Assessment Plan

profilexpndjw7
3_assisgnment.docx

LAN, VOIP and Wireless 19

3- Network LAN Design with VoIP and Wireless Services

Introduction

The assignment for week three called for the creation of a “detailed LAN design of network with VoIP services, Wireless services, protocols, devices, and interconnectivity, with WAN” (UMUC, n.d.). According to the assignment document (UMUC, n.d.), “this section must include but is not limited to:

· Equipment List

· Hierarchical IP scheme and VLAN

· Link IP addresses

· High Level Diagram

· Voice and Wireless Design

The network details were generated from the information provided in the Case Study World Wide Trading Company document. (UMUC, n.d.)

Equipment List

The company has provided a list of requirements that must be met in order for the newly designed network to meet the company's current and long term business plans. Requirements that impact the LAN design directly include the need for much faster, higher performance network services. This requires a design that not only provides for higher available bandwidth, but also is designed in such a way as to reduce congestion that can occur due to issues such as excessive broadcast traffic, multicast flooding and routing loops. Another essential requirement is scalability and provision for 100% growth, so that the network is capable of supporting the business without major additions as the company expands to over twice the current size. Modularity is another requirement, which would ensure that when expansion is needed, or network changes are required, the company can make those changes with minimal disruption to network performance and the business. Migration provision to IPv6, while not an immediate need, must also be built into the network infrastructure so that as the use of IPv6 becomes more prevalent, the company can leave IPv4 behind with minimal business disruption and expense. Centralized network administration with DHCP services, hierarchical IP address scheme with route aggregation, integrated support for VoIP, streaming video/media support, and a solid, layered defense in-depth security approach. A thorough and detailed plan is necessary in order to accommodate these requirements.

The equipment chosen for network design that meets all of the above requirements must be very high performance, have double the number of ports required currently by the business, integrate well into a layered network structure that facilitates centralized administration, and support high availability configurations. The Cisco product line supports all of these attributes and building a network infrastructure using equipment from a single vendor is a widely used strategy because it ensures seamless hardware, protocol and interface integration so that the network performs as a single unit from the end user perspective which is highly desirable.

The devices listed in the following table will easily accommodate twice the current 250 device demand within the company while also delivering high performance for VoIP and streaming media applications, high availability, and wireless integration, along with the other aforementioned requirements.

Device

Cisco Model #

Quantity

Comments

Redundant Core Switches

6509-E

2

Fault tolerant support for up to 534 devices, IP services

Distribution layer switches

4503-E

2

Fault tolerant full mesh distribution layer, IP services

Access layer switches

WS-C3850-48U-E

22

UPoE support, 48 Gig ports per switch, IP services, stackable for fault tolerant performance, integrated wireless controller

Firewall with IPS

ASA 5508-X

2

Redundant support for dual WAN link design

Ingress/egress IPS security

Redundant power supply for access switch

PWR-C1-1100WAC

22

Second power supply for each WS-C3850-48U-E

Cisco 6500 switch supervisor

Cisco VS-S2T-10G-XL

4

Provides 10G redundant support at the core

Cisco 6500 switch second power supply

Cisco CAB-AC-2500W-US1

2

Provides redundant power supply support

Cisco 4500 switch supervisor

Cisco WS-X45-Sup 7L-E

4

Provides 10G redundant distribution support

Cisco 4500 series line card

Cisco Catalyst 4500E UPOE Line Card

4

Provides 1G redundant access support

The network design is focused on centralized administration for the purpose of decreasing administrative overhead by enabling a lower number of IT staff to maintain the network. All network services such as DHCP, DNS, Active Directory and software maintenance and deployment services (for example) are managed in a centralized yet hierarchical configuration. The network design also delivers a high degree of redundancy. Every switch within the infrastructure has dual uplink connections to the network infrastructure. Each switch is also equipped with dual power supplies, and the network itself is configured in a partial mesh so that there is no single point of failure that could cause business disruption for the company. In addition, each chassis switch (the Cisco 4500 and 6500 series) have dual supervisor engines so that if one engine fails, this fault tolerant configuration enables the switch to continue operating. To fulfill the security requirements of the company, the network is equipped with a Cisco ASA 5500 series firewall that features IPS services so that would be intrusions can be detected and quickly shutdown while administrators are alerted to the attack. Each department is configured with its own VLAN, and ACLs are configured between the VLANs so that only authorized traffic is allowed to pass between VLANs on the network. Should the company deem it necessary, the 4500 and 6500 series switches can also be equipped with IPS supervisor engines so that the core and distribution layers of the network are also protected by IPS (providing yet another layer of defense against intruders). The 3850 series switches feature an integrated wireless controller which enables seamless wireless mobility throughout the wireless networking area within the building. All switches will be configured with RSTP to prevent network loop issues, EIGRP to automate routing table population and maintenance (with fast convergence), and route summation employed on a per subnet basis for efficiency. All switches also support IGMP, IGMP snooping, and PIM protocols for layer 2 and 3 multicast forwarding, with PoE and VoIP services supported at the access layer for IP telecommunications services. Finally, each switch features modular capability, enabling the company to add new features to the network in the future should the need arise.

