Network Design Configuration and Security

The report analyses the network requirements of Talon Textile Fasteners (TTF) and proposes the upgraded network design to meet the various demands of their business expansion. First the report provides a summary of requirements and presenting the device needs in a tabular format. Then this report jumps to the network proposal section and suggests the design with the help of a design diagram while also explaining the network configuration and addressing. Thereafter the various components of TTF network’s active directory get discussed according to the user groups, the Sites and the Organizational Units with careful attention given towards role of users as per their respective domains and organizational units. Then this report describes the server roles and their layouts along with the necessary project related documents as in user sign off, server task lists and the server test plan. Following that, the report provides the plans for maintenance and afterwards lists down the specifications for the routers and servers installed. Then, after talking about the security policies and measures of the network, the report ends with observations in the conclusions section.

Running head: NETWORK DESIGN CONFIGURATION AND SECURITY
Network Design Configuration and Security
Name of the Student
Name of the University
Author Note

1NETWORK DESIGN CONFIGURATION AND SECURITY
Summary
The board members of Talon Textile Fasteners (TTF) have realised that in order to continue
progressing the company needs a major upgrade of their network infrastructure. The report
analyses the network requirements of TTF and proposes the upgraded network design to meet
the various demands of their business expansion. First the report provides a summary of
requirements and presenting the device needs in a tabular format. Then this report jumps to
the network proposal section and suggests the design with the help of a design diagram while
also explaining the network configuration and addressing. Thereafter the various components
of TTF network’s active directory get discussed according to the user groups, the Sites and
the Organizational Units with careful attention given towards role of users as per their
respective domains and organizational units. Then this report describes the server roles and
their layouts along with the necessary project related documents as in user sign off, server
task lists and the server test plan. Following that, the report provides the plans for
maintenance and afterwards lists down the specifications for the routers and servers installed.
Then, after talking about the security policies and measures of the network, the report ends
with observations in the conclusions section.

2NETWORK DESIGN CONFIGURATION AND SECURITY
Table of Contents
Introduction................................................................................................................................4
Requirements Summary.............................................................................................................4
Proposed Design of the Network...............................................................................................5
Network Addressing Details..................................................................................................6
Virtual Computing Environment for TTF..................................................................................6
Virtual machines an Operating System..................................................................................6
Configuration.........................................................................................................................7
Security..................................................................................................................................7
Active Directory Configuration.................................................................................................7
AD Site...................................................................................................................................7
AD Organizational Unit.........................................................................................................7
AD Grouping..........................................................................................................................8
Data Entry Officer (Domain User).........................................................................................8
Manufacturing Supervisor (Global Administrator)................................................................8
Sales Manager (Domain User)...............................................................................................8
Operations Manager (Domain User)......................................................................................9
CEO, CFO, CIO (Global User)..............................................................................................9
IT Administrator (Global Administrator)...............................................................................9
Server Specifications..................................................................................................................9
Count and Placement..............................................................................................................9
Server Roles...........................................................................................................................9

3NETWORK DESIGN CONFIGURATION AND SECURITY
Approval Sign-off Document...............................................................................................10
Server Task List...................................................................................................................10
Server Test Plan...................................................................................................................11
Server maintenance plan......................................................................................................11
Router Specifications...............................................................................................................12
Security plan and policy...........................................................................................................12
Perimeter Design..................................................................................................................12
Remote Access.....................................................................................................................13
Site to Site Links..................................................................................................................13
Defence in Depth..................................................................................................................13
Security Auditing and Monitoring.......................................................................................14
Threat Identification.............................................................................................................14
Risk Analysis.......................................................................................................................14
Response Procedure.............................................................................................................15
Conclusion................................................................................................................................15
Bibliography.............................................................................................................................16

