Cindy Willis Final Project COT410 Local/Campus Networking CSAR network services 2719 Rock Road Wichita, Ks 67010 December 21, 2008 Mr. Davis CEO XYZ Company 1234 N. Webb Rd. Wichita, Ks 67207 RE: Proposal for XYZ Company Your company has hired CSAR network services to provide a solution for your new location here in Wichita. We have been informed you are purchasing a building located at 1234 N. Web Rd, Wichita, Kansas. The building is 118 feet wide and 164 feet long. You have asked if we can build a network that focuses on, the ability to share financial data, design graphics, marketing and R & D files, which will include internet access. We have been informed you would like, your network to consist of 18 new workstations with an additional 12 workstations; for a total of 30 workstations. You would also like a total of 8 laptops for use in all the offices, conference rooms and when traveling. You will also initially need a file server and email server to accommodate your requirements. Marketing and R & D files. We have been informed since our first meeting that you have decided to expand to Cleveland Ohio. You are having a building constructed to match the one here in Wichita. You would also like all the equipment to be duplicated and internet access to be provided at a single point here in Wichita. The equipment you have asked for will include a Total of 60 Desktops, 8 laptops and 1 file server and 1 mail server and a web server. We will also include 4 network printers. All other equipment and requirements are discussed later in detail. Cindy Willis Final Project COT410 Local/Campus Networking Our recommendations to implement the network design are as follows: We suggest building the network using a with a topology. The star-bus topology. integrated.s multiple star topologies together onto a bus. The workstations will connect to the workgroup switches. In its simplest form, only switch devices connect directly to the tree bus, and each switch functions as the "root" of a tree of devices. Switches, Router and Server are explained in further detail. Switches: A switch is a device that joins multiple computers together. Some networks use hubs and they appear nearly identical to a switch. However, a switch is more intelligent and slightly more expensive. Switches are capable of inspecting data packets as they are received, by determining the source and destination device of each packet and forwarding them appropriately, as they are received, determining the source and destination device of each packet, and forwarding them appropriately. By delivering messages only to the connected device intended, a network switch conserves network bandwidth and offers generally better performance than a hub. (ask.com) I have selected the Cisco SRW2016 16-port Gigabit Switch for the workgroup switches. This will be located in the server/wire room. In addition, this is where all the network equipment will be located. The switch is equipped with 16-Port 10/100/1000 Gigabit Switch with Web View Gigabit Switching with Fiber Expansion and Browser Configurability. The new Linksys rack mount switch delivers nonblocking, wire speed switching for your 10, 100, and 1000 megabit network clients, plus multiple options for connecting to your network backbone. Sixteen 10/100/1000 ports wire up your workstations, while the two mini GBIC ports allow future expansion to alternate transmission media like optical fiber for your backbone. It features Web View monitoring and configuration via your web browser, making it easy to manage the Cindy Willis Final Project COT410 Local/Campus Networking 64 VLANs and up to 8 trunking groups. Alternatively, if you prefer, you can use the integrated console port to configure the switch. The non-blocking, wire-speed, full-duplex switching forwards packets as fast as your network can deliver them. Also included are Address Learning and Aging to prevent data transfer errors and Data Flow Control to help prevent packet collisions. Four Quality of Service egress queues per port let you prioritize traffic via 802.1p. The switch provides broadcast storm suppression, has hardware MAC addresses learning, and supports packet filtering and port security. All ports have automatic MDI/MDI-X crossover detection, so you do not have to worry about the cable type, and polarity detection will even automatically correct wiring errors. Each port independently and automatically negotiates for best speed and whether to run in half- or full-duplex mode. Head-of-line blocking prevention keeps your high-speed clients