Assessment Plan
LAN, VOIP and Wireless 19
3- Network LAN Design with VoIP and Wireless Services
Introduction
The assignment for week three called for the creation of a “detailed LAN design of network with VoIP services, Wireless services, protocols, devices, and interconnectivity, with WAN” (UMUC, n.d.). According to the assignment document (UMUC, n.d.), “this section must include but is not limited to:
· Equipment List
· Hierarchical IP scheme and VLAN
· Link IP addresses
· High Level Diagram
· Voice and Wireless Design
The network details were generated from the information provided in the Case Study World Wide Trading Company document. (UMUC, n.d.)
Equipment List
The company has provided a list of requirements that must be met in order for the newly designed network to meet the company's current and long term business plans. Requirements that impact the LAN design directly include the need for much faster, higher performance network services. This requires a design that not only provides for higher available bandwidth, but also is designed in such a way as to reduce congestion that can occur due to issues such as excessive broadcast traffic, multicast flooding and routing loops. Another essential requirement is scalability and provision for 100% growth, so that the network is capable of supporting the business without major additions as the company expands to over twice the current size. Modularity is another requirement, which would ensure that when expansion is needed, or network changes are required, the company can make those changes with minimal disruption to network performance and the business. Migration provision to IPv6, while not an immediate need, must also be built into the network infrastructure so that as the use of IPv6 becomes more prevalent, the company can leave IPv4 behind with minimal business disruption and expense. Centralized network administration with DHCP services, hierarchical IP address scheme with route aggregation, integrated support for VoIP, streaming video/media support, and a solid, layered defense in-depth security approach. A thorough and detailed plan is necessary in order to accommodate these requirements.
The equipment chosen for network design that meets all of the above requirements must be very high performance, have double the number of ports required currently by the business, integrate well into a layered network structure that facilitates centralized administration, and support high availability configurations. The Cisco product line supports all of these attributes and building a network infrastructure using equipment from a single vendor is a widely used strategy because it ensures seamless hardware, protocol and interface integration so that the network performs as a single unit from the end user perspective which is highly desirable.
The devices listed in the following table will easily accommodate twice the current 250 device demand within the company while also delivering high performance for VoIP and streaming media applications, high availability, and wireless integration, along with the other aforementioned requirements.
|
Device |
Cisco Model # |
Quantity |
Comments |
|
Redundant Core Switches |
6509-E |
2 |
Fault tolerant support for up to 534 devices, IP services
|
|
Distribution layer switches |
4503-E |
2 |
Fault tolerant full mesh distribution layer, IP services |
|
Access layer switches |
WS-C3850-48U-E |
22 |
UPoE support, 48 Gig ports per switch, IP services, stackable for fault tolerant performance, integrated wireless controller |
|
Firewall with IPS |
ASA 5508-X |
2 |
Redundant support for dual WAN link design Ingress/egress IPS security |
|
Redundant power supply for access switch |
PWR-C1-1100WAC |
22 |
Second power supply for each WS-C3850-48U-E |
|
Cisco 6500 switch supervisor |
Cisco VS-S2T-10G-XL |
4 |
Provides 10G redundant support at the core |
|
Cisco 6500 switch second power supply |
Cisco CAB-AC-2500W-US1 |
2 |
Provides redundant power supply support |
|
Cisco 4500 switch supervisor |
Cisco WS-X45-Sup 7L-E |
4 |
Provides 10G redundant distribution support |
|
Cisco 4500 series line card |
Cisco Catalyst 4500E UPOE Line Card |
4 |
Provides 1G redundant access support |
|
|
|
|
|
The network design is focused on centralized administration for the purpose of decreasing administrative overhead by enabling a lower number of IT staff to maintain the network. All network services such as DHCP, DNS, Active Directory and software maintenance and deployment services (for example) are managed in a centralized yet hierarchical configuration. The network design also delivers a high degree of redundancy. Every switch within the infrastructure has dual uplink connections to the network infrastructure. Each switch is also equipped with dual power supplies, and the network itself is configured in a partial mesh so that there is no single point of failure that could cause business disruption for the company. In addition, each chassis switch (the Cisco 4500 and 6500 series) have dual supervisor engines so that if one engine fails, this fault tolerant configuration enables the switch to continue operating. To fulfill the security requirements of the company, the network is equipped with a Cisco ASA 5500 series firewall that features IPS services so that would be intrusions can be detected and quickly shutdown while administrators are alerted to the attack. Each department is configured with its own VLAN, and ACLs are configured between the VLANs so that only authorized traffic is allowed to pass between VLANs on the network. Should the company deem it necessary, the 4500 and 6500 series switches can also be equipped with IPS supervisor engines so that the core and distribution layers of the network are also protected by IPS (providing yet another layer of defense against intruders). The 3850 series switches feature an integrated wireless controller which enables seamless wireless mobility throughout the wireless networking area within the building. All switches will be configured with RSTP to prevent network loop issues, EIGRP to automate routing table population and maintenance (with fast convergence), and route summation employed on a per subnet basis for efficiency. All switches also support IGMP, IGMP snooping, and PIM protocols for layer 2 and 3 multicast forwarding, with PoE and VoIP services supported at the access layer for IP telecommunications services. Finally, each switch features modular capability, enabling the company to add new features to the network in the future should the need arise.
