IT Infrastructure Design: Alexander Communications KEVIN NORTH, FRANK MACK, KYLE HARDY, ADRIAN NORRIS, CURTIS HOLTON GROUP 2 CNT 4931 CAPSTONE JOHN VAIL Overview Our Mission To present an innovative, efficient and effective Information Technology architecture design to Alexander Communications. The Design will address the new Ponte Vedra branch as well as the Main office in Atlanta. Overview Our responsibility to YOU… Present with accuracy Meet or exceed all expectations Address all areas of IT Make IT work for you Overview Why our Design? Built from the ground up Compete Design Designed one step at a time Addresses entire IT infrastructure Custom for Alexander Technologies built for site/make jobs easier Overview 1. 2. Overview Network Design 1. Topology Overview 2. Equipment 3. Addressing 4. ISPs/WAN 5. Remote Access 6. Wireless 3. Storage, Servers, Virtualization 4. Desktop 1. 5. Desktop Applications Website/Webmail 6. Communication/Collaboration w QOS 7. Security 8. 1. IT 2. Physical DR, Reliability Network Design Network Design – Topology Overview Head Quarters – Atlanta, Georgia Network Design – Topology Overview Branch Office – Ponte Vedra, Florida Network Design - Equipment Routing/Switching Cisco ASA 5550 (2) Cisco 2811 Integrated Services Router (4) Cisco 2960 switch (6) Cisco Catalyst 3560 Series Switches (4) Wireless Work Stations Mac – iMac (16) Servers Cisco Meraki MR34 WLAN AP (2) HP ProLiant DL585 G7 (16 Cores/4 sockets) (2) Storage EMC VNX5100 SAN Storage (1 Network Design - Addressing Atlanta Ponte Vedra 10.0.1.0 /27 Management/Core 10.0.1.32 /27 Management/Core 10.0.2.0 /24 Server 172.16.4.128 /25 PC 10.0.3.0 /24 VM 172.16.5.128 /25 Phone 172.16.4.0 /25 PC 172.16.6.128 /25 Exec. 172.16.5.0 /25 Phone 172.16.7.128 /25 Printing/Fax 172.16.6.0 /25 Exec. 172.16.7.0 /25 Printing/Fax Network Design - ISPs/WAN Atlanta and Ponte Vedra EarthLink Integrated Voice, TV & Data T1 lines Includes static IP addresses $240/month Backup ISP Comcast Business Deluxe 75 Mbps Extra for static IP addresses $150/month Network Design - ISPs/WAN WAN – MPLs MPLS as primary WAN between sites Most Widely adopted for site-tosite Mid-range pricing (vs. Ethernet, or T1) Any-to-any connect Comes with SLAs Network Design - ISPs/WAN WAN – MPLS FastBlue Offers Internet, VoIP, DDos mitigation/Protection and cloud services Why FastBlue MPLS? Secure/Private networking site-to-site Fully managed/monitored Visibility to network health Network stability Competitive price approx. $300-400 per/month Network Design - ISPs/WAN Backup WAN – AWS VPC VPN Connection What is AWS VPC/VPN connection? A virtual private network on the AWS cloud interacting seamlessly with LAN Site-to-Site connectivity Constant site-to-site VPN connection to transfers data between your VPC or site to site Redundant lines Network Design - ISPs/WAN Backup WAN – AWS VPC VPN Connection Simple Scalable Host backup EC-2 instance/other service Redundant Pay as you go pricing $0.05 per hour for each VPN connection total of $0.10 per hour converged Data Transfer 40 TB/ month $0.09 per/GB 100 TB/month $0.07 per/GB Network Design- Remote Access Cisco’s ASA 5550 Module L2TP/IPSec 256-bit encryption; checks data integrity and encapsulates data twice Granular control Seamless connectivity Optimized performance Consistent security Management flexibility Price: $3000(2) = $6000 Network Design – Wireless (WLAN) Cisco Meraki MR34 (WLAN cloud based service) Cost $1,300 for 5yr license. Cloud Management 24/7 support from the Vendor. Provides secure wireless access for employees and guest. Storage, Servers & Virtualization Servers Virtualize all servers Virtual vs Physical 2TB local storage Multiple processors Clustered / Failover / Redundancy Storage, Servers & Virtualization Storage Equipment Backups (Local / Offsite) SAN Management Replication Storage, Servers & Virtualization Virtualization Equipment Software