In order to effectively manage the new network infrastructure, a naming convention plan must be drafted that provides IT staff (and users) with a logical, understandable means for identifying network devices. Following is a table that provides such a plan:

Device Type

Device

Device Configured Name

Placement

Connection

Comments

Redundant Core Switches

Cisco 6509-E switch

CoreSwitch1

CoreSwitch2

Data Center

10G to Distribution

Fault tolerant support for up to 534 devices, IP services

Distribution layer switches

Cisco 4503-E switch

DistSwitch1

DisSwitch2

Data Center

10G to Core

1G to Access

Fault tolerant full mesh distribution layer, IP services

Access layer switches

WS-C3850-48U-E

Quad1-1

Quad1-2

Quad1-3

Quad1-4

Quad1-5

Quad2-1

Quad2-2

Quad2-3

Quad2-4

Quad2-5

Quad3-1

Quad3-2

Quad3-3

Quad3-4

Quad3-5

Quad3-6

Quad4-1

Quad4-2

Quad4-3

Quad4-4

Quad4-5

Quad4-6

Data Center

1G to Distribution

1G to desktop

UPoE support, 48 Gig ports per switch, IP services, stackable for fault tolerant performance, integrated wireless controller

Firewall with IPS

ASA 5508-X

Firewall1

Firewall2

Data Center

1G to LAN

100Mbps to WAN

Redundant support for dual WAN link design

Ingress/egress IPS security

Redundant power supply for access switch

PWR-C1-1100WAC

Installed in CoreSwitch1 and CoreSwitch2

N/A

Second power supply for each WS-C3850-48U-E

Wireless AP

Cisco Aironet 2600

Ceiling mount caddy corner half way to center

1G to Access

802.11b/g/n to clients

450Mbps data rate support, 802.11a/b/g/n, LAN integration, VLAN, 128 client session support

Cisco 6500 switch supervisor

Cisco VS-S2T-10G-XL

Installed in CoreSwitch1 and CoreSwitch2

N/A

Provides 10G redundant support at the core

Cisco 6500 switch second power supply

Cisco CAB-AC-2500W-US1

Installed in CoreSwitch1 and CoreSwitch2

N/A

Provides redundant power supply support

Cisco 4500 switch supervisor

Cisco WS-X45-Sup 7L-E

Installed in DistSwitch1 and DistSwitch2

N/A

Provides 10G redundant distribution support

Cisco 4500 series line card

Cisco Catalyst 4500E UPOE Line Card

Installed in DistSwitch1 and DistSwitch2

N/A

Provides 1G redundant access support

(Cisco ASA 5508-X with FirePOWER Services, n.d.)

(Cisco Catalyst 6500 Series Switches - Products & Services, n.d.)

(Cisco Catalyst 6509-E Switch, n.d.)

(Compare Models, n.d.)

(Cisco Catalyst 6500 Series Switches - Interfaces and Modules, n.d.)

(Cisco Firewall Services Module for Cisco Catalyst 6500 and Cisco 7600 Series, n.d.)

(Cisco Aironet 2600 Series - Products & Services, n.d.)

Hierarchical IP Scheme and VLAN

Location/Dept

# of IP Addresses Required

Future Growth

Rounded Power of 2

Number of Host Bits

Subnet Address Assigned

OPR

21

21

64

10

172.16.6.1-62/26

NW USA

32

32

128

9

172.16.1.1-126/25

SW USA

32

32

128

9

172.16.2.1-126/25

NE USA

32

32

128

9

172.16.3.1-126/25

SE USA

32

32

128

9

172.16.4.1-126/25

M USA

32

32

128

9

172.16.5.1-126/25

Network IT

50

50

128

9

172.16.0.1-126/25

VLAN Name

Location/Dept

VLAN Assignment

Default VLAN

Unused

VLAN 1

Management VLAN

President, Executive Assistant, VP NW, VP SW, VP NE, VP SE, CEO IT, CEO FIN, CEO HR