In order to effectively manage the new network infrastructure, a naming convention plan must be drafted that provides IT staff (and users) with a logical, understandable means for identifying network devices. Following is a table that provides such a plan:
|
Device Type |
Device |
Device Configured Name |
Placement |
Connection |
Comments |
|
Redundant Core Switches |
Cisco 6509-E switch |
CoreSwitch1 CoreSwitch2 |
Data Center |
10G to Distribution |
Fault tolerant support for up to 534 devices, IP services
|
|
Distribution layer switches |
Cisco 4503-E switch |
DistSwitch1 DisSwitch2 |
Data Center |
10G to Core 1G to Access |
Fault tolerant full mesh distribution layer, IP services |
|
Access layer switches |
WS-C3850-48U-E |
Quad1-1 Quad1-2 Quad1-3 Quad1-4 Quad1-5 Quad2-1 Quad2-2 Quad2-3 Quad2-4 Quad2-5 Quad3-1 Quad3-2 Quad3-3 Quad3-4 Quad3-5 Quad3-6 Quad4-1 Quad4-2 Quad4-3 Quad4-4 Quad4-5 Quad4-6 |
Data Center |
1G to Distribution 1G to desktop |
UPoE support, 48 Gig ports per switch, IP services, stackable for fault tolerant performance, integrated wireless controller |
|
Firewall with IPS |
ASA 5508-X |
Firewall1 Firewall2 |
Data Center |
1G to LAN 100Mbps to WAN |
Redundant support for dual WAN link design Ingress/egress IPS security |
|
Redundant power supply for access switch |
PWR-C1-1100WAC |
|
Installed in CoreSwitch1 and CoreSwitch2 |
N/A |
Second power supply for each WS-C3850-48U-E |
|
Wireless AP |
Cisco Aironet 2600 |
|
Ceiling mount caddy corner half way to center |
1G to Access 802.11b/g/n to clients |
450Mbps data rate support, 802.11a/b/g/n, LAN integration, VLAN, 128 client session support |
|
Cisco 6500 switch supervisor |
Cisco VS-S2T-10G-XL |
|
Installed in CoreSwitch1 and CoreSwitch2 |
N/A |
Provides 10G redundant support at the core |
|
Cisco 6500 switch second power supply |
Cisco CAB-AC-2500W-US1 |
|
Installed in CoreSwitch1 and CoreSwitch2 |
N/A |
Provides redundant power supply support |
|
Cisco 4500 switch supervisor |
Cisco WS-X45-Sup 7L-E |
|
Installed in DistSwitch1 and DistSwitch2 |
N/A |
Provides 10G redundant distribution support |
|
Cisco 4500 series line card |
Cisco Catalyst 4500E UPOE Line Card |
|
Installed in DistSwitch1 and DistSwitch2 |
N/A |
Provides 1G redundant access support |
(Cisco ASA 5508-X with FirePOWER Services, n.d.)
(Cisco Catalyst 6500 Series Switches - Products & Services, n.d.)
(Cisco Catalyst 6509-E Switch, n.d.)
(Compare Models, n.d.)
(Cisco Catalyst 6500 Series Switches - Interfaces and Modules, n.d.)
(Cisco Firewall Services Module for Cisco Catalyst 6500 and Cisco 7600 Series, n.d.)
(Cisco Aironet 2600 Series - Products & Services, n.d.)
Hierarchical IP Scheme and VLAN
|
Location/Dept |
# of IP Addresses Required |
Future Growth |
Rounded Power of 2 |
Number of Host Bits |
Subnet Address Assigned |
|
OPR |
21 |
21 |
64 |
10 |
172.16.6.1-62/26 |
|
NW USA |
32 |
32 |
128 |
9 |
172.16.1.1-126/25 |
|
SW USA |
32 |
32 |
128 |
9 |
172.16.2.1-126/25 |
|
NE USA |
32 |
32 |
128 |
9 |
172.16.3.1-126/25 |
|
SE USA |
32 |
32 |
128 |
9 |
172.16.4.1-126/25 |
|
M USA |
32 |
32 |
128 |
9 |
172.16.5.1-126/25 |
|
Network IT |
50 |
50 |
128 |
9 |
172.16.0.1-126/25 |
|
VLAN Name |
Location/Dept |
VLAN Assignment |
|
Default VLAN |
Unused |
VLAN 1 |
|
Management VLAN |
President, Executive Assistant, VP NW, VP SW, VP NE, VP SE, CEO IT, CEO FIN, CEO HR |
VLAN 3 |
|
Staff VLAN |
Staff/Reception |
VLAN 5 |
|
Broker VLAN |
Broker |
VLAN 7 |
|
Black Hole VLAN |
Vacant/Future Growth |
VLAN 9 |
|
Voice VLAN (VOIP) |
All Departments |
VLAN 10 |
The WWTC VLAN assignment will follow industry best practices in alleviating traffic by designation of user, position, and type. Additionally, the default VLAN assigned to all Cisco switches, VLAN 1, will remain unassigned as any default settings that persist can be a potential target for outside attack.
