Cybersecurity and Network Design

This assignment delves into the crucial relationship between cybersecurity and network design. It examines various research papers and articles that discuss cybersecurity threats, mitigation strategies, and best practices for designing secure networks. The content covers topics such as advanced persistent threats, smart grid security, optical networking, intrusion detection systems, and secure network access control. Students are expected to analyze these concepts and understand their implications for building robust and resilient network infrastructures.

Running head: ADVANCED NETWORK DESIGN
Advanced Network Design
Name of the Student
Name of the University
Author’s Note

1
ADVANCED NETWORK DESIGN
Table of Contents
1. Introduction................................................................................................................................2
2. Project Scope..............................................................................................................................2
3. Project Hardware requirements.................................................................................................3
4. Network Diagram........................................................................................................................6
5. Network Design Justification......................................................................................................6
6. Configurations commands of the network devices.....................................................................7
7. Network Device Configurations................................................................................................17
7.1 Demonstration on physical device......................................................................................17
9. Conclusion................................................................................................................................18
10. Bibliography............................................................................................................................19

2
ADVANCED NETWORK DESIGN
1. Introduction
The report is prepared for the development of a local area network and configure the hardware
device installed in the network. The scope of the expansion of the current organizational network is
analyzed for proposing the new network solution and accommodation of the growth of the organization.
The floor plan of the organization building is evaluated for the development of the network design and
number of data points required for each of the department are analyzed for the development of the
network solution. The hardware that are essential for the development of the network solution are
listed and they are used for the preparation of the network design. Cisco packet tracer is used as a
simulator software for the configuration of the network and the commands are attached with the
report. The prepared network is tested multiple times for the identification of the errors in the network
and increase the fault tolerance in the network. Each of the department in the network are connected
using different VLAN and reducing the congestion in the network.
2. Project Scope
The project scope are defined for the preparation of the of the proposed network solution for
the ecommerce business organization.
 To evaluate the infrastructure of the organization and apply the network topology best
suited for the organization.
 To secure the network such that no unauthorized users can access the network device
installed in the core layer of the network.
 To use different VLAN for the data and the voice for eliminating the risk of congestion of
the network.
 To apply authorization on each hardware devices to increase the security of the
network.
 To install the wireless access point in the location for covering the major part of the
working space.
 To install firewall in the network for blocking the unknown request and users to use the
sensitive resources of the network.
 To reserve extra IP address for accommodating new devices in future without
modification of the current network configurations.

3
ADVANCED NETWORK DESIGN
3. Project Hardware requirements
The following table is created for listing the hardware that are required for transforming the
current network infrastructure and meet the requirement of the ecommerce business organization.
Device Name of the
Device (With
Manufacturer
Name)
Series Model Ports Numbers /
Quantity
Router Cisco 2811 Router 2800 Series
ISR
Cisco 2800
Series
Integrated
Services
Routers
1 x Auxiliary
port
1 x Console
Port
2 x USB Port
3
Layer 2
Switch
Cisco Catalyst WS-
C2960S-24TS-S
24-port
10/100/1000
switch
WS-C2960S-
24TS layer 2
switch
WS-C2960S-
24TS-S
24 1
Layer 3
Switches
Cisco 3560G-24TS WS-C3560G-
24TS-S layer 3
switch
WS-
C3560G-
24TS-S
24 2
IP Phone Cisco 7960G IP
Telephone CP-
7960G
CP-7960G CP-7960G 1 x Network
port
1 x Access port
1 x Handset
port
1 x Headset
port
9

4
ADVANCED NETWORK DESIGN
The following cable types are used for interconnecting the different hardware devices installed in the
network and are listed below with their specifications.
Local area connections
For the interconnection between the routers
 Name of Ethernet - 1000base T
 Maximum Speed - 1Gbps
 Type of cable - UTP
 Name of Cable - CAT5e, CAT 6
 Distance - 100 m
For interconnecting the nodes with the switch
 Name of Ethernet - 100 Base -TX
 Maximum Speed - 100 Mbps
 Type of cable - UTP
 Name of Cable - CAT5, CAT5e, CAT6
 Distance - 100 m
For connecting the router with the switches
 Name of Ethernet - 10G Base - T
 Maximum Speed - 10 Gbps
 Type of cable - UTP
 Name of Cable - CAT5e, CAT 6
 Distance - 100 m
Backbone of the network
For interconnecting the Servers and the switch
Name of Ethernet - 1000base – SX
Maximum Speed - 1Gbps
Type of cable - Fiber
Name of Cable - Multimode and single mode fiber