VLAN 3

Staff VLAN

Staff/Reception

VLAN 5

Broker VLAN

Broker

VLAN 7

Black Hole VLAN

Vacant/Future Growth

VLAN 9

Voice VLAN (VOIP)

All Departments

VLAN 10

The WWTC VLAN assignment will follow industry best practices in alleviating traffic by designation of user, position, and type. Additionally, the default VLAN assigned to all Cisco switches, VLAN 1, will remain unassigned as any default settings that persist can be a potential target for outside attack.

Voice traffic will be segregated to its own VLAN in order to compensate for the required switch configurations that favor voice traffic including quality of service (QoS), full duplex, and other such configurations advantageous to voice and/or streaming traffic.

According to the case study diagram, WWTC will require a management VLAN for upper-level executives, a staff VLAN for regular staff, a designated VLAN for brokers, a voice VLAN for VOIP traffic, and a black hole VLAN to ensure all unused ports slated for future growth are not used in any illicit manner.

The chart above details the VLAN number assignment for the aforementioned configuration. The Black Hole VLAN covers any amount of users exceeding the required number, as this number represents current users. The management VLAN applies to any executive (President, VP, CEO), executive assistant or manager within a particular VP’s department.

Configurations at the switch port level will allow for traffic between VLANs via trunking in the case that WWTC wishes to designate each VP’s individual staff as its own department, and communication is required interdepartmentally. This configuration addresses the concern regarding regular staff obtaining sensitive company data and housing it on their systems. VLAN segregation by employee level helps ensure traffic with specific sensitivity is only shared with others whose position should allow them to access such information.

Link IP Addresses

As part of the design process, it is important to plan out the link IP addresses that will be used to connect your network infrastructure. These links will be static connections between devices that will allow them to communicate effectively and securely, which is a requirement of WWTC. The links also provide redundancy so that if any single or multiple devices were to be lost, the network would be able to continue to operate aside from the immediate device connections. Below you will find the corresponding tables that provide the link information for the core, distribution and access layers of the modular network design. The network is designed as a mesh to provide recovery from multiple failures, should it occur. Additionally, in order to efficiently use IP addresses, each network is a /30 in order to provide only the 2 device IP addresses that are required of these small subnets. Unfortunately, due to the design of the IP Hierarchy, it will not be possible to use summarization points in this design.