Voice traffic will be segregated to its own VLAN in order to compensate for the required switch configurations that favor voice traffic including quality of service (QoS), full duplex, and other such configurations advantageous to voice and/or streaming traffic.
According to the case study diagram, WWTC will require a management VLAN for upper-level executives, a staff VLAN for regular staff, a designated VLAN for brokers, a voice VLAN for VOIP traffic, and a black hole VLAN to ensure all unused ports slated for future growth are not used in any illicit manner.
The chart above details the VLAN number assignment for the aforementioned configuration. The Black Hole VLAN covers any amount of users exceeding the required number, as this number represents current users. The management VLAN applies to any executive (President, VP, CEO), executive assistant or manager within a particular VP’s department.
Configurations at the switch port level will allow for traffic between VLANs via trunking in the case that WWTC wishes to designate each VP’s individual staff as its own department, and communication is required interdepartmentally. This configuration addresses the concern regarding regular staff obtaining sensitive company data and housing it on their systems. VLAN segregation by employee level helps ensure traffic with specific sensitivity is only shared with others whose position should allow them to access such information.
Link IP Addresses
|
Core Routing |
||||
|
Device A |
Device B |
Device A Address |
Device B Address |
Network Address |
|
FireWall1 |
CoreSwitch1 |
172.30.0.1 |
172.30.0.2 |
172.30.0.0 |
|
FireWall1 |
CoreSwitch2 |
172.30.0.5 |
172.30.0.6 |
172.30.0.4 |
|
FireWall2 |
CoreSwitch1 |
172.30.0.9 |
172.30.0.10 |
172.30.0.8 |
|
FireWall2 |
CoreSwitch2 |
172.30.0.13 |
172.30.0.14 |
172.30.0.12 |
|
CoreSwitch1 |
DistSwitch1 |
172.30.0.17 |
172.30.0.18 |
172.30.0.16 |
|
CoreSwitch1 |
DistSwitch2 |
172.30.0.21 |
172.30.0.22 |
172.30.0.20 |
|
CoreSwitch2 |
DistSwitch1 |
172.30.0.25 |
172.30.0.26 |
172.30.0.24 |
|
CoreSwitch2 |
DistSwitch2 |
172.30.0.29 |
172.30.0.30 |
172.30.0.28 |
|
Distribution Layer |
||||
|
Device A |
Device B |
Device A Address |
Device B Address |
Network Address |
|
DistSwitch1 |
Quad1-1 |
172.30.0.33 |
172.30.0.34 |
172.30.0.32 |
|
DistSwitch1 |
Quad1-2 |
172.30.0.37 |
172.30.0.38 |
172.30.0.36 |
|
DistSwitch1 |
Quad1-3 |
172.30.0.41 |
172.30.0.42 |
172.30.0.40 |
|
DistSwitch1 |
Quad1-4 |
172.30.0.45 |
172.30.0.46 |
172.30.0.44 |
|
DistSwitch1 |
Quad1-5 |
172.30.0.49 |
172.30.0.50 |
172.30.0.48 |
|
DistSwitch1 |
Quad2-1 |
172.30.0.53 |
172.30.0.54 |
172.30.0.52 |
|
DistSwitch1 |
Quad2-2 |
172.30.0.57 |
172.30.0.58 |
172.30.0.56 |
|
DistSwitch1 |
Quad2-3 |
172.30.0.61 |
172.30.0.62 |
172.30.0.60 |
|
DistSwitch1 |
Quad2-4 |
172.30.0.65 |
172.30.0.66 |
172.30.0.64 |
|
DistSwitch1 |
Quad2-5 |
172.30.0.69 |
172.30.0.70 |
172.30.0.68 |
|
DistSwitch1 |
Quad3-1 |
172.30.0.73 |
172.30.0.74 |
172.30.0.72 |
|
DistSwitch1 |
Quad3-2 |
172.30.0.77 |
172.30.0.78 |
172.30.0.76 |
|
DistSwitch1 |
Quad3-3 |
172.30.0.81 |
172.30.0.82 |
172.30.0.80 |
|
DistSwitch1 |
Quad3-4 |
172.30.0.85 |
172.30.0.86 |
172.30.0.84 |
|
DistSwitch1 |
Quad3-5 |
172.30.0.89 |
172.30.0.90 |
172.30.0.88 |
|
DistSwitch1 |
Quad3-6 |
172.30.0.93 |