from bogging down in lower-speed traffic and fast store-andforward switching prevents damaged packets from being passed on into the network. (cisco.com) For the backbone Switch I have chosen is Cisco Catalyst 2960-24TT-L 24-port switch. This switch is equipped with 24 Ethernet 10/100 ports and 2 fixed Ethernet 10/100/1000 uplink ports. The Cisco Catalyst 2960 LAN Base Series offers: PoE configurations with full 15.4W for up to 24 ports. Intelligent features at the network edge, such as sophisticated access control lists (ACLs) and enhanced security. Dualpurpose uplinks for Gigabit Ethernet uplink flexibility, allowing use of either a copper or a fiber uplink; each dual-purpose uplink port has one 10/100/1000 Ethernet port and one Small Form-Factor Pluggable (SFP)-based Gigabit Ethernet port, with one port active at a time. In addition, network control and bandwidth optimization using advanced QoS, granular rate limiting, ACLs, and multicast services. Network security through a wide range of authentication methods, data encryption technologies, and NAC based on users, ports, and MAC addresses. Easy network configuration, upgrades, and troubleshooting using Cisco Network Assistant software. Also includes auto configuration for specialized applications Cindy Willis Final Project COT410 Local/Campus Networking using smart ports and a limited lifetime hardware warranty. Software updates at no additional charge. Routers: Routers are devices that forward data packets along networks. A router is connected to at least two networks, commonly two LAN or WAN or a LAN and its ISP network. Routers are located at gateways, the places where two or more networks connect, and are the critical device that keeps data flowing between networks and keeps the networks connected to the Internet. When data is sent between locations on one network or from one network to a second network, the data is always seen and directed to the correct location by the router. They accomplish his by using headers and forwarding tables to determine the best path for forwarding the data packets, and they use protocols such as ICMP to communicate with each other and configure the best route between any two hosts. (Webopedia.com) I specify chose selected the Cisco 1801 Integrated Services Router because which provides high-speed DSL broadband access through asymmetric DSL (ADSL) over basic telephone service (while helping to ensure reliable networking with integrated ISDN S/T BRI backup. The Cisco 1801 router combine the cost benefits of DSL service with the advanced routing capability required for business use of the Internet. Cisco Systems is redefining best-in-class enterprise and small- to midsize-business routing with a new line of integrated services routers that are optimized for the secure delivery of data services. Founded on years of leadership and innovation, the Cisco 1800 Series integrated services router intelligently embed data, security, and wireless technology into a single, resilient system for fast, secure, scalable delivery of mission-critical business applications. The best-in-class Cisco 1800 Series architecture has been specifically designed to meet requirements of small to medium-sized businesses (SMBs), enterprise branch offices, and service provider-managed services applications for delivery of concurrent services at wire-speed performance. The integrated secure systems architecture of the Cisco 1800 Series delivers Cindy Willis Final Project COT410 Local/Campus Networking maximum business agility and investment protection. The Cisco 1801 Integrated Services Router provides secure broadband access with concurrent services for branch and small offices Integrated ISDN Basic Rate Interface (BRI), or Ethernet backup port for redundant WAN links LAN Switching with optional inline POE Secure wireless LAN for simultaneous 802.11a and 802.11b/g operation with use of multiple antennas Advanced security including: Stateful Inspection Firewall IP Security (IPSec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]) Dynamic Multipoint VPN (DMVPN) and Easy VPN Intrusion Prevention System (IPS) Antivirus support through Network Admission Control (NAC) and enforcement of secure access policies. (Cisco.com) Workstations/Desktops: -should be same text size as other sub-headings Workstations will include an Ethernet card installed for network connection. All workstation will have Windows XP and Office Professional 2007 installed. The 2007 office package will include; Word, Access, Excel, PowerPoint and Outlook for email needs. The