4NETWORK DESIGN CONFIGURATION AND SECURITY
Introduction
To address the issues that Talon Textile Fasteners (TTF) may face from their aging
network, the board members wishes to significantly upgrade their network infrastructure. The
following report analyses the network requirements of TTF and proposes the upgraded
network design to meet the various demands of their business expansion. This report begins
by providing a summary of requirements and presenting the device needs in a tabular format.
Then this report jumps to the network proposal section and suggests the design with the help
of a design diagram. Thereafter the various components of TTF network’s active directory
get discussed according to the user groups, the Sites and the Organizational Units. Then this
report describes the server roles and their layouts along with the necessary project related
documents as in user sign off, server task lists and the server test plan. Following that, the
report provides the plans for maintenance and afterwards lists down the specifications for the
routers and servers installed. Then, after talking about the security policies and measures of
the network, the report ends with observations in concluding notes.
Requirements Summary
Site Server Count Workstation
Count
Number of
Connections
Floor Count
Head office 3 37 40 3
Mt. Burr 2 23 25 2
Pt. Pirie 0 1 1 1
Pt. Adelaide 1 5 6 1
H-Adelaide 2
Adelaide-Burr 2

5NETWORK DESIGN CONFIGURATION AND SECURITY
Burr-Pirie 2
Pirie-H 2
Proposed Design of the Network
Figure 1: Network Design Diagram
The above design diagram shows how the internet services are acquired by the
router of the head office from the ISP or Internet Service Provider. The network is then
secured by a firewall device which also connects the Web Server and Mail Server through
separate DMZ interfaces thus forming the perimeter network. The network is then further
secured by the ISA Server 2000 security solution installed on the SBS box. This SBS box
then connects the router. All these components are present in the head office and fibre links
are used for acquiring the internet service. The rest of the sites of the Talon Textile Fasteners
or TTF network get their connectivity with the intranet from the router at the head office. The
IP network routes to these different sites are configured through RIP routing. The head office
of TTF is located at Adelaide near the second branch – Pt. Adelaide. Activities related to

6NETWORK DESIGN CONFIGURATION AND SECURITY
distribution, warehousing, manufacturing and operations are performed at the head office and
when there are excess tasks, they get performed at Pt. Adelaide which comprises of ‘Lines for
All Purposes.’
Network Addressing Details
The networks used for the DMZ interfaces are 172.16.1.0 and 172.16.2.0 while for the routers
four different sites are 192.168.1.0, 192.168.2.0, 192.168.3.0 and 192.168.4.0 respectively.
The devices of the different sites are assigned IP addresses from the networks 192.168.10.0,
192.168.20.0, 192.168.30.0, 192.168.40.0 for the respective networks.
Virtual Computing Environment for TTF
Virtual machines an Operating System
Virtual computing environments allows an organization to utilize the resources
installed in one place from several different locations with the use of virtual machines. These
virtual machines can be third party software applications like virtual box, VMware or even
Microsoft’s own solution called Hyper-V. In TTF network, these applications are installed on
the individual devices of all sites. It allows administrative tasks be performed over the
network from sites where no servers are present like Pt. Pyrie. This can be done by setting up
a virtual machine session using one of the above mentioned applications and on this session
installing server grade operating systems like small business server, windows server 2012.
Thus the system then fulfils the role of another server and helps TTF updating their databases
and changing user privileges when needed. The privileges of users and domains are
configured through active directory which is only available in windows server 2012, since
virtual sessions can be suspended and new sessions with different operating system can be
created, no additional systems are required.

7NETWORK DESIGN CONFIGURATION AND SECURITY
Configuration
To deploy virtualization features for all the devices, it needs to be ensured that every
device of the network comprises of processors capable of hardware assisted virtualization like
Intel Virtualization Technology (IVT) found in Intel core processors. The devices needs to
allocate separate amount of RAM for the virtualized sessions and hence need to have enough
RAM to operate at least two operating systems simultaneously.
Security
Every users conducting virtualized sessions needs set up strong passwords for their
account. These accounts in turn needs to be managed by network administrators thus
preventing misuse of critical resources. Additionally, virtual machines let the DMZ segment
of the network be configured and managed by network administrators from the ISA 2000
platform so that they do not have to repeatedly switch systems in the perimeter network.
Active Directory Configuration
AD Site
The head office of the company is present in Adelaide as well as the site of Pt.
Adelaide. The rest of the sites involve the sites Mt. Burr and Pt. Pirie. From this, it can be
understood that in TTF’s active directory there are four separate domains – a specific domain
for every site.
AD Organizational Unit
The various organizational units of TTF are found to be the following:
 Operations Unit
 Sales unit
 Finance Unit