Core Routing

Device A

Device B

Device A Address

Device B Address

Network Address

FireWall1

CoreSwitch1

172.30.0.1

172.30.0.2

172.30.0.0

FireWall1

CoreSwitch2

172.30.0.5

172.30.0.6

172.30.0.4

FireWall2

CoreSwitch1

172.30.0.9

172.30.0.10

172.30.0.8

FireWall2

CoreSwitch2

172.30.0.13

172.30.0.14

172.30.0.12

CoreSwitch1

DistSwitch1

172.30.0.17

172.30.0.18

172.30.0.16

CoreSwitch1

DistSwitch2

172.30.0.21

172.30.0.22

172.30.0.20

CoreSwitch2

DistSwitch1

172.30.0.25

172.30.0.26

172.30.0.24

CoreSwitch2

DistSwitch2

172.30.0.29

172.30.0.30

172.30.0.28

Distribution Layer

Device A

Device B

Device A Address

Device B Address

Network Address

DistSwitch1

Quad1-1

172.30.0.33

172.30.0.34

172.30.0.32

DistSwitch1

Quad1-2

172.30.0.37

172.30.0.38

172.30.0.36

DistSwitch1

Quad1-3

172.30.0.41

172.30.0.42

172.30.0.40

DistSwitch1

Quad1-4

172.30.0.45

172.30.0.46

172.30.0.44

DistSwitch1

Quad1-5

172.30.0.49

172.30.0.50

172.30.0.48

DistSwitch1

Quad2-1

172.30.0.53

172.30.0.54

172.30.0.52

DistSwitch1

Quad2-2

172.30.0.57

172.30.0.58

172.30.0.56

DistSwitch1

Quad2-3

172.30.0.61

172.30.0.62

172.30.0.60

DistSwitch1

Quad2-4

172.30.0.65

172.30.0.66

172.30.0.64

DistSwitch1

Quad2-5

172.30.0.69

172.30.0.70

172.30.0.68

DistSwitch1

Quad3-1

172.30.0.73

172.30.0.74

172.30.0.72

DistSwitch1

Quad3-2

172.30.0.77

172.30.0.78

172.30.0.76

DistSwitch1

Quad3-3

172.30.0.81

172.30.0.82

172.30.0.80

DistSwitch1

Quad3-4

172.30.0.85

172.30.0.86

172.30.0.84

DistSwitch1

Quad3-5

172.30.0.89

172.30.0.90

172.30.0.88

DistSwitch1

Quad3-6

172.30.0.93

172.30.0.94

172.30.0.92

DistSwitch1

Quad4-1

172.30.0.97

172.30.0.98

172.30.0.96

DistSwitch1

Quad4-2

172.30.0.101

172.30.0.102

172.30.0.100

DistSwitch1

Quad4-3

172.30.0.105

172.30.0.106

172.30.0.104

DistSwitch1

Quad4-4

172.30.0.109

172.30.0.110

172.30.0.108

DistSwitch1

Quad4-5

172.30.0.113

172.30.0.114

172.30.0.112

DistSwitch1

Quad4-6

172.30.0.117

172.30.0.118

172.30.0.116

DistSwitch2

Quad1-1

172.30.0.121

172.30.0.122

172.30.0.120

DistSwitch2

Quad1-2

172.30.0.125

172.30.0.126

172.30.0.124

DistSwitch2

Quad1-3

172.30.0.129

172.30.0.130

172.30.0.128

DistSwitch2

Quad1-4

172.30.0.133

172.30.0.134

172.30.0.132

DistSwitch2

Quad1-5

172.30.0.137

172.30.0.138

172.30.0.136

DistSwitch2

Quad2-1

172.30.0.141

172.30.0.142

172.30.0.140

DistSwitch2

Quad2-2

172.30.0.145

172.30.0.146

172.30.0.144

DistSwitch2

Quad2-3

172.30.0.149

172.30.0.150

172.30.0.148

DistSwitch2

Quad2-4

172.30.0.153

172.30.0.154

172.30.0.152

DistSwitch2

Quad2-5

172.30.0.157

172.30.0.158

172.30.0.156

DistSwitch2

Quad3-1

172.30.0.161

172.30.0.162

172.30.0.160

DistSwitch2

Quad3-2

172.30.0.165

172.30.0.166

172.30.0.164

DistSwitch2

Quad3-3

172.30.0.169

172.30.0.170

172.30.0.168

DistSwitch2

Quad3-4

172.30.0.173

172.30.0.174

172.30.0.172

DistSwitch2

Quad3-5

172.30.0.177

172.30.0.178

172.30.0.176

DistSwitch2

Quad3-6

172.30.0.181

172.30.0.182

172.30.0.180

DistSwitch2

Quad4-1

172.30.0.185

172.30.0.186

172.30.0.184

DistSwitch2

Quad4-2

172.30.0.189

172.30.0.190

172.30.0.188

DistSwitch2

Quad4-3

172.30.0.193

172.30.0.194

172.30.0.192

DistSwitch2

Quad4-4

172.30.0.197

172.30.0.198

172.30.0.196

DistSwitch2

Quad4-5

172.30.0.201

172.30.0.202

172.30.0.200

DistSwitch2

Quad4-6

172.30.0.205

172.30.0.206

172.30.0.204

Access Layer

Device A

Device B

Device A Address

Device B Address

Network Address

Quad1-1

Quad1-2

172.30.0.209

172.30.0.210

172.30.0.208

Quad1-2

Quad1-3

172.30.0.213

172.30.0.214

172.30.0.212

Quad1-3

Quad1-4

172.30.0.217

172.30.0.218

172.30.0.216

Quad1-4

Quad1-5

172.30.0.221

172.30.0.222

172.30.0.220

Quad1-5

Quad1-1