desktop I have selected is the Dell Precision Workstation T5400. It includes a Quad Core Intel Xeon Processor E5420 (2.50GHz, 2X6M L2, 1333). Genuine Window Vista Business Bonus and Windows XP Professional downgrade. It also includes a 3 Year Limited Hardware Warranty with Next Business Day on-site service. (dell.com) Laptops: As for the laptop, I have selected the Precision Mobile M4400 Intel Core 2 duo T9400 (2.53GHz, 6M L2 Cache, 1066MHz FSB). Also includes Genuine Windows Vista Business Bonus-Windows XP Professional downgrade. (dell.com) Cindy Willis Final Project COT410 Local/Campus Networking Servers: For servers I selected the Dell-PowerEdge 1900 and the T605. I selected the T605 server for the Ohio location for a remote access connection back the main office in Wichita. The PowerEdge T605 Quad Core AMD Opteron 2376,4x512K Cache,2.3GHz,1Ghz HyperTransport Windows Server®2008, has remote management features: the review system comes with Dell's OpenManage Server Administrator software and its DRAC (Dell remote access card) 5 controller. The latter allows the server to be accessed securely via a web browser, where it provides a dedicated Fast Ethernet port for remote access. Providing the server is connected to a power source you can use the controller to access it, regardless of its condition, to monitor critical components and view environmental values. With this server the internet speed will be much faster to main office, Including downloads, file transfers and ect. I chose Dell’s PowerEdge 1900 for the file mail and web server. The hard drive options range from a 10,000RPM 73 GB SAS drive to a 7200RPM SATA 750 GB drive. The external options are still greater, ranging from a PowerVault 200s/221S external storage system to an MD6000 External Disk Enclosure. Both Servers include a range of network options such as: Dell Remote Access Card, 5th Generation for PowerEdge Remote Management. Intel PRO 1000PT 1GbE Dual Port NIC, PCIe-4. LOM NIC is TOE Ready. 56K Internal Modem for PowerEdge and PowerEdgeSC, Conexant. Also includes Watchguard Firebox X55e-W Edge Wireless Security Appliance - Unlimited Node for security. All specifications for both servers will be listed at the end of this document. The nice thing regarding Dell products is that you can customize/build your own product. Network Printers/Copier/Fax: I chose the Brother’s MFC-9840CDW Color Laser Multi-Function Center with Wireless Networking. The MFC-9840CDW is the ultimate color laser Multi-Function Center. That offers superior quality color laser printing, faxing, copying and scanning, with built-in network connectivity. Delivering the same print Cindy Willis Final Project COT410 Local/Campus Networking speed, copy speed and output quality as the MFC-9440CN, the MFC-9840CDW adds automatic duplex (2-sided input/output) for printing, copying, faxing and scanning, a legal-size document glass, up to 50sheet auto document feeder, as well as an integrated 802.11b/g wireless interface. Internet service: I have selected DSL (ADSL) for the internet service. DSL promises a faster and cheaper connection between LANs, WANs, and the Internet than lease lines and is better service for a small business. For information on ADSL rates and availability in the United States, go to Broadband Reports. This site can provide information on ADSL service companies in your area, the rates they charge, and customer satisfaction, as well as estimating how far you are from the nearest central office. The rate for your business with AT&T for a two-year contract is going $200.00 a month per site. This will be $400.00 a month for both sites. A contract for twenty-four months at both sites will cost $9,600.00. Connect users while traveling: I suggest using VPN (Virtual Private Network) while traveling. VAN is a user-to-LAN connection used Cindy Willis Final Project COT410 Local/Campus Networking by companies that have employees who need to connect to the private network from various remote locations. An example of a company that needs a remote-access VPN would be a large firm with hundreds of sales people in the field. Remote-access VPNs provide secure, encrypted connections between a company's private network and remote users through the ADSL provider I have suggested. A VPN uses the internet to transmit data between sites. VPNs include measures for encrypting data. Also, VPNs can work for most mobile workers. All they need to do is dial into the POP of the ISP. The VPN system, then, can provide a secure connection at a lower cost, as all that is needed is