5
ADVANCED NETWORK DESIGN
Distance - 550 m
For interconnecting the ISP and the router
Name of Ethernet - 1000 Base - LX
Maximum Speed - 1Gbps
Type of cable - Fiber
Name of Cable - Multimode and single mode fiber
Distance - 550 m for multimode fiber and 2000 m for single mode fiber
For interconnecting the different departments
Name of Ethernet - 1000 Base - ZX
Maximum Speed - 1Gbps
Type of cable - Fiber
Name of Cable - Multimode and single mode fiber
Distance - 70000 meter or 70 km
Two servers are installed in the network i.e. the database server and the Web server and the
configuration specification of the server are tabulated below:
Name of the
Server
Processor RAM Operating
System
Storage
capacity
RAID Levels
Database
Server
Intel Core i5
7400 (LGA1151)
7th Generation
Processor
8 GB RAM Windows Server
2012 R2
3 TB Raid 5 for
SQL Data
files
Raid 1 for
SQL LOG
files
WEB server Intel 3.3GHz LGA
1155 Core I3
2120 Processor
8 GB Windows server
2012 R2 64 bits
2 TB GB
HDD
Raid 5 for
SQL Data
files

6
ADVANCED NETWORK DESIGN
Raid 1 for
SQL LOG
files
Local Nodes Intel Core i3-
7100H Processor
2 GB / 4 GB Windows 10
Enterprise /
Windows 7
professional
edition
500 GB /
1TB
NULL
4. Network Diagram
Figure 1: Network diagram for the ecommerce organization
(Source: Created by author)
5. Network Design Justification
The proposed network design is created following the data points required to be installed for
each of the location. An access point is installed at each of the floor of the network for covering all the
departments and increase the efficiency of the network. A layer three switch is connected with the
ground floor router for making the management of the network simplified and reducing the risk of
network downtime. A layer 2 switch is installed for the first floor network and interconnecting the nodes

7
ADVANCED NETWORK DESIGN
of the first floor. The second floor router is also connected with a layer three switch for easy
management of the network. The data packets and the voice packets are sent in the network using
different VLAN for reducing the risk of congestion and delay in communication. The routers installed in
the network are configured with DHCP protocol for allocation of the IP address to the nodes connected
in the network. Four server are installed in the network i.e. database server, file server, webserver and
email sever. For the server the windows server 2012 R2 is used and the active directory are configured
according to the business requirement if the organization. The access point installed in the network are
secured with WPA/ PSK 2 for securing the network from illegal access. The firewall installed in the
network are configured such that the normal users does not have access to the file and the database
server and the company information are kept secured.
Frame relay, TDM and HDLC protocol are used for the configuration of the network. The frame
relay uses the packet switching for the transmission of the data packets in the network and the high
level data link control is used for the establishment of point to multipoint connection between the
source and the destination nodes in the network. The time division multiplexing is used for the
avoidance of the deadlock situation in the network and increase its efficiency.
Asynchronous transfer mode and CSMA/CD is used as a LAN protocol for the development of
the network solution. The SDP and RTP (Session description and real time transfer protocol) is used for
the configuration of the VOIP devices in the network.
6. Configurations commands of the network devices
The following are the configuration command used for the configuration of the routers and the
switches used for the development of the network solution:
ground_floor_router Configuration
Ground_floor_router>en
Ground_floor_router#config t
Ground_floor_router(config)#int f0/0
Ground_floor_router(config-if)#no shut
Ground_floor_router(config-if)#exit
Ground_floor_router(config)#int f0/0.10

8
ADVANCED NETWORK DESIGN
Ground_floor_router(config-subif)#encapsulation dot1Q 10
Ground_floor_router(config-subif)#ip add 172.16.1.1 255.255.255.0
Ground_floor_router(config-subif)#exit
Ground_floor_router(config)#int f0/0.20
Ground_floor_router(config-subif)#encapsulation dot1Q 20
Ground_floor_router(config-subif)#ip add 172.16.2.1 255.255.255.0
Ground_floor_router(config-subif)#exit
Ground_floor_router(config)#ip dhcp excluded-address 172.16.1.1 172.16.1.10
Ground_floor_router(config)#ip dhcp excluded-address 172.16.2.1 172.16.2.10
Ground_floor_router(config)#ip dhcp pool voice
Ground_floor_router(dhcp-config)#network 172.16.1.0 255.255.255.0
Ground_floor_router(dhcp-config)#default-router 172.16.1.1
Ground_floor_router(dhcp-config)#option 150 ip 172.16.1.1
Ground_floor_router(dhcp-config)#ip dhcp pool data
Ground_floor_router(dhcp-config)#network 172.16.2.0 255.255.255.0
Ground_floor_router(dhcp-config)#default-router 172.16.2.1
Ground_floor_router(dhcp-config)#option 150 ip 172.16.2.1
Ground_floor_router(dhcp-config)#exit
Ground_floor_router(config)#telephony-service
Ground_floor_router(config-telephony)#max-dn 10
Ground_floor_router(config-telephony)#max-ephone 10
Ground_floor_router(config-telephony)#ip source-address 172.16.1.1 port 2000
Ground_floor_router(config-telephony)#exit