8NETWORK DESIGN CONFIGURATION AND SECURITY
 Information Technology Unit
Among the four above mentioned organizational units, the operations unit exist in all the
four sites and out of these sites majority of these operational activities are executed by the
head office and Pt. Adelaide. From this it can be understood that there exists more than one
organizational units other sites have more than one organizational unit in the domains of the
other sites.
AD Grouping
The various groupings that the various user types need to be mapped for maintaining
the different stakeholders are discussed below:
Data Entry Officer (Domain User)
These users perform the data entry tasks for which a single domain is enough for
these staff. Also, they do not need to visit the different sites of the company and hence are
mapped as Domain user.
Manufacturing Supervisor (Global Administrator)
Similar to operations, manufacturing too is gets performed in several sites and
therefore the manufacturing supervisors have the need of visiting the four different sites to
check the ongoing work with the systems and therefore needs access to multiple domains. As
a result, this type of users gets mapped as Global administrator.
Sales Manager (Domain User)
The organizational unit of Sales also are in no need of access to multiple sites and
hence sales managers are tasked with supervising activities at their respective sites thus only
needing accesses to a single domain. Therefore, this type of users gets mapped as Domain
user.

9NETWORK DESIGN CONFIGURATION AND SECURITY
Operations Manager (Domain User)
Though operations get performed on all the sites, operations managers similar to the
sales managers have been tasked with supervising activities of their respective sites and
hence all they require is single domain access. Therefore, they are mapped as Domain user.
CEO, CFO, CIO (Global User)
These people belong to the C-level or the C-suite members of the company and have
to frequently travel to the different sites of the company as well as outside and therefore need
to have global access. Hence these users are mapped as Global Users.
IT Administrator (Global Administrator)
These IT administrators being responsible carrying out maintenances for ensuring the
uptime of the network and therefore needs access to all parts of the company network in all
sites. Therefore, they need global access and hence are mapped as Global administrators.
Server Specifications
Count and Placement
The network of TTF comprises of 6 servers, among which 3 are present in the head
office, 2 located at Mt. Burr and another in Pt. Adelaide. All 3 servers of sites other than the
head office deal with network specific tasks.
Server Roles
These servers play the key role of facilitating communication lines within the network
among the head office and other sites like with Pt Adelaide for manufacturing, warehousing,
distribution, and operations specific tasks. Servers of the head office are used for hosting the
mailing domain and database needs.

10NETWORK DESIGN CONFIGURATION AND SECURITY
Approval Sign-off Document
Name of Approver Decision Reason for Rejection Date
Network Architect Approved
Rejected
n/a 22.07.20
19
Project Manager Approved
Rejected
n/a 22.07.20
19
Business Analyst Approved
Rejected
n/a 22.07.20
19
Sponsors Approved
Rejected
n/a 22.07.20
19
Client Representative Approved
Rejected
22.07.20
19
Server Task List
Sl No. Date Activity/Task Priorities Status
S01 21.07.2019 Operations High In Progress
S02 21.07.2019 Manufacturing High Not yet begun
S03 21.07.2019 Sales Medium Delayed
S04 21.07.2019 Operations Medium Delayed
S05 21.07.2019 Finance High Delayed

11NETWORK DESIGN CONFIGURATION AND SECURITY
Server Test Plan
ID TC_R1
Description Ensure all data is consistent among all
servers
Precondition Target server is configured, turned on and
an existing server added the server
Action Server which added the new server ensures
data between the servers are similar
Expected Result Target server has similar data which is
consistent with all other servers
Failure Condition 1. Target server does not have all data
2. Data in Target server is not the same
Server maintenance plan
The maintenance process for the servers can include the following activities:
 Verifying and validating server log files
 Assessment of storage drive performance
 Examining access privileges
 Monitoring temperature and other critical measurements of network equipment
 Examining of security features
 Analysing server logs for security alerts like evidence of hacking attempts
 Updating security applications with patches and definitions of all network devices
 Installation of updates as in - service packs, hotfixes and the like