Benefits Performance Cost Desktop Architecture iMacs – efficient, small, built with creativity in mind Price per base unit: $1,099 Desktop Architecture Why mac? Better Hardware Bootcamp Updates are simpler overall LITTLE need for antivirus No INCLUDED bloatware Ease of use Desktop Architecture Uptime? Virtual desktops Windows software updates may be time-consuming Compatibility concerns $50/workstation/month = $800 total Desktop Architecture Desktop Applications Microsoft Office for MAC Microsoft Word Microsoft Excel Presentations Microsoft Outlook Spreadsheets and workbooks Microsoft PowerPoint Word Processing 25GB mailbox with anti-virus and anti-spam Pricing: $150/per 5 machines/per year 3-4 subscriptions Desktop Architecture Desktop Applications GanntProject - Assist in developing and fulfilling business plans Know for simplicity Can open MS Project files Create and display, similar to MS Project Impressive reporting features Price: FREE and Supports MAC OS’s Desktop Architecture Desktop Applications Share Point – Online SAS: $5 per month/per user (60 per year/per user) Easily managed Safeguard data – hosted in geographically distributed datacenters Interact/access SharePoint anywhere Desktop Architecture Desktop Applications 7-Zip – File archiver with a high compression ratio Compresses files more efficiently than competition 30-70% better Uses AES 256 encryption Complete file manager FREE and MAC OS compatible Mikogo – Screen sharing software Free up to 10 connections MAC OS compatible Desktop Architecture Desktop Applications Skype VoIP service and instant messaging client Over a decade of providing customer satisfaction FREE and MAC OS compatible GoToMeeting HD video conferencing Collaborate in real time Video conferencing, screen sharing and audio or VoIP Group or one on one use Up to 25 attendees: $39.00 Per Month/Per organization $56/month/organizer, 100 attendees Desktop Architecture Desktop Applications Antivirus – Symantec Endpoint Protection Top level enterprise applicable antivirus Protects across physical and virtual systems Maximum performance and advanced protection 15 Licenses $812.70 per year, 20 licenses $1083.60 Desktop Architecture Desktop Applications Admin account Wireshark - Network protocol analyzer Examine your network at a microscopic level In depth analysis of packets across a network FREE and MAC OS Compatible MIB Browser - SNMP MIB Browser Complete tool for monitoring SNMP enabled devices and servers Allows you to view, configure and parse SNMP traps FREE and MAC OS Compatible Website/Webmail Webhosting – HostGator Includes all needed options for web hosting Options for unlimited disk space, bandwidth and email for your websites being hosted Free site building tools and templates 24/7/365 technical support/money back guarantee Highly regarded A+ rating from the better business bureau Customers Website/Webmail Webhosting – HostGator CPanel Easy-to-use control panel Secure – Linux based platform Manage servers and websites Manage webmail and website front/back end Pricing Business Linux Shared $179.40/$143.52 (20% discount) per year Website/Webmail Webhosting SSL Certificates - Creates an encrypted connection between your web server and your visitors' web browser allowing for private information to be transmitted Prevents eavesdropping, data tampering, or message forgery. Obtain from HostGator Free installation SSL by GeoTrust and RapidSSL Pricing 1 domain/hostname $39.95 per year 5+ hostnames 1 domain $159 per year Website/Webmail Outlook Exchange Server - Exchange Server is an email-based collaborative communications server for businesses Link users together and serve as a gateway in and out for email. After creating a domain name and an email address with a corresponding URL an exchange server is needed Why an Exchange Server? Forward all HostGator hosting addresses to main email and user accounts