9
ADVANCED NETWORK DESIGN
Ground_floor_router(config)#ephone-dn 1
Ground_floor_router(config-ephone-dn)#number 1001
Ground_floor_router(config-ephone-dn)#exit
Ground_floor_router(config)#ephone-dn 2
Ground_floor_router(config-ephone-dn)#number 1002
Ground_floor_router(config-ephone-dn)#exit
Ground_floor_router(config)#ephone-dn 3
Ground_floor_router(config-ephone-dn)#number 1003
Ground_floor_router(config-ephone-dn)#exit
Ground_floor_router(config)#ephone-dn 4
Ground_floor_router(config-ephone-dn)#number 1004
Ground_floor_router(config-ephone-dn)#exit
Ground_floor_router(config)#ephone 1
Ground_floor_router(config-ephone)#button 1:1
Ground_floor_router(config-ephone)#exit
Ground_floor_router(config)#ephone 2
Ground_floor_router(config-ephone)#button 1:2
Ground_floor_router(config-ephone)#exit
Ground_floor_router(config)#ephone 3
Ground_floor_router(config-ephone)#button 1:3
Ground_floor_router(config-ephone)#exit
Ground_floor_router(config)#ephone 4
Ground_floor_router(config-ephone)#button 1:4

10
ADVANCED NETWORK DESIGN
Ground_floor_router(config-ephone)#exit
Ground_floor_router(config)#
Ground_floor_router(config)#int f0/0
Ground_floor_router(config-if)#no shut
Ground_floor_router(config-if)#int s0/2/0
Ground_floor_router(config-if)#ip add 99.99.99.97 255.255.255.0
Ground_floor_router(config-if)#no shut
Ground_floor_router(config-if)#
Ground_floor_router(config)#int s0/2/0
Ground_floor_router(config-if)#ip add 200.1.1.2 255.255.255.0
Ground_floor_router(config-if)#no shut
Ground_floor_router(config-if)#exit
Ground_floor_router(config)#int s0/2/0
Ground_floor_router(config-if)#ip add 200.1.1.2 255.255.255.0
Ground_floor_router(config-if)#no shut
Ground_floor_router(config)#int s0/2/1
Ground_floor_router(config-if)#ip add 99.99.99.99 255.255.255.0
Ground_floor_router(config-if)#clock rate 64000
Ground_floor_router(config-if)#no shut
Level_1_router
Level_1_router>en
Level_1_router#config t
Level_1_router(config)#int f0/0

11
ADVANCED NETWORK DESIGN
Level_1_router(config-if)#no shut
Level_1_router(config-if)#
Level_1_router(config-if)#exit
Level_1_router(config)#int f0/0.30
Level_1_router(config-subif)#
Level_1_router(config-subif)#encapsulation dot1Q 30
Level_1_router(config-subif)#ip add 192.168.1.1 255.255.255.0
Level_1_router(config-subif)#exit
Level_1_router(config)#int f0/0.40
Level_1_router(config-subif)#encapsulation dot1Q 40
Level_1_router(config-subif)#ip add 192.168.2.1 255.255.255.0
Level_1_router(config-subif)#exit
Level_1_router(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.10
Level_1_router(config)#ip dhcp excluded-address 192.168.2.1 192.168.2.10
Level_1_router(config)#ip dhcp pool voice
Level_1_router(dhcp-config)#network 192.168.1.0 255.255.255.0
Level_1_router(dhcp-config)#default-router 192.168.1.1
Level_1_router(dhcp-config)#option 150 ip 192.168.1.1
Level_1_router(dhcp-config)#exit
Level_1_router(config)#ip dhcp pool data
Level_1_router(dhcp-config)#network 192.168.2.1 255.255.255.0
Level_1_router(dhcp-config)#default-router 192.168.2.1
Level_1_router(dhcp-config)#option 150 ip 192.168.2.1