172.30.0.225

172.30.0.226

172.30.0.224

Quad2-1

Quad2-2

172.30.0.229

172.30.0.230

172.30.0.228

Quad2-2

Quad2-3

172.30.0.233

172.30.0.234

172.30.0.232

Quad2-3

Quad2-4

172.30.0.237

172.30.0.238

172.30.0.236

Quad2-4

Quad2-5

172.30.0.241

172.30.0.242

172.30.0.240

Quad2-5

Quad2-1

172.30.0.245

172.30.0.246

172.30.0.244

Quad3-1

Quad3-2

172.30.0.249

172.30.0.250

172.30.0.248

Quad3-2

Quad3-3

172.30.0.253

172.30.0.254

172.30.0.252

Quad3-3

Quad3-4

172.30.1.1

172.30.1.2

172.30.1.0

Quad3-4

Quad3-5

172.30.1.5

172.30.1.6

172.30.1.4

Quad3-5

Quad3-6

172.30.1.9

172.30.1.10

172.30.1.8

Quad3-6

Quad3-1

172.30.1.13

172.30.1.14

172.30.1.12

Quad4-1

Quad4-2

172.30.1.17

172.30.1.18

172.30.1.16

Quad4-2

Quad4-3

172.30.1.21

172.30.1.22

172.30.1.20

Quad4-3

Quad4-4

172.30.1.25

172.30.1.26

172.30.1.24

Quad4-4

Quad4-5

172.30.1.29

172.30.1.30

172.30.1.28

Quad4-5

Quad4-6

172.30.1.33

172.30.1.34

172.30.1.32

Quad4-6

Quad4-1

172.30.1.37

172.30.1.38

172.30.1.36

Quad1-1

Quad1-3

172.30.1.41

172.30.1.42

172.30.1.40

Quad1-2

Quad1-4

172.30.1.45

172.30.1.46

172.30.1.44

Quad1-3

Quad1-5

172.30.1.49

172.30.1.50

172.30.1.48

Quad1-4

Quad1-1

172.30.1.53

172.30.1.54

172.30.1.52

Quad1-5

Quad1-2

172.30.1.57

172.30.1.58

172.30.1.56

Quad2-1

Quad2-3

172.30.1.61

172.30.1.62

172.30.1.60

Quad2-2

Quad2-4

172.30.1.65

172.30.1.66

172.30.1.64

Quad2-3

Quad2-5

172.30.1.69

172.30.1.70

172.30.1.68

Quad2-4

Quad2-1

172.30.1.73

172.30.1.74

172.30.1.72

Quad2-5

Quad2-2

172.30.1.77

172.30.1.78

172.30.1.76

Quad3-1

Quad3-3

172.30.1.81

172.30.1.82

172.30.1.80

Quad3-2

Quad3-4

172.30.1.85

172.30.1.86

172.30.1.84

Quad3-3

Quad3-5

172.30.1.89

172.30.1.90

172.30.1.88

Quad3-4

Quad3-6

172.30.1.93

172.30.1.94

172.30.1.92

Quad3-5

Quad3-1

172.30.1.97

172.30.1.98

172.30.1.96

Quad3-6

Quad3-2

172.30.1.101

172.30.1.102

172.30.1.100

Quad4-1

Quad4-3

172.30.1.105

172.30.1.106

172.30.1.104

Quad4-2

Quad4-4

172.30.1.109

172.30.1.110

172.30.1.108

Quad4-3

Quad4-5

172.30.1.113

172.30.1.114

172.30.1.112

Quad4-4

Quad4-6

172.30.1.117

172.30.1.118

172.30.1.116

Quad4-5

Quad4-1

172.30.1.121

172.30.1.122

172.30.1.120

Quad4-6

Quad4-2

172.30.1.125

172.30.1.126

172.30.1.124

VOIP Infrastructure

Device A

Device B

Device A Address

Device B Address

Network Address

CUCM-1

DistSwitch1

172.30.1.129

172.30.1.130

172.30.1.128

CUCM-2

DistSwitch1

172.30.1.133

172.30.1.134

172.30.1.132

UNITY-1

DistSwitch1

172.30.1.137

172.30.1.138

172.30.1.136

UNITY-2

DistSwitch1

172.30.1.141

172.30.1.142

172.30.1.140

CUCM-1

DistSwitch2

172.30.1.145

172.30.1.146

172.30.1.144

CUCM-2

DistSwitch2

172.30.1.149

172.30.1.150

172.30.1.148

UNITY-1

DistSwitch2

172.30.1.153

172.30.1.154

172.30.1.152

UNITY-2

DistSwitch2

172.30.1.157

172.30.1.158

172.30.1.156

Wireless Infrastructure

Device A

Device B

Device A Address

Device B Address

Network Address

DistSwitch1

WWTCwlan01

172.30.1.161

172.30.1.162

172.30.1.160

DistSwtich2

WWTCwlan02

172.30.1.165

172.30.1.166

172.30.1.164

DistSwitch1

WWTCwlan.access01

172.30.1.169

172.30.1.170

172.30.1.168

DistSwitch2

WWTCwlan.access02

172.30.1.173

172.30.1.174

172.30.1.172

High Level Diagrams

Proposed Enterprise Network LAN Design

Wireless Diagram

Voice Design

Due to the rapid growth of World-Wide Trading Company, a new office block in New York has been acquired. In order to allow the Stock Brokers to achieve their business goals by offering reliable, clear and seamless communications, a new Voice over IP telephone network will be implemented. Every aspect of the business has been reviewed and the VoIP network will be sure to be a valuable asset and exceed the expectations of WWTC.