12NETWORK DESIGN CONFIGURATION AND SECURITY
Wireshark is a powerful third-party solution for protocol analysis and can prove useful in
detecting and monitoring network traffic proactively along with recording the network
sessions.
Router Specifications
Router Family: Cisco 2900 series
Specifications:
2 Fast Ethernet ports.
2 Serial cable ports.
AC-IP max in-line power distribution: 160W
DC Input Voltage: 24 to 60 VDC
Four such routers are installed, each providing connectivity to a particular site. The
internal network is routed among them using RIP protocol configuration in all these routers
and the cables used are serial cables.
Security plan and policy
Perimeter Design
The TTF network uses DMZ interfaces to allow secured and restricted access to the
web server and FTP server after which another security server is installed thus restricting all
outside access to the internal network. This segment thus forms the perimeter network of the
company and ensures intrusion prevention on the internal network of TTF. The web and FTP
servers are kept in the DMZ network since the devices can require access from outside the
network of TTF for the clients. This partial access from the untrusted Internet is enough for
cyber actors to manipulate and hack the network. Therefore, to ensure total security of the

13NETWORK DESIGN CONFIGURATION AND SECURITY
internal network the SBS server is used. This server is equipped with ISA Server 2000 which
is designed for Windows 2000 operating system to manage authentication and networking
activities. This makes sure the website is still up if the link for the mail server fails. This way
the perimeter design offers secured access to the web and FTP servers to TTF clients and
completely secures the internal network.
Remote Access
Remote access to different devices of the TTF network is supported and conducted by
the network administrators. They perform this with the help of the remote desktop connection
utility from Microsoft that comes built in with windows family of operating systems. The tool
helps to directly connect other devices and also enables remote file sharing abilities.
Site to Site Links
The network links from one site to the other takes place through the routers. These
four routers are connected through serial cables. All these routers use VPN tunnels while
connecting the routers of other sites thus forming a Site to Site IPsec VPN to hide the internal
network from other networks.
Defence in Depth
Network security of the TTF network is ensured by both hardware as also software-
based security solutions installed in the SBS server and other devices of the network of TTF.
The firewall device through which the internet access is obtained can ensure authentication,
real-time protection and proactive threat detection apart from the usual screening and packet
filtering features of a firewall. To do this the industry the Cisco ASA 5505 firewall device
has been used. ASA or Adaptive Security Appliance from Cisco is well known for providing
comprehensive security for corporate use cases. To restrict access to the internal network the
SBS server is used which runs ISA server 2000 that shuts off outside access to the intranet

14NETWORK DESIGN CONFIGURATION AND SECURITY
while also offering extra security features. Also, all individual devices of the network are
equipped with antivirus software applications which provide similar security features like the
firewalls on a limited scope along with detection and cleaning techniques for ensuring total
protection. Furthermore, access privileges in virtualization sessions by the users are
monitored by the network administrators to prevent escalation of privileges and thus secure
the critical resources of TTF network. Thus, the TTF network gets protected across all layers
of the OSI model through frontline, second line and tertiary line of security solutions in place.
Security Auditing and Monitoring
The network administrators are able to manage authentication and configuration of
access rules through the ASA firewall and in a more organized way through ISA server 2000.
Also, protocol analysers like Wireshark help them figure out if intrusion attempts are being
attempted by attackers.
Threat Identification
There can be several security threats to the network of TTF as the company performs
significant mailing activities and stores sensitive information. The threats identified as a
result can include attackers attempting to remotely execute malicious codes as well as
intrusion prevention attempts from experienced hackers. For virtual environments, there are
threats of escalation of privileges that can affect critical network resources of TTF. Apart
from security threats, others can be natural disasters like floods which can destroy equipment
and the data stored along with it.
Risk Analysis
Among the risks identified, the remote execution of codes carry medium severity as
these can lead to denial of service attacks. Intrusion by hackers however carry high severity
as they can steal sensitive information, inject malware, and lock files and charge ransoms

15NETWORK DESIGN CONFIGURATION AND SECURITY
thus causing severe damages to the company. The risk of natural disasters being rarer carry
medium severity.
Response Procedure
The security systems of the TTF network, both the perimeter network and solutions in
individual devices are adequate to prevent information security risks. For countering natural
disasters, the operational and diagnostic data of the company is recommended to be stored
and updated in all four sites. As a result, when one of the site is affected the data can be
recovered instantly from other sites.
Conclusion
In conclusion the report successfully analyses the network requirements of TTF and
proposes the upgraded network design to meet the various demands of their business
expansion. First the report is observed to provide a summary of requirements and presenting
the device needs in a tabular format. Then this report jumps to the network proposal section
and suggests the design with the help of a design diagram. Thereafter the various components
of TTF network’s active directory get discussed according to the user groups, the Sites and
the Organizational Units. Then this report describes the server roles and their layouts along
with the necessary project related documents as in user sign off, server task lists and the
server test plan. Following that, the report provides the plans for maintenance and afterwards
lists down the specifications for the routers and servers installed. Then the report ends after
talking about the security policies and measures of the network.