172.30.0.94 |
172.30.0.92 |
|
DistSwitch1 |
Quad4-1 |
172.30.0.97 |
172.30.0.98 |
172.30.0.96 |
|
DistSwitch1 |
Quad4-2 |
172.30.0.101 |
172.30.0.102 |
172.30.0.100 |
|
DistSwitch1 |
Quad4-3 |
172.30.0.105 |
172.30.0.106 |
172.30.0.104 |
|
DistSwitch1 |
Quad4-4 |
172.30.0.109 |
172.30.0.110 |
172.30.0.108 |
|
DistSwitch1 |
Quad4-5 |
172.30.0.113 |
172.30.0.114 |
172.30.0.112 |
|
DistSwitch1 |
Quad4-6 |
172.30.0.117 |
172.30.0.118 |
172.30.0.116 |
|
DistSwitch2 |
Quad1-1 |
172.30.0.121 |
172.30.0.122 |
172.30.0.120 |
|
DistSwitch2 |
Quad1-2 |
172.30.0.125 |
172.30.0.126 |
172.30.0.124 |
|
DistSwitch2 |
Quad1-3 |
172.30.0.129 |
172.30.0.130 |
172.30.0.128 |
|
DistSwitch2 |
Quad1-4 |
172.30.0.133 |
172.30.0.134 |
172.30.0.132 |
|
DistSwitch2 |
Quad1-5 |
172.30.0.137 |
172.30.0.138 |
172.30.0.136 |
|
DistSwitch2 |
Quad2-1 |
172.30.0.141 |
172.30.0.142 |
172.30.0.140 |
|
DistSwitch2 |
Quad2-2 |
172.30.0.145 |
172.30.0.146 |
172.30.0.144 |
|
DistSwitch2 |
Quad2-3 |
172.30.0.149 |
172.30.0.150 |
172.30.0.148 |
|
DistSwitch2 |
Quad2-4 |
172.30.0.153 |
172.30.0.154 |
172.30.0.152 |
|
DistSwitch2 |
Quad2-5 |
172.30.0.157 |
172.30.0.158 |
172.30.0.156 |
|
DistSwitch2 |
Quad3-1 |
172.30.0.161 |
172.30.0.162 |
172.30.0.160 |
|
DistSwitch2 |
Quad3-2 |
172.30.0.165 |
172.30.0.166 |
172.30.0.164 |
|
DistSwitch2 |
Quad3-3 |
172.30.0.169 |
172.30.0.170 |
172.30.0.168 |
|
DistSwitch2 |
Quad3-4 |
172.30.0.173 |
172.30.0.174 |
172.30.0.172 |
|
DistSwitch2 |
Quad3-5 |
172.30.0.177 |
172.30.0.178 |
172.30.0.176 |
|
DistSwitch2 |
Quad3-6 |
172.30.0.181 |
172.30.0.182 |
172.30.0.180 |
|
DistSwitch2 |
Quad4-1 |
172.30.0.185 |
172.30.0.186 |
172.30.0.184 |
|
DistSwitch2 |
Quad4-2 |
172.30.0.189 |
172.30.0.190 |
172.30.0.188 |
|
DistSwitch2 |
Quad4-3 |
172.30.0.193 |
172.30.0.194 |
172.30.0.192 |
|
DistSwitch2 |
Quad4-4 |
172.30.0.197 |
172.30.0.198 |
172.30.0.196 |
|
DistSwitch2 |
Quad4-5 |
172.30.0.201 |
172.30.0.202 |
172.30.0.200 |
|
DistSwitch2 |
Quad4-6 |
172.30.0.205 |
172.30.0.206 |
172.30.0.204 |
|
Access Layer |
||||
|
Device A |
Device B |
Device A Address |
Device B Address |
Network Address |
|
Quad1-1 |
Quad1-2 |
172.30.0.209 |
172.30.0.210 |
172.30.0.208 |
|
Quad1-2 |
Quad1-3 |
172.30.0.213 |
172.30.0.214 |
172.30.0.212 |
|
Quad1-3 |
Quad1-4 |
172.30.0.217 |
172.30.0.218 |
172.30.0.216 |
|
Quad1-4 |
Quad1-5 |
172.30.0.221 |
172.30.0.222 |
172.30.0.220 |
|
Quad1-5 |
Quad1-1 |
172.30.0.225 |
172.30.0.226 |
172.30.0.224 |
|
Quad2-1 |
Quad2-2 |
172.30.0.229 |
172.30.0.230 |
172.30.0.228 |
|
Quad2-2 |
Quad2-3 |
172.30.0.233 |
172.30.0.234 |
172.30.0.232 |
|
Quad2-3 |
Quad2-4 |
172.30.0.237 |
172.30.0.238 |
172.30.0.236 |
|
Quad2-4 |
Quad2-5 |
172.30.0.241 |
172.30.0.242 |
172.30.0.240 |
|
Quad2-5 |
Quad2-1 |
172.30.0.245 |
172.30.0.246 |
172.30.0.244 |
|
Quad3-1 |
Quad3-2 |
172.30.0.249 |
172.30.0.250 |
172.30.0.248 |
|
Quad3-2 |
Quad3-3 |
172.30.0.253 |
172.30.0.254 |
172.30.0.252 |
|
Quad3-3 |
Quad3-4 |
172.30.1.1 |
172.30.1.2 |
172.30.1.0 |
|
Quad3-4 |
Quad3-5 |
172.30.1.5 |
172.30.1.6 |
172.30.1.4 |
|
Quad3-5 |
Quad3-6 |
172.30.1.9 |
172.30.1.10 |
172.30.1.8 |
|
Quad3-6 |
Quad3-1 |
172.30.1.13 |
172.30.1.14 |
172.30.1.12 |
|
Quad4-1 |
Quad4-2 |
172.30.1.17 |
172.30.1.18 |
172.30.1.16 |
|
Quad4-2 |
Quad4-3 |
172.30.1.21 |
172.30.1.22 |
172.30.1.20 |
|