for Alexander communications Website/Webmail Outlook Exchange Server Hosted by Rackspace No maintenance/upkeep Unmatched Network Uptime Guarantee and SLA. Fully managed data centers Anti-Spam and Anti-Virus scans SSL encryption for all email transmissions Designed to work with Outlook Price $10 per mailbox/per month Communication/Collaboration VoIP Two main options: Differentiated Services Integrated Services Soft Phones - Cisco IP Communicator Communication/Collaboration Teleconferencing Ultimate decision – GoToMeeting and Skype Multiple ideas (Facetime, Skype) mentioned is desktop applications section Pricing $56/month/organizer, 100 attendees $39/month/organizer, 25 attendees Skype - Free Security Physical Security guards on-site. I.D Badge access for employees. 24/7 Monitoring Train employees about social engineering attacks. Security Network Security Cisco ASA 5550 module Anti-virus program on servers & workstations. User passwords will be changed every 90 days. Network equipment will be locked in a rack. Security Facility Security Security Camera’s ADT Alarm system Maintenance on-site Backup Generators Fire drills Disaster Recovery Plan Disaster Recovery Virtualization Benefits Relocation if necessary at alternate site Backups, Backups and more Backups SpiderOak off-site data backup “Zero-Knowledge Privacy Promise” Deduplication LDAP/Active Directory Unlimited data storage per user Reliability Goals 99.999% Uptime Prevent having to resort to disaster recovery plan 5.5 minutes of unscheduled downtime a year Studies show that every $1 spent on hazard prevention could save up to $4 in response and recovery costs Total redundancy Equipment, ISP, Networking Links, Data, etc. Reliability Network Room Environment Safe and Secure Room Power Protection (UPS) Networking Cabinet APC Power-Saving Back-UPS Pro 1500, 230V Black Box Products Elite Data Cabinet 24U Climate Controlled Reliability Extra networking equipment on site for testing or in case of hardware failure ScienceLogic EM7 to monitor the network Application and System usage monitoring Network performance management Events and alerts Real-time reporting on device performance and availability Asset and hardware inventory Estimated Overall Expenses Network Equipment Cisco ASA 5550 (2) - $3000 = $6000 Cisco 2811 Integrated Services Router (4) - $1600 = $6400 Cisco 2960 switch (6) -$1700 = $10200 Cisco Catalyst 3560 Series Switches (4) - $2600 = $10400 EMC VNX5100 SAN Storage (1) - $8,846 Servers/ Storage/Virtualization HP ProLiant DL585 G7 (16 Cores/4 sockets) - $6,592.00 (2) VMware ESXi Enterprise $2,875.00 (2) Support $604.00 per/year ISP/WAN ISP – Primary - $240 Backup - $150 (per month) MPLS - approx. $300-400 per/month AWS - Only need if Primary WAN goes down. (1 month approx. $432) Estimated Overall Expenses Wireless Cisco Meraki MR34 $1,300 for 5yr license Desktop Architecture Work Stations iMac - $1,099 (16) - $17584 AWS backups if needed $50/workstation/month = $800 total Desktop Applications Office for Mac - $150/per 5 machines/per year SharePoint Online - $5 per month/per user (60 per year/per user) $80 per month GoToMeeting 4 subscriptions $600 per month $39.00 Per Month/Per organization Symantec Endpoint Protection 20 licenses $1083.60 Estimated Overall Expenses Web Hosting/Web Mail HostGator SSL (HostGator) $10 per mailbox/per month (170.00 per month) Communication/Collaboration VoIP – Cisco IP Communicator 5+ hostnames 1 domain $159 per year Rackspace Exchange Server $143.52 (20% discount) per year $50 per licenses – (20) $1000 GoToMeeting – (Addressed in Applications) Disaster Recovery/Reliability Power Protection (UPS) APC Power-Saving Backups Pro 1500, 230V - (8) $300 each - $2400 Networking Cabinet SpiderOak - $60 per user/year - $1200 per year Black Box Products Elite Data Cabinet 24U (2) - $1500 each - $3000 Science Logic $ 12 per node/month -$216 per month/both sites Estimated Overall Expenses Estimated Start-up Costs including first month Monthly Estimated Expenses Approx.. $75,100 Approx..