World-Wide Trading Company has several specific design requirements that relate to the Voice over IP network. First, the system should be fully integrated with the data network and also the entire network should be in a centralized location. The network also needs to be modular and scalable as they are expecting massive growth. Another consideration needs to be the reduction of incoming telephone lines from the phone company to reduce costs. And lastly, provide for video conferencing and multi-casting services.

In order to meet and exceed the requirements of WWTC, the following proposed items have been recommended for purchase. The servers we are recommending are the HP ProLiant DL320 G8 which are fully compatible with the Cisco Unified Communications Manager (CUCM) and the Cisco Unity Connection voicemail system software. Redundancy has been accounted for with dual power supplies, and quad 10GbE Ethernet ports. Two servers would be allocated to hosting the CUCM, and two servers would be allocated to host the Cisco Unity voicemail system. By having redundant servers in place for each system, the voice network is capable of surviving a catastrophic failure. The Cisco voicemail is also able to provide redundancy by running in an active-active configuration. (Cisco Unity, 2011) The servers will fit seamlessly into the new network architecture and be fully integrated into the data network. (HP, 2015). The telephone sets are the newer supported models, the 7942G is recommended for the bulk of the employees, with 3 7962G sets with expansion modules for the reception areas. These expansion modules will give the receptionists the ability to add 24 extra lines, hotlines or speed-dials which can help speed service when transferring. (Cisco 7915, nd.). The phones are high-fidelity wideband audio which provide more frequency range as compared to traditional analog phones. This results in users being less fatigued and able to understand customers better when on the phone. (Cisco 7942G, nd.). Another great feature with these sets, are the XML services that are compatible with these types of phones. They can greatly enhance the user experience by allowing you to have world clocks, watch stocks, check the weather and convert currency right on your phone.(XML Services, 2016). And of course they come with a full range of features that you would expect from a traditional phone such as speed dials, call forwarding, 3 way conferencing as well as having a built in switch port to provide connectivity to a co-located PC, reducing costs of having to install extra cabling. Power can be provided directly from the switches using Power over Ethernet, or with an additional power supply. (Cisco Portfolio, nd.) These phones can also allow headset communications as well as speaker-phone. (Cisco 7962G, nd.). To go along with state of the art communications capabilities, we are also recommending the Linksys Edge Video conferencing equipment for the conference rooms to provide high definition video conferencing abilities to the conference rooms. (Video Conferencing, nd.). This will be an important feature to bridge the gap as the headquarters is located overseas, and bring people and ideas together as if they were in the same office. The voice network is scalable to well over 100% of its current capability, and additional phones/licenses can be purchased as the company eventually expands. Another great feature of this state of the art voice network, is that it will eliminate the need for having multiple separate phone lines ran into the building from the phone company, instead this system will rely on the internet connections from the ISP, which will reduce overall operating costs. This design recommends having two separate ISP accounts from different providers, with one of the ISP accounts used as redundancy. In case of a WAN outage from one ISP, the network will failover to the other ISP account. If both of the ISP accounts were to fail, the voice network will then failover to the Public Switched Telephone Network (PSTN) through the Voice Enabled Router. This redundant design will ensure that if one route of communications is not available, it will automatically divert traffic to the other.

In order for the Network Administrators for the New York office to effectively manage the Voice Network, the following device names should be used for the server equipment:

Device Type

Device

Device Name

Placement

HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz

Server

CUCM-1

Data Center

HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz

Server

CUCM-2

Data Center

HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz

Server

UNITY-1

Data Center

HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz

Server

UNITY-2

Data Center

The table below represents an estimated bandwidth requirement for the VoIP Network using the recommended manufacturer settings. The figures below are based on the G.711 Codec which both the Cisco 7942G and 7962G support. The rate at which samples are taken is every 30ms. Maximum bandwidth needed is calculated on 70% of 105 users on the phone at the same time.