Quad4-3 |
Quad4-4 |
172.30.1.25 |
172.30.1.26 |
172.30.1.24 |
|
Quad4-4 |
Quad4-5 |
172.30.1.29 |
172.30.1.30 |
172.30.1.28 |
|
Quad4-5 |
Quad4-6 |
172.30.1.33 |
172.30.1.34 |
172.30.1.32 |
|
Quad4-6 |
Quad4-1 |
172.30.1.37 |
172.30.1.38 |
172.30.1.36 |
|
Quad1-1 |
Quad1-3 |
172.30.1.41 |
172.30.1.42 |
172.30.1.40 |
|
Quad1-2 |
Quad1-4 |
172.30.1.45 |
172.30.1.46 |
172.30.1.44 |
|
Quad1-3 |
Quad1-5 |
172.30.1.49 |
172.30.1.50 |
172.30.1.48 |
|
Quad1-4 |
Quad1-1 |
172.30.1.53 |
172.30.1.54 |
172.30.1.52 |
|
Quad1-5 |
Quad1-2 |
172.30.1.57 |
172.30.1.58 |
172.30.1.56 |
|
Quad2-1 |
Quad2-3 |
172.30.1.61 |
172.30.1.62 |
172.30.1.60 |
|
Quad2-2 |
Quad2-4 |
172.30.1.65 |
172.30.1.66 |
172.30.1.64 |
|
Quad2-3 |
Quad2-5 |
172.30.1.69 |
172.30.1.70 |
172.30.1.68 |
|
Quad2-4 |
Quad2-1 |
172.30.1.73 |
172.30.1.74 |
172.30.1.72 |
|
Quad2-5 |
Quad2-2 |
172.30.1.77 |
172.30.1.78 |
172.30.1.76 |
|
Quad3-1 |
Quad3-3 |
172.30.1.81 |
172.30.1.82 |
172.30.1.80 |
|
Quad3-2 |
Quad3-4 |
172.30.1.85 |
172.30.1.86 |
172.30.1.84 |
|
Quad3-3 |
Quad3-5 |
172.30.1.89 |
172.30.1.90 |
172.30.1.88 |
|
Quad3-4 |
Quad3-6 |
172.30.1.93 |
172.30.1.94 |
172.30.1.92 |
|
Quad3-5 |
Quad3-1 |
172.30.1.97 |
172.30.1.98 |
172.30.1.96 |
|
Quad3-6 |
Quad3-2 |
172.30.1.101 |
172.30.1.102 |
172.30.1.100 |
|
Quad4-1 |
Quad4-3 |
172.30.1.105 |
172.30.1.106 |
172.30.1.104 |
|
Quad4-2 |
Quad4-4 |
172.30.1.109 |
172.30.1.110 |
172.30.1.108 |
|
Quad4-3 |
Quad4-5 |
172.30.1.113 |
172.30.1.114 |
172.30.1.112 |
|
Quad4-4 |
Quad4-6 |
172.30.1.117 |
172.30.1.118 |
172.30.1.116 |
|
Quad4-5 |
Quad4-1 |
172.30.1.121 |
172.30.1.122 |
172.30.1.120 |
|
Quad4-6 |
Quad4-2 |
172.30.1.125 |
172.30.1.126 |
172.30.1.124 |
|
VOIP Infrastructure |
||||
|
Device A |
Device B |
Device A Address |
Device B Address |
Network Address |
|
CUCM-1 |
DistSwitch1 |
172.30.1.129 |
172.30.1.130 |
172.30.1.128 |
|
CUCM-2 |
DistSwitch1 |
172.30.1.133 |
172.30.1.134 |
172.30.1.132 |
|
UNITY-1 |
DistSwitch1 |
172.30.1.137 |
172.30.1.138 |
172.30.1.136 |
|
UNITY-2 |
DistSwitch1 |
172.30.1.141 |
172.30.1.142 |
172.30.1.140 |
|
CUCM-1 |
DistSwitch2 |
172.30.1.145 |
172.30.1.146 |
172.30.1.144 |
|
CUCM-2 |
DistSwitch2 |
172.30.1.149 |
172.30.1.150 |
172.30.1.148 |
|
UNITY-1 |
DistSwitch2 |
172.30.1.153 |
172.30.1.154 |
172.30.1.152 |
|
UNITY-2 |
DistSwitch2 |
172.30.1.157 |
172.30.1.158 |
172.30.1.156 |
|
Wireless Infrastructure |
||||
|
Device A |
Device B |
Device A Address |
Device B Address |
Network Address |
|
DistSwitch1 |
WWTCwlan01 |
172.30.1.161 |
172.30.1.162 |
172.30.1.160 |
|
DistSwtich2 |
WWTCwlan02 |
172.30.1.165 |
172.30.1.166 |
172.30.1.164 |
|
DistSwitch1 |
WWTCwlan.access01 |
172.30.1.169 |
172.30.1.170 |
172.30.1.168 |
|
DistSwitch2 |
WWTCwlan.access02 |
172.30.1.173 |
172.30.1.174 |
172.30.1.172 |
High Level Diagrams
Proposed Enterprise Network LAN Design
Wireless Diagram
Voice Design
Due to the rapid growth of World-Wide Trading Company, a new office block in New York has been acquired. In order to allow the Stock Brokers to achieve their business goals by offering reliable, clear and seamless communications, a new Voice over IP telephone network will be implemented. Every aspect of the business has been reviewed and the VoIP network will be sure to be a valuable asset and exceed the expectations of WWTC.
