MN621 Advanced Network Design: Network Design and Configuration

This report provides a comprehensive network design and configuration solution for an Australian firm with multiple departments, focusing on secure and efficient network connectivity. The design incorporates restrictions between network segments, ensuring that only authorized departments (Middle Management, Senior Management, and HRM) can access the Finance department, while others (Front Office, Trainee, and Research) are restricted. The report details the IP addressing scheme using CIDR, access restriction testing and validation using static routing, and includes a budget and timeline for implementation. The design also ensures that all departments have access to print and file servers. The document concludes with observations on the importance of effective network design for organizational efficiency and security.

Running head: NETWORK DESIGN AND CONFIGURATION
Network Design and Configuration
Name of the Student
Name of the University
Author Note

1NETWORK DESIGN AND CONFIGURATION
Summary
Network designing and implementation plays key role in determining the efficiency,
effectiveness and security of networks of various organizations. The report suggests a
network design and configuration to effectively connect the devices as well as apply
restrictions between network segments. First the report summarizes the requirements and
presents the network design and explains it. Then the IP addressing scheme is detailed and
discussed. After this the access restrictions are tested and validated followed by touching on
the protocol behind configuring the routers. Then after presenting the timeline of
implementation and budgeting the report ends with observations in the concluding notes.

2NETWORK DESIGN AND CONFIGURATION
Table of Contents
Introduction................................................................................................................................3
Discussion..................................................................................................................................3
Requirements Summary.........................................................................................................3
Network Design.....................................................................................................................3
IP Addressing.........................................................................................................................4
Access Restrictions Tested.....................................................................................................6
Access Restriction Method – Static Routing.........................................................................9
Budget and Timeline............................................................................................................11
Conclusion................................................................................................................................11
References................................................................................................................................12

3NETWORK DESIGN AND CONFIGURATION
Introduction
It is evident how important a role network designing and implementation can play today in
determining the efficiency, effectiveness and security of networks of various organizations.
The report suggests a network design and configuration to effectively connect the devices as
well as apply restrictions between network segments. The report begins by summarizing the
network requirements and presents the network design and explains it. Then the IP addressing
scheme is detailed and discussed. After this the access restrictions are tested and validated
followed by touching on the protocol behind configuring the routers. Then after presenting
the timeline of implementation and budgeting the report ends with observations in the
concluding notes.
Discussion
Requirements Summary
The Australian firm has the following departments – Front office, Trainee, Research, Middle
Management, Senior Management, HRM and Finance.
Users of the departments, Front office, Trainee and Research should not be able to access the
Finance Department.
Users of the departments, Middle management, Senior management and the Human Resource
Management should always be able to access the Finance department.
The print and file servers of the network must be accessible to all users of all departments.

4NETWORK DESIGN AND CONFIGURATION
Network Design
Figure 1: Network Design of the firm
The main router of the company Router 3 obtains the internet from the ISPs (Internet
Service Provider). This network is then routed to the rest of the network. The devices in the
network include workstations of all the seven departments along with the mobile devices and
laptops connected via the wireless access points of each department. Other than that, there are
also the print server and the file server for everyone to access. The access to the finance
department is only available to three of the other six departments that are middle
management, senior management and human resource management.
IP Addressing
Subnet
Name
Need
ed
Size
Allocat
ed Size
Address
Mas
k
Dec Mask
Assignabl
e Range
Broadcast

5NETWORK DESIGN AND CONFIGURATION
Front
Office
10 14
192.168.4
2.0
/28
255.255.255.
240
192.168.42
.1 -
192.168.42
.14
192.168.42
. 15
Trainee 20 30
192.168.4
1.0
/27
255.255.255.
224
192.168.41
.1 -
192.168.41
.30
192.168.41
.32
Research 30 30
192.168.4
3.0
/27
255.255.255.
224
192.168.43
.1 -
192.168.43
.30
192.168.43
.32
Middle
Managem
ent
15 30
192.168.3
1.0
/27
255.255.255.
224
192.168.31
.1 -
192.168.31
.30
192.168.31
.31
Senior
Managem
ent
10 14
192.168.3
2.0
/28
255.255.255.
240
192.168.32
.1 -
192.168.32
.14
192.168.32
.15
Human
Resource
Managem
ent
20 30
192.168.3
3.0
/27
255.255.255.
224
192.168.33
.1 -
192.168.33
.30
192.168.33
.32
Finance 30 30 192.168.5 /27 255.255.255. 192.168.51 192.168.51