12
ADVANCED NETWORK DESIGN
Level_1_router(dhcp-config)#exit
Level_1_router(config)#telephony-service
Level_1_router(config-telephony)#max-dn 10
Level_1_router(config-telephony)#max-ephone 10
Level_1_router(config-telephony)#ip source-address 192.168.1.1 port 2000
Level_1_router(config-telephony)#exit
Level_1_router(config)#ephone-dn 1
Level_1_router(config-ephone-dn)#number 2001
Level_1_router(config-ephone-dn)#exit
Level_1_router(config)#ephone-dn 2
Level_1_router(config-ephone-dn)#number 2002
Level_1_router(config-ephone-dn)#exit
Level_1_router(config)#ephone-dn 3
Level_1_router(config-ephone-dn)#number 2003
Level_1_router(config-ephone-dn)#exit
Level_1_router(config)#ephone-dn 4
Level_1_router(config-ephone-dn)#number 2004
Level_1_router(config-ephone-dn)#exit
Level_1_router(config)#
Level_1_router(config)#ephone 1
Level_1_router(config-ephone)#button 1:1
Level_1_router(config-ephone)#ephone 2
Level_1_router(config-ephone)#button 1:2

13
ADVANCED NETWORK DESIGN
Level_1_router(config-ephone)#exit
Level_1_router(config)#ephone 3
Level_1_router(config-ephone)#button 1:3
Level_1_router(config-ephone)#exit
Level_1_router(config)#ephone 4
Level_1_router(config-ephone)#button 1:4
Level_1_router(config-ephone)#exit
Level_1_router(config)#
Level_2_router
Level_2_router>en
Level_2_router#config t
Level_2_router(config)#int f0/0
Level_2_router(config-if)#no shut
Level_2_router(config-if)#exit
Level_2_router(config)#int f0/0.50
Level_2_router(config-subif)#encapsulation dot1Q 50
Level_2_router(config-subif)#ip add 10.1.1.1 255.255.255.0
Level_2_router(config-subif)#exit
Level_2_router(config)#int f0/0.60
Level_2_router(config-subif)#encapsulation dot1Q 60
Level_2_router(config-subif)#ip add 10.1.2.1 255.255.255.0
Level_2_router(config-subif)#exit
Level_2_router(config)#ip dhcp excluded-address 10.10.1.1 10.1.1.10

14
ADVANCED NETWORK DESIGN
Level_2_router(config)#ip dhcp excluded-address 10.10.2.1 10.1.2.10
Level_2_router(config)#ip dhcp pool voice
Level_2_router(dhcp-config)#
Level_2_router(dhcp-config)#network 10.1.1.0 255.255.255.0
Level_2_router(dhcp-config)#default-level_2_router 10.1.1.1
Level_2_router(dhcp-config)#option 150 ip 10.1.1.1
Level_2_router(dhcp-config)#ip dhcp pool data
Level_2_router(dhcp-config)#network 10.1.2.0 255.255.255.0
Level_2_router(dhcp-config)#default-router 10.1.2.1
Level_2_router(dhcp-config)#option 150 ip 10.1.2.1
Level_2_router(dhcp-config)#exit
Level_2_router(config)#
Level_2_router(config)#telephony-service
Level_2_router(config-telephony)#max-dn 10
Level_2_router(config-telephony)#max-ephone 10
Level_2_router(config-telephony)#ip source-address 10.1.1.1 port 2000
Level_2_router(config-telephony)#exit
Level_2_router(config)#ephone-dn 1
Level_2_router(config-ephone-dn)#number 3001
Level_2_router(config-ephone-dn)#exit
Level_2_router(config)#ephone-dn 2
Level_2_router(config-ephone-dn)#number 3002
Level_2_router(config-ephone-dn)#exit

15
ADVANCED NETWORK DESIGN
Level_2_router(config)#ephone-dn 3
Level_2_router(config-ephone-dn)#number 3003
Level_2_router(config-ephone-dn)#exit
Level_2_router(config)#ephone-dn 4
Level_2_router(config-ephone-dn)#number 3004
Level_2_router(config-ephone-dn)#exit
Level_2_router(config)#
Level_2_router(config)#ephone 1
Level_2_router(config-ephone)#button 1:1
Level_2_router(config-ephone)#exit
Level_2_router(config)#ephone 2
Level_2_router(config-ephone)#button 1:2
Level_2_router(config-ephone)#exit
Level_2_router(config)#ephone 3
Level_2_router(config-ephone)#button 1:3
Level_2_router(config-ephone)#exit
Level_2_router(config)#ephone 4
Level_2_router(config-ephone)#button 1:4
Level_2_router(config-ephone)#
Level_2_router(config-ephone)#exit
Level_2_router(config)#
Level_2_router(config)#int s0/2/1
Level_2_router(config-if)#ip add 200.1.1.1 255.255.255.0