World-Wide Trading Company has several specific design requirements that relate to the Voice over IP network. First, the system should be fully integrated with the data network and also the entire network should be in a centralized location. The network also needs to be modular and scalable as they are expecting massive growth. Another consideration needs to be the reduction of incoming telephone lines from the phone company to reduce costs. And lastly, provide for video conferencing and multi-casting services.
In order to meet and exceed the requirements of WWTC, the following proposed items have been recommended for purchase. The servers we are recommending are the HP ProLiant DL320 G8 which are fully compatible with the Cisco Unified Communications Manager (CUCM) and the Cisco Unity Connection voicemail system software. Redundancy has been accounted for with dual power supplies, and quad 10GbE Ethernet ports. Two servers would be allocated to hosting the CUCM, and two servers would be allocated to host the Cisco Unity voicemail system. By having redundant servers in place for each system, the voice network is capable of surviving a catastrophic failure. The Cisco voicemail is also able to provide redundancy by running in an active-active configuration. (Cisco Unity, 2011) The servers will fit seamlessly into the new network architecture and be fully integrated into the data network. (HP, 2015). The telephone sets are the newer supported models, the 7942G is recommended for the bulk of the employees, with 3 7962G sets with expansion modules for the reception areas. These expansion modules will give the receptionists the ability to add 24 extra lines, hotlines or speed-dials which can help speed service when transferring. (Cisco 7915, nd.). The phones are high-fidelity wideband audio which provide more frequency range as compared to traditional analog phones. This results in users being less fatigued and able to understand customers better when on the phone. (Cisco 7942G, nd.). Another great feature with these sets, are the XML services that are compatible with these types of phones. They can greatly enhance the user experience by allowing you to have world clocks, watch stocks, check the weather and convert currency right on your phone.(XML Services, 2016). And of course they come with a full range of features that you would expect from a traditional phone such as speed dials, call forwarding, 3 way conferencing as well as having a built in switch port to provide connectivity to a co-located PC, reducing costs of having to install extra cabling. Power can be provided directly from the switches using Power over Ethernet, or with an additional power supply. (Cisco Portfolio, nd.) These phones can also allow headset communications as well as speaker-phone. (Cisco 7962G, nd.). To go along with state of the art communications capabilities, we are also recommending the Linksys Edge Video conferencing equipment for the conference rooms to provide high definition video conferencing abilities to the conference rooms. (Video Conferencing, nd.). This will be an important feature to bridge the gap as the headquarters is located overseas, and bring people and ideas together as if they were in the same office. The voice network is scalable to well over 100% of its current capability, and additional phones/licenses can be purchased as the company eventually expands. Another great feature of this state of the art voice network, is that it will eliminate the need for having multiple separate phone lines ran into the building from the phone company, instead this system will rely on the internet connections from the ISP, which will reduce overall operating costs. This design recommends having two separate ISP accounts from different providers, with one of the ISP accounts used as redundancy. In case of a WAN outage from one ISP, the network will failover to the other ISP account. If both of the ISP accounts were to fail, the voice network will then failover to the Public Switched Telephone Network (PSTN) through the Voice Enabled Router. This redundant design will ensure that if one route of communications is not available, it will automatically divert traffic to the other.