6NETWORK DESIGN AND CONFIGURATION
1.0 224
.1 -
192.168.51
.30
.32
Print
Server
1 2 192.168.1
.0
/30 255.255.255.
252
192.168.1.
1 -
192.168.1.
2
192.168.1.
3
File
Server
1 2 192.168.2
.0
/30 255.255.255.
252
192.168.2.
1 -
192.168.2.
2
192.168.2.
3
Router0 2 2 192.168.3
.0
/30 255.255.255.
252
192.168.3.
1 -
192.168.3.
2
192.168.3.
3
Router2 2 2 192.168.4
.0
/30 255.255.255.
252
192.168.4.
1 -
192.168.4.
2
192.168.4.
3
Router1 2 2 192.168.5
.0
/30 255.255.255.
252
192.168.5.
1 -
192.168.5.
2
192.168.5.
3

7NETWORK DESIGN AND CONFIGURATION
The IP addressing scheme used in allocating the networks is the CIDR which stands
for Classless Interdomain Routing. Here the CIDR value is changed according to the
requirement of IP address space for a given network. The addressing scheme is preferred
against classful IP addressing as CIDR offers smaller changes in availability of address space
with every transition. In total the company requires an IP address space of 188 and hence all
the networks are chosen to have class C IP addresses. From the above address table, it can be
noted that the networks for the front office, trainee, research, middle management, senior
management, human resource management and finance are 192.168.42.0, 192.168.41.0,
192.168.43.0, 192.168.31.0, 192.168.32.0, 192.168.33.0 and 192.168.51.0 respectively with
subnet masks 255.255.255.240, 255.255.255.224, 255.255.255.224, 255.255.255.224
255.255.255.240, 255.255.255.224, 255.255.255.224 respectively with the corresponding
CIDR values /28, /27, /27, /27, /28, /27 and /27. The networks 192.168.3.0, 192.168.4.0 and
192.168.5.0 enable interfaces for connectivity between the four routers of the company while
the print server and file server use the networks 192.168.1.0 and 192.168.2.0 respectively.
Access Restrictions Tested
Figure 2: Access of Finance from Management and HR Departments
The devices PC1, PC2 and PC3 represent the workstations of the departments –
middle management, senior management and human resource management while PC4
represents the finance department. From the above table it can be found that the devices can
successfully send and receive ICMP packets or ping messages among each other thus
meeting the network requirements.

8NETWORK DESIGN AND CONFIGURATION
Figure 3: Access of Finance from Trainees, Research and Front Desk
The devices PC5, PC6 and PC7 represent the workstations of the departments – front
office, trainee and research while PC4 represents the finance department. The above table
shows that the devices cannot receive ICMP packets or ping messages to and from the
finance department thereby meeting the network requirements.
Figure 4: Access of Print and File server from different departments
Figure 5: Access of Print and File server from different departments
Figure 6: Access of Print and File server from different departments
Figure 7: Access of Print and File server from different departments

9NETWORK DESIGN AND CONFIGURATION
Figure 8: Access of Print and File server from different departments
The above table shows that all the workstations of all departments are able to send
ping messages to the print and file servers and hence meets the network requirements.
Access Restriction Method – Static Routing
Figure 6: Static Routing in Router3

10NETWORK DESIGN AND CONFIGURATION
The above screenshot shows the static routing configuration that have been performed on the
Router3. The routes are configured such that it can connect with all the different routes of the
network.
Figure 7: Static Routing in Router0
The above screenshot shows the static routing configuration that have been performed on the
Router0. The routes are configured such that it can connect with all the different routes of the
network. The internet access is also routed to other routers through this router.

11NETWORK DESIGN AND CONFIGURATION
Figure 8: Static Routing in Router2
The above screenshot shows the static routing configuration that have been performed on the
Router2. The routes are configured such that only the routes for the management departments
and that of the core router are accessible.