the hardware on either end. (How things work.com) A VPN is a private network that uses a public network (usually the Internet) to connect remote sites or users together, for the express purpose of transmitting data securely. Instead of using a dedicated connection such as a leased line, a VPN uses "virtual" connections routed through the Internet from the sender to receiver. See Figure 1 for an example Figure: 1 Cables/Connectors/wall plate and Location of all equipment: The location for all the equipment is as Cindy Willis Final Project COT410 Local/Campus Networking follows; each department will house workstations with each consisting of one laptop. All desktop will connect to one of the workgroup switches assigned to it in the server room. Each workstation will include a phone line with RJ-11 connector. The workgroup switches then will connect to the Cisco Catalyst 296024TT-L Switch. The Cisco Catalyst 2960-24TT-L switch will then connect to each server and the integrated Service Router will be connected with 10baseT cabling using a RJ-45 connector. There will not be a need for a modem as for the Cisco 1801 integrated service router has a modem build into it as well as a firewall. The router combine the cost benefits of DSL service with the advanced routing capability required for business use of the Internet Figure1: illiterate’s cable and equipment location. Cindy Willis Final Project COT410 Local/Campus Networking Figure: 2 shows the zoomed view of the how the cables are connected to the desktops via workgroup switches. Figure: 2 Cindy Willis Final Project COT410 Local/Campus Networking Security: Once again the Cisco 1801 integrated service router advanced security includes a Inspection Firewall IP Security (IPSec) VPNs (Triple Data Encryption Standard [3DES] or Advanced Encryption Standard [AES]) Dynamic Multipoint VPN (DMVPN) and Easy VPN Intrusion Prevention System (IPS) Antivirus support through Network Admission Control (NAC) and enforcement of secure access policies. Cindy Willis Final Project COT410 Local/Campus Networking VPN can be downloaded free from the internet for laptops. All Servers include firewall protection. Also using NAT between the internal network and the internet so that outsider’s cannot view the IP addresses on their internal networks. Another security features is to , configure the servers to us IPSec to discourage attackers and installing a proxy for email (SMTP) communications through the internet desktops include Norton. Disaster Recovery Plan: The servers both contains tape drive backups in case of a disaster and data is lost. PowerEdge T605 Server RD1000, Internal SATA Drive Bay QTY 1, Removable HD Cartridge for RD1000 Drive,80GB native/160GB compressed Symantec Backup Exec v12.5 Email Server Suite Stand Alone 1500 Uninterrupted Power Supply 120V Power Edge 1900 Server RD1000, Internal SATA Drive Bay Tape Media for LTO4-120 tape drive, 800GB/1.6TB, 10 Pack Symantec Backup Exec v12.5 Multi-Server Suite Stand Alone 1500 Uninterrupted Power Supply COST ANALYSIS QTY DESCRIPTION 12 Cisco SRW2016 16port Gigabit Switch PURCHASED FROM UNIT PRICE $395.00 MONTHS TOTAL $4,740.00 Cindy Willis Final Project COT410 Local/Campus Networking 2 Cisco Catalyst 296024TTL Switch Biz Rate $676.00 $1,352 2 Cisco 1801 Integrated Service Router Cost Central $903.20 1,806.40 6 Brother’s MFC9840CDW Color Laser Multi-Function Center Brother International Corporation S699.00 $4,194.00 60 Dell Precision Workstation T5400 Work stations/Desktops W/ NIC W/ Windows XP Dell $3,422 $205,320 1 Precision Mobile M4400 Intel Core 2 duo T9400 Laptops Desktops W/ NIC Dell $1,494.00 $23,904.00 1 PowerEdge T605 (remote branch -Ohio) Dell $8,411.00 $8,411.00 3 PowerEdge 1900 Dell 10,393.00 $32,979.00 65 Cable, RJ45, Connectors and Wall, plates $300.00 ADSL Internet Access. Service per month is $ 200.00. Per site will be $400.00 AT&T 1 MDaemon Email Server Software MDaemon IT Maintenance $400/Mo. Rate @ 24 months $9,600.00 $3,390.25 3,390.25 2 years $200,000.00 SUBTOTAL $695,996.65 SALES TAX $48,024.00 TOTAL $744,020.65 Cindy Willis Final Project COT410 Local/Campus Networking Specification for Servers Cindy Willis Final Project COT410 Local/Campus Networking Cindy Willis Final Project COT410 Local/Campus Networking You displayed a good knowedge of networking. You had several graamer errors that detracted from a smooth report. You have much over-kill on the switches. You could have used two 48 port switches and 2 48 port patch panels. -10 The patch panels route the cabling to the wall connectors etc.