Networking-Security question

TCP/IP was a famous networking structure that was used over the years. The advent of the OSI model seemed to have overrode its significance, but it still remains basic in setting up fundamental requirements for such a network. NetComm is a software development company located in New York City with at five branches distributed in the major US cities. This Network proposal will review the company’s network profile and requirements. The desired systems will be discussed and a proposed network diagram drawn. Additional requirements will include introduction of firewalls, VPN networks, and extended user services as emails.

The proposal also tries to analyze the role of OSI Model in ensuring that the network meets its requirements both user and system.

In addition, the proposal also analyzes both time and cost feasibility study of the TCP/IP network design proposal and states the overall budget and time frame which are required to implement the project.

American Based NetComm specializes in software design and implementation. With five branches across different states, connectivity and seamless access to crucial files remains fundamental in ensuring smooth operations. Appropriate systems to ensure reliable connectivity, data storage, information and content security, remote operation, and easy access by authorized users remain fundamental to the operation of this company

In as much as the previous model allowed for connectivity and information access, security and remote access services were denied. The previous setups in makes access to information slow and vulnerable to attacks since most telecommunication network operations are manual. Therefore, implementation of a secure computer network that connects the branches to the main office via fiber optic cable will improve on the security, speed and overall network performance. In addition, configuration of VPN access will make remote access a reality to users in this company. Introduction of firewall services will not only boost the security but add confidence to the current systems and staff.

Since the company has numerous users and branches, connectivity and easy communication is a priority. Appropriate servers to facilitate such traffic using the TCP/IP model will be discussed. Access to the network will also be improved, with services as VPN being introduced for given users. This will ensure remote troubleshooting and working for the workers. Today, network security is a concern all over the world. Companies have become a target of malicious attacks. Being a software-based firm, Netcomm remains a prime target by such groups, in response, security firewalls will be introduced to the systems to ensure possible attacks are kept under watch.

The main objectives of the network design project include:

1. To implement networking to all branches using TCP/IP network protocols

2. To analyze the role of TCP/IP Model in the proposed network

3. To ensure easy access to the network

4. To implement firewall security to the system

5. To provide additional user services as emails, user groups, VPN and others

6. To enhance organizational performance through faster and efficient services delivery to clients such as instant feedback.

The proposed network will consist of centralized servers which are connected to the branches using both wireless and wired technology. The wired technology will use fiber optic cables and also copper cables because of their advantages respectively.

The company needs databases for information storage and replication, Solaris equipment have been proposed for this design.

To facilitate internet access, a web server client has been added to the setup. Also, an email server has been added and it will be configured to allow email applications such as office 365 emailing. The proxy server will help in controlling accessed proxies and thus acts as a security tool.

All traffic goes via the external perimeter/firewall that is configured to help maintain security.

A VPN client has been included in the setup, it will be configured to contain details of specific devices and the services they can access.

The core network is connected to external networks via cables and microwave access links to ensure connection redundancy.

Automatic link-failover configurations have been made on the core router to enable link selection based on priorities. There is also a super cluster connection of databases and routers to ensure data replication, hence the Data replication center/data recovery center

Termination in all branches has been done the same way, all traffic from the core router is directed to the end devices via the Branch routers. Wireless access can also be enabled for end users using wireless enabled terminal devices.

The network elements used here include:

End devices include portable tablets, IP phones, PCs, Laptops, printers, IP Cameras and other networking device

Switches are used to facilitate interconnections between the LANS while the routers help in connectivity in the WAN.

A DHCP server has been put in place to help in automatic assignment of IP addresses thus reducing the need for manual configuration of new users

The firewall has been strategically placed to ensure safety when connecting to ISPs and the internet cloud.

A data replication center has also been setup to ensure data security and continuous uptime of the systems.

TCP/IP framework requires the parameters to be defined in the design stage, and this means a lot of manual configurations will be implemented in the network. An end to end approach has been employed in this setup as it is a requirement for this protocol to communicate.

The model has two-layer programs in which the higher TCP oversees creation of packets and sending. Lower layers of the protocol as the internet layer mainly focusses on addressing and redirection exercises. TCP/IP is rather a stateless network and will allow users to easily manipulate it, although caution is necessary to prevent attacks.

Various protocols supported by TCP/IP will be called upon in different situations to help realize effective communication. For instance, TELNET will be used to ensure VPN connections are successful, SMPT will come in to provide emailing services, HTTP will be essential for internet browsing services. TCP/IP also supports the Serial Line internet Protocol, this, ensures can use dial-in connections to access the intranet. Configuration of the routers to enable communication and gateway access will be done using OSPF configuration modes.

The time plan will be followed according to the following Gantt Chart.

The proposed network design budget includes:

Netcomm’s proposed network structure will need proper planning and implementation. The five branches will effectively be connected to a data center and to the data redundancy center. This proposal has therefore explored the desired equipment, given the framework, timelines for the project and an estimated budget for the project. The objectives as per the proposal have therefore been achieved successfully.

Day, J. D., & Zimmermann, H. (1983). The OSI reference model. Proceedings of the IEEE, 71(12), 1334-1340.

Gavish, B. (1991). Topological design of telecommunication networks-local access design methods. Annals of Operations Research, 33(1), 17-71.

Kutsch, D. B., Larson, G. M., Lohf, L. W., & Johnson, P. D. (1994). U.S. Patent No. 5,339,379. Washington, DC: U.S. Patent and Trademark Office.

Lee, M., Yu, J., Kim, Y., Kang, C. H., & Park, J. (2002). Design of hierarchical cross connect WDM networks employing a two-stage multiplexing scheme of waveband and wavelength. Selected Areas in Communications, IEEE Journal on, 20(1), 166-171.

Tichy, N., & Fombrun, C. (1979). Network analysis in organizational settings.Human Relations, 32(11), 923-965.

Wooldridge, M. J. (1998). Agent technology: foundations, applications, and markets. Springer Science & Business Media.

9 | Page

NetComm Network

Default

Network

CORE NETWORK ROUTER

Cisco

Router

Cable Modem

Laptop

Tablet

Internet

ISP

Solaris Proxy Server

Web Server

Corporate VPN

Multilayer

Switch

oracle databases

Database Server

Solaris Server

Web Server

Proxy Server

POP/Email Server

EXTERNAL FIREWALL

SWITCH

OTHER BRANCHES

SAMPLE BRANCH TERMINATION

DATA REDUNDANCY CENTER