Network Design and Implementation for Hoplongtech Company, High school final essays of Computer science

Download Network Design and Implementation for Hoplongtech Company and more High school final essays Computer science in PDF only on Docsity! 4 % BK ACAD? @ Pearson HOC VIEN CONG NGHE BKACAD “BTEC PROGRAM TITLE: .. UNIT TITLE: Networking ASSIGNMENT NUMBER: 2 ASSIGNMENT NAME: Network Design and Implement SUBMISSION DATE: ............ccccceceeeeeee eens eee ee eens ee eeee DATE RECEIVED: ...........cccceccceec cece ee ee eee ee sees eeeeneeeeeee TUTORIAL LECTURER: .............ccccceeeceeeee sees ee eee ee eees WORD COUNT: ..... 0c ccc cec cece cece eee e eee e eee e ence eee eee eenes STUDENT NAME: BUI THI HOAI STUDENT ID: BKC18310 MOBILE NUMBER: 0936168487 Summative Feedback: Internal verification: - Access Switch Cisco Catalyst 2960 24 port 10/100/1000: provides connection for Internal Server Block/ DMZ Block - Internet Router 2911: connect to the internet. 2. I. Overall connection model Overview network map includes 202 hosts: ¢ Lani: 120 host ¢ ~Lan2: 60 host ¢ Sever private: 20 host ¢ Router: 2 host. a? “20 vst eR a0 and 69 rest P6 Test and evaluate the design to meet the requirements and analyze user feedback. Recommended Network Devices The Catalyst 2960 Access Switches connect to Core Switch using 1 GigEthernet uplink ports with Etherchannel technology that combines these 2 links running in parallel to form a 2Gbps Links running to avoid bottlenecks form access Switch to Core Switch and provide the ability redundancy between these two connections, if one has problems the data is automatically transferred to the other, the process is transparent to the end user. Router 2911 Deliver full cost saving like never before and agile networking through the intelligent integration of market-leading security, unified communications, wireless, and application services. This router provides corresponding interfaces to connect to different types of lines to the internet, for example: ADSL, FTTH, Leaseline... 2. Network Addressing implementation Using network addresses: 172.16.1.0/24 - Lan 1 (120 host): 172.16.1.0/25 - Lan 2 (60 host): 172.16.1.128/26 - Sever private (20 host): 172.16.1.192/27 - Router (2 host): 172.16.1.224/30 Var tae 126005, Ill. Install and configure network services and applications on your choice. Document and analyze test results against expected results. (M3 — P8) 1. Configuring DHCP server a. Configure address IP DHCP for LAN1 - Configure static IP address on the DHCP server (172.16.1.202/27) ¢ IP address: 172.16.1.202 ¢ Subnet Mask: 255.255.255.224 ¢ Default Gateway: 172.16.1.193 ¢ DNS Server: 8.8.8.8 - Configure ip-helper address in router allows the router to transmit DHCP discover packets to a DHCP server known by the router (unicast). ¢ Configure in Router 3 Router(config) # int g0/2 Router (config) #ip helper-address 172.16.1.202 Router (config-if) #ex Router (config) #int g0/2 Router (config-if)#ip helper-address 172.16.1.202 Router (config-if) 4 To enable static routing we do configure ip route Router (config-if) #ip route 0.0.0.0 0.0.0.0 172.16.1.226 ¢ Configure in Router 4 Router(config-if) #ip route 172.16.1.0 255.255.255.128 172.16.1.255 e Now goto every PC and on their IP configuration tabs, enable DHCP. Every PC should be able to obtain an IP address, default gateway and DNS server Eg: PC Admin: B® Admin - Oo x Physical Config Desktop | Programming Attributes 5 [x] a Interface FastEthemet0 v IP Configuration @ bHcP O Static DHCP request successful IPv4 Address 172.16.4.2 ‘Subnet Mask 255.255.266.128 Default Gateway 172.16.1.4 DNS Server 8.8.6.8 IP¥6 Configuration © Automatic @ Static Be Ades C7 LinkLocsl dos ee ons Seam CY 802.1% LD Use 802.1X Security v LH Top Test the configuration by pinging Route3 from DHCP B® Router3 _ a x Physical Config CLI Attributes 1OS Command Line Interface a 4 Router>en =| |Router$cont t | Jencer configuration commands, one per line. End with CNTL/Z. Router (config) #ping 172.1€.1.202 % Invalid input detected az '*' marker. Router (config) #int g0/2 Router (config-if)#do ping 172.16.1.202 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 172.16.1.202, timeout is 2 seconds: Success rate is 80 percent (4/5), round-trip min/avg/max = 0/0/2 Router (config-if)¢| v Ctrl+F6 to exit CLI focus Copy Paste: U1 Top b. Configure address ip DHCP for LAN2 Configure DHCP service ¢ Pool name: LAN2 ¢ Default Gateway: 172.16.1.129 ¢ DNS Server: 8.8.8.8 ¢ Start IP Address: 172.16.1.192 ¢ Subnet Mask: 255.255.255.0 ¢ Maximum Number of users: 60 ® Hee - a x Physical Config _Scniccs_ Docks Ficgramming — ttibues Ee once Interface (TasTthemet ©] Service © Cn Oor cout Gaouay (mene a sotto, 355d 255 spe Manu tnbe esse WIC Addraes: foonp cc I Eve I Rese root vetour ws Subnet ax thw Name Gateway Server at - Configure ip helper-address, ip route in Router 3 Router (config) #int g0/1 Router (config-if) #ip helper-address 172.16.1.202 Router(config-if) #ip route 