will support scheduled and ad hoc meetings. This solution is scalable, and can be expanded to include Jabber and WebEx services as needed.

Both Conference rooms will be equipped with a Cisco TelePresence MX800 Dual. This video conferencing endpoint contains two 70-inch screens and built-in cameras. It provides a high-quality conference experience ideal for large conference rooms. Two screens allow users to connect with multiple locations, or to view content while simultaneous viewing the speaker.

· Teleconference: Cisco TelePresence Conductor (R-VMCNDTR-K9)

· Quantity: 1

· Teleconference: Cisco TelePresence Server

· Quantity: 1

· Teleconference: Cisco TelePresence MX800 Dual

· Quantity: 2

2.6. VoIP Bandwidth Required

2.6.1. As it was determined through early discovery, 70% of the WWTC phones will be busy with a mixture of internal and external telephone calls during the organizations core business hours. At any given time throughout the company’s busiest hours 35% of phone connections will be made internally from one phone to another phone throughout the office. The other 35% of phone connections will be held towards external phone networks in a combination of dial-ins and dial-outs. 

Conjugate-Structured Algebraic Code Excited Linear Prediction (CS-ACELP - ITU-T G.729) algorithmic speech compression technology will be implemented to allow encoded 64 kbps voice to be compressed into 8 kbps. The implementation of CS-ACELP will significantly decrease the network bandwidth overhead generated by VoIP phone connections. 

Each Cisco 7841 VoIP phone will require 11.2 Kbps of bandwidth allocated to itself. Collectively as a whole, 4.25 Mbps to 4.48 Mbps are required to satisfy the VoIP’s absolute minimum bandwidth requirements. 

3. IP Address Schematics

3.1. The WWTC network has been calculated as requiring 1540 IP Addresses to handle servers, workstations, VoIP phones, wireless access points, wireless controller, video teleconferencing, printers and user personal laptop connectivity. All subnets are optimized to support the existing infrastructure and provide 100% expansion on the network while utilizing the smallest possible subnet. To meet this requirement the 172.16.32.0/21 subnet will be assigned on the internal network, divided into subnets at the distribution layer. VLANs have been assigned for data networks, server room, VoIP, specific staff groups, native VLAN, and printers. The 192.168.32.0/24 subnet will be variably subnet and used for management of switches and point to point links. The 192.168.33.0/24 subnet will be utilized for the guest wireless network.

The table below represents the VLANS that will be created, the name that will assigned on the Cisco devices, the IP Subnet and Gateway address assigned to each VLAN, how many addresses are available to assign to hosts on the network and where each network will be utilized.

VLAN	Name	IP Subnet Address	Gateway Address	Total Host Addresses	Purpose
40	WIFI_NET	192.168.33.0/24	192.168.33.254	253	WIFI AP and Devices
51	LAPTOP_NW_NET	172.16.36.0/26	172.16.36.62	61	Personal Laptop LAN in NW Quadrant
52	LAPTOP_NE_NET	172.16.36.64/26	172.16.36.126	61	Personal Laptop LAN in NE Quadrant
53	LAPTOP_SW_NET	172.16.36.128/26	172.16.36.190	61	Personal Laptop LAN in SW Quadrant
54	LAPTOP_SE_NET	172.16.36.192/26	172.16.36.254	61	Personal Laptop LAN in SE Quadrant
100	HQ_NET	172.16.37.64/26	172.16.37.126	61	HQ users LAN in SW Quadrant and Datacenter Servers
200	IT_NET	172.16.37.128/26	172.16.37.190	61	IT users LAN in SW Quadrant Datacenter Servers
300	FINANCE_ NET	172.16.37.192/26	172.16.37.254	61	Finance users LAN in SW Quadrant Datacenter Servers
399	WWTC_SRVR_BROKER_NET	172.16.38.0/24	172.16.38.254	253	Broker Servers Datacenter
400	WWTC_SRV_DATA_NET	172.16.39.0/24	172.16.39.254	253	Datacenter Servers
401	WWTC_NW_DATA_NET	172.16.32.0/25	172.16.32.126	125	Data LAN in NW Quadrant
402	WWTC_NE_DATA_NET	172.16.32.128/25	172.16.32.254	125	Data LAN in NE Quadrant
403	WWTC_SW_DATA_NET	172.16.33.0/25	172.16.33.126	125	Data LAN in SW Quadrant
404	WWTC_SE_DATA_NET	172.16.33.128/25	172.16.33.254	125	Data LAN in SE Quadrant
601	WWTC_NW_VOIP_NET	172.16.34.0/25	172.16.34.126	125	VoIP LAN in NW Quadrant
602	WWTC_NE_VOIP_NET	172.16.34.128/25	172.16.34.254	125	VoIP LAN in NE Quadrant
603	WWTC_SW_VOIP_NET	172.16.35.0/25	172.16.35.126	125	VoIP LAN in SW Quadrant
604	WWTC_SE_VOIP_NET	172.16.35.128/25	172.16.35.254	125	Printer LAN in SE Quadrant
701	WWTC_NW_PRINTER	172.16.37.0/28	172.16.37.14	13	Printer LAN in SE Quadrant
702	WWTC_NE_PRINTER	172.16.37.16/28	172.16.37.30	13	Printer LAN in SE Quadrant
703	WWTC_SW_PRINTER	172.16.37.32/28	172.16.37.46	13	Printer LAN in SE Quadrant
704	WWTC_SE_PRINTER	172.16.37.48/28	172.16.37.62	13	VoIP LAN in SE Quadrant
999	WWTC_NATIVE_VLAN	192.168.32.0/24	192.168.32.254	253	Native VLAN for Trunks

1.

2.

3.

3.1.

3.2. Subnets will be routed using EIGRP at the core layer. EIGRP AS 100 will connect the core routers and distribution switches together for routing between subnets. the 172.32.0.0/21, 192.168.32.0/24, and 192.168.33.0/24 subnets will all be summarized at the core routers.

4. High Level Design Documentation

4.1. Group3 Corporation has designed a high level diagram showing modular block implementation of the network, and the full overview of the core, distribution, and access layer configurations of both the unclassified and classified networks. Those diagrams are available in the separately provide file: Group3-WWTC-HighLevelDiagram.pptx