In order for the Network Administrators for the New York office to effectively manage the Voice Network, the following device names should be used for the server equipment:
|
Device Type |
Device |
Device Name |
Placement |
|
HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz
|
Server |
CUCM-1 |
Data Center |
|
HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz
|
Server |
CUCM-2 |
Data Center |
|
HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz
|
Server |
UNITY-1 |
Data Center |
|
HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz
|
Server |
UNITY-2 |
Data Center |
The table below represents an estimated bandwidth requirement for the VoIP Network using the recommended manufacturer settings. The figures below are based on the G.711 Codec which both the Cisco 7942G and 7962G support. The rate at which samples are taken is every 30ms. Maximum bandwidth needed is calculated on 70% of 105 users on the phone at the same time.
|
IP Phone |
CODEC |
Rate |
Sample Time |
Payload |
Packets Per Second |
Bandwidth |
Frame Relay |
cRTP |
|
7942G, 7962G |
G.711 |
64 Kbps |
30 ms |
240 bytes |
33.3 |
79.4 Kbps |
76.2 Kbps |
66.6 Kbps |
|
Multiplied by 105 x 70% |
G.711 |
|
|
|
|
5,835.9 Kbps |
5,600 Kbps |
4,895 Kbps |
The total number of current employees assigned to the new WWTC building is right around 105, taking into account the currently vacant offices which have been assigned IP phones. In order to provide for future expansion at the New York site, a Class C IP addressing scheme has been chosen to provide up to 254 usable IP addresses. The Voice Network has been assigned to VLAN 10 to keep voice traffic separated, and to allow for easy prioritization of voice traffic to ensure no delays or degraded telephone conversations.
|
Devices |
Needs |
IP Addressing |
VLAN |
|
Cisco IP Phones |
Minimum 105 addresses needed. Class C will provide 254 addresses for future VoIP expansion. |
172.20.0.0/24 |
10 |
In closing, this Voice Network design provides the necessary redundancy by covering both equipment failure as well as ISP outages, and provides for necessary spare phones on site in case of faults with the phones themselves. The network is scalable and can handle over 100% growth easily with easily obtained IP phones. IP addressing also can handle the amount of IP addresses that will be needed in the future. The IP phones are feature rich and will provide the employees with a positive user experience as well as making them more productive. Video conferencing will bridge the distance gap, and result in easier, more productive conversations. The need for multiple phone lines for each phone number coming into the building will be eliminated with the new system. To sum it all up, this plan will save the business money, while providing the communication tools for the employees to accomplish their work goals.
Wireless Design
The following chart provides a detailed equipment listing and office locations that will be servicing the World Wide Trade Company’s wireless network.
|
Wireless Network Placement Table |
||||
|
Office Location |
Access Point Requirements |
Wireless LAN Controller Requirements |
Total AP |
Total WLC |
|
Server Room |
|
2 |
|
2 |
|
Lobby |
6 |
|
6 |
|
|
Conference Room #1 |
4 |
|
4 |
|
|
Conference Room #2 |
4 |
|
4 |
|
|
Total |
|
|
14 |
2 |
|
Cisco Equipment List |
|||
|
Device |
Cisco Model# |
Quantity |
Comments |
|
Access Point (AP) |
Cisco Aironet 2700i Access Point AIR-CAP2702I-xK910 (10-pack) |
14 |
Supports 802.11ac/n, speeds up to 1.3 Gbps, guest access, BYOD, wIPS, IPv6, and 802.1X |
|
Wireless LAN Controller (WLC) |
Cisco 5520 Wireless Controller AIR-CT5520-K9 |
2 |
Supports 802.11ac/n, Bonjour services, guest access, BYOD, wIPS, IPv6, and 802.1X |
|
Access Layer Switch |
Cisco Catalyst 3850 Series Switch (24 Ports) WS-C3850-24P-S
|
2 |
Supports PoE, Gigabit speed, expansion of WLAN, and integration with wireless infrastructure |
This chart details each infrastructure device, providing its unique name and location within in World Wide Trade Company’s new location.
|
Wireless Infrastructure Device Name and Placement |
|||
|
Device |
Device Name |
Placement |
Connection |
|
Cisco Aironet 2700i Access Point
|
WWTCnyc001 WWTCnyc002 WWTCnyc003 WWTCnyc004 WWTCnyc005 WWTCnyc006 |
Lobby
|
Access Layer Switch vLAN 11 (Bonjour Services) |
|
Cisco Aironet 2700i Access Point
|
WWTCnyc007 WWTCnyc008 WWTCnyc009 WWTCnyc010
|
Conference Room #1
|
Access Layer Switch vLAN 11 (Bonjour Services) |
|
Cisco Aironet 2700i Access Point
|
WWTCnyc011 WWTCnyc012 WWTCnyc013 WWTCnyc014
|
Conference Room #2
|
Access Layer Switch vLAN 11 (Bonjour Services) |
|
Cisco 5520 Wireless Controller
|
WWTCwlan01 WWTCwlan02 |
Server Room |
Access Layer Switch vLAN 11 (Bonjour Services) Distribution Layer Switch |
|
Cisco Catalyst 3850 Series Switch (Access Layer) |
WWTCwlan.access01 WWTCwlan.access02 |
Server Room |
Access Points Wireless LAN Controller |
The wireless LAN will have its own subnet, providing enough IP addresses (200) for end-users in the lobby and both conference rooms. In addition, Fifty-four IP addresses will be reserved for wireless infrastructure devices to assist with any potential of expansion of the network.