16
ADVANCED NETWORK DESIGN
Level_2_router(config-if)#clock rate 64000
Level_2_router(config-if)#no shut
Level_2_router(config)#router eigrp 1
Level_2_router(config-router)#network 192.168.1.0
Level_2_router(config-router)#network 192.168.2.0
Level_2_router(config-router)#network 200.1.1.0
Level_2_router(config-router)#network 99.99.99.99
Level_2_router(config-router)#network 10.1.1.0
Level_2_router(config-router)#network 10.1.2.0
Level_2_router(config-router)#exit
7. Network Device Configurations
7.1 Demonstration on physical device
Figure 1: Communication between the different departments using VOIP

17
ADVANCED NETWORK DESIGN
Figure 2: Successful DHCP request for the PC connected in the network
Figure 3: Configuration of the Web server

18
ADVANCED NETWORK DESIGN
9. Conclusion
The approval of the proposed network solution is important for the success of the project and
thus the report is prepared for clearly defining the structure of the network. The report would help the
stakeholders to identify the security measures, hardware and the protocol used for the configuration of
the network. The proposed network design is prepared after aligning it with the requirement of the
current infrastructure of the ecommerce business organization. The router and the switch installed in
the network are located are configured with proper protocol and commands for communicating with
the nodes connected in the network. An appropriate cabling plan is used for interconnecting the
departments and reduce the congestion in the network. The network is designed for supporting VPN
connection and manage the network resources from remote sites. The path to reach the network
resources are kept redundant such that in case of link failure the redundant link can be used for
communication.

19
ADVANCED NETWORK DESIGN
10. Bibliography
[1]. H. Goodall, Website Review. Neonatal Network, vol. 33, no. 1, p. 361, 2014.
[2]. S.A. Stoven, and J. Murray, Website Review. Gastroenterology, vol. 144, no. 1, p.246-247, 2013
[3]. R. Brewer, "Advanced persistent threats: minimising the damage", Network Security, vol. 2014,
no. 4, pp. 5-9, 2014.
[4]. "IEEE/ACM Transactions on Networking society information", IEEE/ACM Transactions on
Networking, vol. 24, no. 5, pp. C3-C3, 2016.
[5]. E. Knapp and R. Samani, Applied cyber security and the smart grid. Waltman, MA: Syngress,
2013.
[6]. D. Langenhan, VMware View Security Essentials. Packt Publishing, 2013.
[7]. Nawrat, K. Simek and A. Ś wierniak, Advanced technologies for intelligent systems of national
border security. Berlin: Springer, 2013.
[8]. "Optical Switching and Networking", Optical Switching and Networking, vol. 10, no. 4, pp. 463-
464, 2013.
[9]. J. SIMMONS, OPTICAL NETWORK DESIGN AND PLANNING. [Place of publication not identified]:
SPRINGER, 2016.
[10]. S. Subramaniam, M. Brandt-Pearce, P. Demeester and C. Vijaya Saradhi, Cross-Layer
Design in Optical Networks. Boston, MA: Springer US, 2013.
[11]. "Introduction to Information Security", Network Security, vol. 2013, no. 12, p. 4, 2013.
[12]. "The Practice of Network Security Monitoring", Network Security, vol. 2014, no. 10, p. 4,
2014.
[13]. J. Wang, "The Design of Improved Elman Network Intrusion Detection Algorithm in
Digital Campus Network", Advanced Materials Research, vol. 1049-1050, pp. 2096-2099, 2014.
[14]. S. Kermanshahi, Y. Shafahi and M. Bagherian, "Application of a new rapid transit
network design model to bus rapid transit network design: case study Isfahan metropolitan
area", Transport, vol. 30, no. 1, pp. 93-102, 2013.

20
ADVANCED NETWORK DESIGN
[15]. E. Yadegari, M. Zandieh and H. Najmi, "A hybrid spanning tree-based genetic/simulated
annealing algorithm for a closed-loop logistics network design problem", International Journal of
Applied Decision Sciences, vol. 8, no. 4, p. 400, 2015.
[16]. F. Liu and W. Qu, "Design of Campus Network Database Access Based on
Encryption", Applied Mechanics and Materials, vol. 608-609, pp. 331-335, 2014.
[17]. A. Hosapujari and A. Verma, "Development of a Hub and Spoke Model for Bus Transit
Route Network Design", Procedia - Social and Behavioral Sciences, vol. 104, pp. 835-844, 2013.
[18]. "The Comprehensive Evaluation Research of Campus Network Security Based on the
Analytic Hierarchy Process (AHP)", INTERNATIONAL JOURNAL ON Advances in Information
Sciences and Service Sciences, vol. 5, no. 7, pp. 809-816, 2013.