172.16.1.128 255.255.255.192 172.16.1.255 e Now goto every PC and on their IP configuration tabs, enable DHCP. Every PC should be able to obtain an IP address, default gateway and DNS server Eg: PC Tech: BR ect - on x Physical Config Desktop _ Programming _Attrbutes — @ necp O Static DHCP request cuscessful raven EE ae ee — or Races © Automatic @ Static ve atess CL] Line oleae ee ONS See | a tise 809 1x Security ‘Autherticati ang D ter b. Server mail.hoplong.com ¢ Ip address: 172.16.1.203 ¢ Subnet Mark: 255.255.255.224 ¢ Default Gateway: 172.16.1.193 ¢ DNS: 8.8.8.8 B® mail hoplong.com a x Physical Config Services Desktop Programming Attributes ald @ Static. sunt a eee Dns ean IPv6 Configuration O Automatic @ Bistic Pesan Linc Loe pes | Dns ean —d 802.1K [Use 802.1% Security Atwicain : . L Top - set email address for pc O tep © mailhcplong.com - oO Physical Config Sevices Desktop Programming —_ Attributes SFRVICES EMAIL ‘SMIP Service POP3 Sewice DHCP DIICPVE. @on CO 0FF © O oFF FTP ons Denim se SLOG) User Setup. AAA NTP User Password EMAIL employee Fr “Tech ToT VM Management * Redius EAP ‘Change Password 3. Connect outside the internet - Set the ip address for routers4 s0/1/0: 200.162.1.1 Router>en Router#conf t Enter configuration commands, one per line. End with CNIL/Z. Router (config) #int 30/1/0 Router (config-if)#no shutdown SLINK-5-CHANGED: Interface Serial0/1/0, changed state to down Router (config-if)#ip add 200.165.1.1 255.255.252 & Invalid input detected at marker. Router (config-if)#ip add 200.165.1.1 255.255.255.252 Router (config-if) | 5 - Set the ip address for routers6 s0/1/0: Router>en Routeréconf t Enter configuration commands, one per line. End with CNIL/Z. Router (config)#int 30/1/0 Router (config-if)#no shutdown %LINK-5-CHANGED: Interface Seriald/1/0, changed state to down Router (config-if)#ip add 200.165.1.1 255.255.252 & Invalid input detected at '*' marker. Router (config-if)#ip add 200.165.1.1 255.255.255.252 Router (config-if) # Router (config-if)# SLINK-S-CHANGED: Interface Serial0/1/0, changed state to up SLINEPROTO-S-UPDOWN: Line protocol on Interface Serial0/1/0, changed state to up Router6 g0/0 Router (config-if) #ex Router (config) #int g0/0 Router (config-if)#no shutdown Router (config-if)#ip address 8.8.8.1 255.255.255.0 Router (config-it)# i - Routing for the router4 Router>en Router#conf t Enter configuration commands, one per line. End with CNTL/Z. Router (config)#ip route 0.0.0.0 0.0.0.0 200.165.1.2 Router (config) 4] ' - Routeing for the router6 Router (config) #ip route 0.0.0.0 0.0.0.0 s0/1/0 sDefault route without gateway, if not a point-to-point interface, may impact performance Router (config) 4 Set ip address for google.com B qucokecorn - rx © peer Gea: rakes mid ‘afaus Gaenay anid Pres Ake | Il I sre ews mertemy 0 2s owe | ao (Use 802.1% Security fomcan : Lite Set ip address for DNS ® ons Physical Config Seniess _Dositon_ Programming Artibutee | * Sosa (O peer ‘Static Patten nem DNS Sener eS CC Aucmave Stati. oases | Lrktse ates vemsieney | Ln See — [7 Use 022.4 Secu-ty al a as ¢ Ping router4->DNS Router (config) #do ping 8.8.8.3 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds: Success rate is 100 percent (5/5), round-trip min/avg/max = 1/4/12 ms Router (config) # LO4. Implement and diagnose networked systems. V. ~~ P7. Implement a network system based on a prepared design. - image simulation of the network system Lan 120081 Cpe aa 2 gots Deals wa6.0r 2 Lan 620 hes 17296 62 Cn? ane) 1018 es ‘See pate 2 Poste 72 1.18207 Reser 2 ote 72 16122100 - Expected to have 180 PCs, sets up DHCP to dynamically assign addresses to users. ¢ Lan1(120 host): 172.16.1.2->172.16.1.127 in the address range 172.16.1.0/26 ¢ Lan2(60 host): 172.16.1.129->172.16.1.190 in the address range 172.16.1.128/26 - DHCP service has assigned dynamic addresses to the machines used successfully (presented during installation - M3 part) VI. M4. Recommend potential enhancements for the networked systems. - The system can be expanded but the number should not exceed 260 people - Support for deploying the system in a server farm model that allows service servers to be installed on the same server system or on many different servers to help improve the system's processing power and help home. design better model implementation. - Building confidentiality and security in the system ¢ Defense in depth: The system must be protected in depth, divided into many layers and separated into many different layers. Each layer and layer has different security or containment policies implemented ¢ Using many different technologies: Do not rely on only one technology or technology product to ensure the security of a certain company's network. Because if the company's products are found vulnerable by hackers, then similar products of that company in the network will also be penetrated easily and the stratification and stratification in the defense policy is meaningless. - Using 2 high speed ADSL lines