IP Phone

CODEC

Rate

Sample Time

Payload

Packets Per Second

Bandwidth

Frame Relay

cRTP

7942G, 7962G

G.711

64 Kbps

30 ms

240 bytes

33.3

79.4 Kbps

76.2 Kbps

66.6 Kbps

Multiplied by 105 x 70%

G.711

 

 

 

 

5,835.9 Kbps

5,600 Kbps

4,895 Kbps

The total number of current employees assigned to the new WWTC building is right around 105, taking into account the currently vacant offices which have been assigned IP phones. In order to provide for future expansion at the New York site, a Class C IP addressing scheme has been chosen to provide up to 254 usable IP addresses. The Voice Network has been assigned to VLAN 10 to keep voice traffic separated, and to allow for easy prioritization of voice traffic to ensure no delays or degraded telephone conversations.

Devices

Needs

IP Addressing

VLAN

Cisco IP Phones

Minimum 105 addresses needed. Class C will provide 254 addresses for future VoIP expansion.

172.20.0.0/24

10

In closing, this Voice Network design provides the necessary redundancy by covering both equipment failure as well as ISP outages, and provides for necessary spare phones on site in case of faults with the phones themselves. The network is scalable and can handle over 100% growth easily with easily obtained IP phones. IP addressing also can handle the amount of IP addresses that will be needed in the future. The IP phones are feature rich and will provide the employees with a positive user experience as well as making them more productive. Video conferencing will bridge the distance gap, and result in easier, more productive conversations. The need for multiple phone lines for each phone number coming into the building will be eliminated with the new system. To sum it all up, this plan will save the business money, while providing the communication tools for the employees to accomplish their work goals.

Wireless Design

The following chart provides a detailed equipment listing and office locations that will be servicing the World Wide Trade Company’s wireless network.

Wireless Network Placement Table

Office Location

Access Point Requirements

Wireless LAN Controller Requirements

Total AP

Total WLC

Server Room

2

2

Lobby

6

6

Conference

Room #1

4

4

Conference

Room #2

4

4

Total

14

2

Cisco Equipment List

Device

Cisco Model#

Quantity

Comments

Access Point (AP)

Cisco Aironet 2700i Access Point

AIR-CAP2702I-xK910 (10-pack)

14

Supports 802.11ac/n, speeds up to 1.3 Gbps, guest access, BYOD, wIPS, IPv6, and 802.1X

Wireless LAN Controller (WLC)

 Cisco 5520 Wireless Controller

AIR-CT5520-K9

2

Supports 802.11ac/n, Bonjour services, guest access, BYOD, wIPS, IPv6, and 802.1X

Access Layer Switch

Cisco Catalyst 3850 Series Switch

(24 Ports)

WS-C3850-24P-S

2

Supports PoE, Gigabit speed, expansion of WLAN, and integration with wireless infrastructure

This chart details each infrastructure device, providing its unique name and location within in World Wide Trade Company’s new location.

Wireless Infrastructure Device Name and Placement

Device

Device Name

Placement

Connection

Cisco Aironet 2700i Access Point

WWTCnyc001

WWTCnyc002

WWTCnyc003

WWTCnyc004

WWTCnyc005

WWTCnyc006

Lobby

Access Layer Switch

vLAN 11 (Bonjour Services)

Cisco Aironet 2700i Access Point

WWTCnyc007

WWTCnyc008

WWTCnyc009

WWTCnyc010

Conference Room #1

Access Layer Switch

vLAN 11 (Bonjour Services)

Cisco Aironet 2700i Access Point

WWTCnyc011

WWTCnyc012

WWTCnyc013

WWTCnyc014

Conference Room #2

Access Layer Switch

vLAN 11 (Bonjour Services)

Cisco 5520 Wireless Controller

WWTCwlan01

WWTCwlan02

Server Room

Access Layer Switch

vLAN 11 (Bonjour Services)

Distribution Layer Switch

Cisco Catalyst 3850 Series Switch (Access Layer)

WWTCwlan.access01

WWTCwlan.access02

Server Room

Access Points

Wireless LAN Controller

The wireless LAN will have its own subnet, providing enough IP addresses (200) for end-users in the lobby and both conference rooms. In addition, Fifty-four IP addresses will be reserved for wireless infrastructure devices to assist with any potential of expansion of the network.