$3,250 Total Estimated First Year Expenses Approx.. $110,900 References Cisco 2811 Integrated Services Router. Retrieved from http://www.cisco.com/c/en/us/products/routers/2811-integrated-services-router-isr/index.html Cisco 2960 switch. Retrieved from http://www.cisco.com/c/en/us/products/switches/catalyst-2960-series-switches/index.html Cisco Catalyst 3560 Series Switches. Retrieved from http://www.cisco.com/c/en/us/products/switches/catalyst-3560-series-switches/index.html cPanel Web hosting. Retrieved from http://cpanel.net/ Amazon Web Services. Retrieved from http://aws.amazon.com/about-aws/ Office for MAC. Retrieved from https://support.office.com/en-US/Article/Install-Office-on-your-PC-or-Mac-with-Office-365-for-business-72977511-dfd1-4d8b-856f405cfb76839c?ui=en-US&rs=en-US&ad=US GanttProject. Retrieved from http://www.ganttproject.biz/download Share Point Online. Retrieved from http://office.microsoft.com/en-us/sharepoint/microsoft-sharepoint-online-collaboration-and-management-software-FX103789366.aspx Mikogo. Retrieved from http://mikogo.en.softonic.com/mac 7-Zip. Retrieved from http://www.7-zip.org/ GoToMeeting. Retrieved from http://www.gotomeeting.com/online/collaboration/ GoToMetting Pricing. Retrieved from http://www.gotomeeting.com/online/collaboration/meeting/pricing References Symantec Endpoint Protection. Retrieved from http://www.symantec.com/endpoint-protection SNMP MIB Browser. Retrieved from http://www.manageengine.com/products/mibbrowser-free-tool/ WireShark. Retrieved from https://www.wireshark.org/about.htm HostGator. Retrieved from http://www.hostgator.com/ HostGator Pricing. Retrieved from http://support.hostgator.com/articles/pre-sales-policies/payment-fees/hosting-price-chart#shared HostGator SSL. Retrieved from https://www.hostgator.com/ssl Outlook Exchange Server. Retrieved from http://office.microsoft.com/en-us/outlook-help/what-is-an-exchange-server-e-mail-account-HA001095504.aspx Rackspace Exchange Server. Retrieved from http://www.rackspace.com/email-hosting/hosted-exchange/?cm_mmc=other_email-hex-_-PPC_NAM-_-exchangeserver_nb-_-exchange%20server&gclid=CJCWvbXn8cACFWho7AodllEANg Fast Blue MPLS. Retrieved from http://fastblue.com/products-services/data-services/mpls-wan/ AWs VPC VPN. Retrieved from http://aws.amazon.com/vpc/ VoIP Mechanic. Retrieved from http://www.voipmechanic.com/setting-qos-voip-linksys.htm Meraki Wireless. Retrieved from https://meraki.cisco.com/products/wireless/mr34 EMC VNX5100 SAN Storage. Retrieved from https://store.emc.com/us/Product-Family/VNX-AND-VNXe-PRODUCTS/VNX5100/p/VNX-5100-STOR-001-1Q13-0021 References Promise Technology VTrak E830fS. Retrieved from http://www.cdw.com/shop/products/Promise-VTrak-E830fS-hard-drive-array/2462515.aspx SpiderOak. Retrieved from https://spideroak.com APC Power-Saving Backups Pro 1500, 230V. Retrieved from https://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=BR1500G Black Box Products Elite Data Cabinet 24U. Retrieved from http://www.blackbox.com/Store/Detail.aspx/Elite-Data-Cabinet-48-H-24U-x-30-W-x-32-D/EC24U3032KIT Science Logic. Retrieved from http://www.sciencelogic.com/ Cisco IP Communicator. Retrieved from http://www.cisco.com/c/en/us/products/collaboration-endpoints/ip-communicator/index.html Cisco ASA 5550. Retrieved from http://www.cisco.com/c/en/us/support/security/asa-5550-adaptive-security-appliance/model.html VMware ESXi Enterprise. Retrieved from www.vmware.com/products/esxi-and-esx/overview iMac. Retrieved from https://www.apple.com/imac/ Group Symbaloos: http://www.symbaloo.com/mix/homecnt4931 https://www.symbaloo.com/home/mix/13eOcLOhML http://www.symbaloo.com/mix/online48 http://www.symbaloo.com/shared/AAAAAS4P9U8AA41-4R42WA== http://www.symbaloo.com/mix/capstone2014 Any Questions???