|
Devices |
Needs |
IP Addressing |
VLAN |
|
Multiple Wireless Devices
|
Separate subnet will be provided for the WLAN with 200 IP address available for clients and 52 reserved for additional infrastructure devices (i.e. access points); vLAN will be needed for Bonjour Services (Apple Devices) |
172.16.10.0/24 200 – IP Addresses Available for Clients 54 - IP Addresses Reserved |
11 |
References
Cisco ASA 5508-X with FirePOWER Services. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/support/security/asa-5508-x-firepower-services/model.html
Cisco Catalyst 6500 Series Switches - Products & Services. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/switches/catalyst-6500-series-switches/index.html
Cisco Catalyst 6509-E Switch. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/switches/catalyst-6509-e-switch/index.html
Compare Models. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/switches/catalyst-6500-series-switches/models-comparison.html
Cisco Catalyst 6500 Series Switches - Interfaces and Modules. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/switches/catalyst-6500-series-switches/relevant-interfaces-and-modules.html
Cisco Firewall Services Module for Cisco Catalyst 6500 and Cisco 7600 Series. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/collateral/interfaces-modules/catalyst-6500-series-firewall-services-module/product_data_sheet0900aecd803e69c3.html
Cisco Aironet 2600 Series - Products & Services. (2016, January 01). Retrieved February 01, 2016, from http://www.cisco.com/c/en/us/products/wireless/aironet-2600-series/index.html
UMUC. (n.d.). Case Study World Wide Trading Company. Retrieved February 1st, 2016, from https://learn.umuc.edu/d2l/le/dropbox/173660/290354/DownloadAttachment?fid=4908850
UMUC. (n.d.). LAN Assignments Instructions 2015. Retrieved February 1, 2016, from https://learn.umuc.edu/d2l/common/viewFile.d2lfile/Database/NDkwODg1Ng/LAN Assignments Instructions 2015.docx?ou=173660
UMUC. (n.d.). LAN, VOIP, and Wireless Assignment. Retrieved February 1, 2016, from https://learn.umuc.edu/d2l/common/viewFile.d2lfile/Database/NDkwODg1NQ/LAN, VoIP, and Wireless Assignment.docx?ou=173660
UMUC. (n.d.). WWTC Office Layout. Retrieved February 1, 2016, from https://learn.umuc.edu/d2l/common/viewFile.d2lfile/Database/NDkwODg1NA/WWTC Office Layout.png?ou=173660
Cisco 6500 Series CORE
CUCM Cluster
Unity Voicemail
ISP 1
ISP 2
PSTN
Teleconferencing
Teleconferencing
High Level VoIP Network Design
Wireless LAN ControllerAccess Layer SwitchLayer 3 SwitchBackend ServerAccess PointsWWTCwlan01WWTCwlan02Access PointsWWTCwlan.access01WWTCnyc001 -006WWTCnyc007 -010WWTCnyc011 -014WWTCwlan.access02
Lobby Conference Room #2 Conference Room #1 Server Room Wireless LAN Controller Access Layer Switch Layer 3 Switch Backend Server Access Points WWTCwlan01 WWTCwlan02 Access Points WWTCwlan.access01 WWTCnyc001 -006 WWTCnyc007 -010 WWTCnyc011 -014 WWTCwlan.access02
DeviceCisco Model#QuantityComments
Cisco Unified
Communications
Manager
UCM-7825-712Software
Cisco Unified IP
Phone
7942G112VoIP Telephone Sets/10 Spare
Cisco Unified IP
Phone
7962G4VoIP Telephone Sets/ 1 Spare(Reception)
Cisco Unified IP
Phone Expansion
Module
79153Expansion Module for 7962G (Reception)
Cisco Unity
Connection
UNITYV4-
300USR
1Voicemail Software
Linksys Edge 75
Video Conference
CTS-EDGE75-K92IP Video Conferencing Hardware
HP ProLiant 768638-0014Server Equipment
Sheet1
| Device | Cisco Model# | Quantity | Comments |
| Cisco Unified Communications Manager | UCM-7825-71 | 2 | Software |
| Cisco Unified IP Phone | 7942G | 112 | VoIP Telephone Sets/10 Spare |
| Cisco Unified IP Phone | 7962G | 4 | VoIP Telephone Sets/ 1 Spare(Reception) |
| Cisco Unified IP Phone Expansion Module | 7915 | 3 | Expansion Module for 7962G (Reception) |
| HP ProLiant DL320 G8 Intel Pentium G3240 3.10GHz | 768638-001 | 4 | Server Equipment |
| Cisco Unity Connection | UNITYV4-300USR | 1 | Voicemail Software |
| Linksys Edge 75 Video Conference | CTS-EDGE75-K9 | 2 | IP Video Conferencing Hardware |
Sheet2
Sheet3
Cisco 6500 Series
CORE
CUCM
Cluster
Unity Voicemail
ISP 1
ISP 2
PSTN
Teleconferencing
Teleconferencing
High Level VoIP Network Design