Devices

Needs

IP Addressing

VLAN

Multiple Wireless Devices

Separate subnet will be provided for the WLAN with 200 IP address available for clients and 52 reserved for additional infrastructure devices (i.e. access points); vLAN will be needed for Bonjour Services (Apple Devices)

172.16.10.0/24

200 – IP Addresses Available for Clients

54 - IP Addresses Reserved

11

References

Cisco ASA 5508-X with FirePOWER Services. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/support/security/asa-5508-x-firepower-services/model.html

Cisco Catalyst 6500 Series Switches - Products & Services. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/switches/catalyst-6500-series-switches/index.html

Cisco Catalyst 6509-E Switch. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/switches/catalyst-6509-e-switch/index.html

Compare Models. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/switches/catalyst-6500-series-switches/models-comparison.html

Cisco Catalyst 6500 Series Switches - Interfaces and Modules. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/switches/catalyst-6500-series-switches/relevant-interfaces-and-modules.html

Cisco Firewall Services Module for Cisco Catalyst 6500 and Cisco 7600 Series. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/catalyst-6500-series-firewall-services-module/product_data_sheet0900aecd803e69c3.html

Cisco Aironet 2600 Series - Products & Services. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/wireless/aironet-2600-series/index.html

UMUC. (n.d.). Case Study World Wide Trading Company. Retrieved February 1st, 2016, from https://learn.umuc.edu/d2l/le/dropbox/173660/290354/DownloadAttachment?fid=4908850

UMUC. (n.d.). LAN Assignments Instructions 2015. Retrieved February 1, 2016, from https://learn.umuc.edu/d2l/common/viewFile.d2lfile/Database/NDkwODg1Ng/LAN Assignments Instructions 2015.docx?ou=173660

UMUC. (n.d.). LAN, VOIP, and Wireless Assignment. Retrieved February 1, 2016, from https://learn.umuc.edu/d2l/common/viewFile.d2lfile/Database/NDkwODg1NQ/LAN, VoIP, and Wireless Assignment.docx?ou=173660

UMUC. (n.d.). WWTC Office Layout. Retrieved February 1, 2016, from https://learn.umuc.edu/d2l/common/viewFile.d2lfile/Database/NDkwODg1NA/WWTC Office Layout.png?ou=173660

Cisco 6500 Series CORE

CUCM Cluster

Unity Voicemail

ISP 1

ISP 2

PSTN

Teleconferencing

Teleconferencing

High Level VoIP Network Design

Wireless LAN ControllerAccess Layer SwitchLayer 3 SwitchBackend ServerAccess PointsWWTCwlan01WWTCwlan02Access PointsWWTCwlan.access01WWTCnyc001 -006WWTCnyc007 -010WWTCnyc011 -014WWTCwlan.access02

Lobby Conference Room #2 Conference Room #1 Server Room Wireless LAN Controller Access Layer Switch Layer 3 Switch Backend Server Access Points WWTCwlan01 WWTCwlan02 Access Points WWTCwlan.access01 WWTCnyc001 -006 WWTCnyc007 -010 WWTCnyc011 -014 WWTCwlan.access02

DeviceCisco Model#QuantityComments

Cisco Unified

Communications

Manager

UCM-7825-712Software

Cisco Unified IP

Phone

7942G112VoIP Telephone Sets/10 Spare

Cisco Unified IP

Phone

7962G4VoIP Telephone Sets/ 1 Spare(Reception)

Cisco Unified IP

Phone Expansion

Module

79153Expansion Module for 7962G (Reception)

Cisco Unity

Connection

UNITYV4-

300USR

1Voicemail Software

Linksys Edge 75

Video Conference

CTS-EDGE75-K92IP Video Conferencing Hardware

HP ProLiant 768638-0014Server Equipment

Sheet1

Device Cisco Model# Quantity Comments
Cisco Unified Communications Manager UCM-7825-71 2 Software
Cisco Unified IP Phone 7942G 112 VoIP Telephone Sets/10 Spare
Cisco Unified IP Phone 7962G 4 VoIP Telephone Sets/ 1 Spare(Reception)
Cisco Unified IP Phone Expansion Module 7915 3 Expansion Module for 7962G (Reception)
HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz 768638-001 4 Server Equipment
Cisco Unity Connection UNITYV4-300USR 1 Voicemail Software
Linksys Edge 75 Video Conference CTS-EDGE75-K9 2 IP Video Conferencing Hardware

Sheet2

Sheet3

Cisco 6500 Series

CORE

CUCM

Cluster

Unity Voicemail

ISP 1

ISP 2

PSTN

Teleconferencing

Teleconferencing

High Level VoIP Network Design