16NETWORK DESIGN CONFIGURATION AND SECURITY
Bibliography
Bonica, R., Cotton, M., Haberman, B. and Vegoda, L., 2017. Updates to the Special-Purpose
IP Address Registries (No. RFC 8190).
Čabarkapa, D., 2015. Application of Cisco Packet Tracer 6.2 in teaching of advanced
computer networks. INFORMATION TECHNOLOGY AND DEVELOPMENT OF
EDUCATION ITRO 2015, p.153.
Hasan, T. and Ogale, N., 2017. Remote Desktop control (RDC).
Hernandez, L., Jimenez, G. and Marchena, P., 2018. Energy Efficiency Metrics of University
Data Centers. Knowledge Engineering and Data Science, 1(2), pp.64-73.
Huang, J., Down, D.G., Lewis, M.E. and Wu, C.H., 2018, June. Dynamic scheduling and
maintenance for a two-class queue with a deteriorating server. In 2018 Annual American
Control Conference (ACC) (pp. 3197-3202). IEEE.
Iskandar, A., Virma, E. and Ahmar, A.S., 2019. Implementing DMZ in Improving Network
Security of Web Testing in STMIK AKBA. arXiv preprint arXiv:1901.04081.
Jawale, M.D. and Deshpande, R., 2018. A Novel Approach for Classification and Detection
of Attacks in Network Intrusion Detection System Using. Journal of Innovations in
Engineering & Applied Science (JIEAS), 1(1), pp.61-66.
Khalaf, A.M., El Salam, M.S.A. and Ahmed, K.A., 2017, February. Investigation of different
ethernet wiring and different frame size to enhance the performance of LAN. In 2017 19th
International Conference on Advanced Communication Technology (ICACT) (pp. 787-796).
IEEE.

17NETWORK DESIGN CONFIGURATION AND SECURITY
Kim, J. and Hastak, M., 2018. Social network analysis: Characteristics of online social
networks after a disaster. International Journal of Information Management, 38(1), pp.86-96.
Konikiewicz, W. and Markowski, M., 2017. Analysis of Performance and Efficiency of
Hardware and Software Firewalls. Journal of Applied Computer Science Methods, 9(1),
pp.49-63.
Leon, A.F.H., Parra, O.J.S. and Bermudez, G.M.T., 2018. LAN-WAN-LAN end-to-end
Network Simulation with NS2. International Journal of Applied Engineering Research,
13(17), pp.13136-13140.
Minh, Q.T., Shibata, Y., Borcea, C. and Yamada, S., 2016. On-site configuration of disaster
recovery access networks made easy. Ad Hoc Networks, 40, pp.46-60.
Moreno-Vozmediano, R., Montero, R.S., Huedo, E. and Llorente, I.M., 2017. Cross-site
virtual network in cloud and fog computing. IEEE Cloud Computing, 4(2), pp.46-53.
Solomon, A., Obiniyi, A.A. and Adeyi, T.S., 2016. A Performance Study of IPV6 Multicast
Routing over a Dual Stack Virtual Local Area Network. International Journal of Computer
Applications, 147(10).
Stallings, W., 2015. Gigabit Ethernet: from 1 to 100 Gbps and beyond. Internet Protocol J,
18(1), pp.20-32.
Starov, O., Dahse, J., Ahmad, S.S., Holz, T. and Nikiforakis, N., 2016, April. No honor
among thieves: A large-scale analysis of malicious web shells. In Proceedings of the 25th
International Conference on World Wide Web (pp. 1021-1032). International World Wide
Web Conferences Steering Committee.

18NETWORK DESIGN CONFIGURATION AND SECURITY
Stiawan, D., Idris, M.Y.B., Abdullah, A.H., AlQurashi, M. and Budiarto, R., 2016.
Penetration Testing and Mitigation of Vulnerabilities Windows Server. IJ Network Security,
18(3), pp.501-513.
van Do, T., Noll, J., Dixit, S., Dzogovic, B. and Feng, B., 2018, July. Reducing Inequalities
with 5G Internet Light Network Slice. In 2018 IEEE 5G World Forum (5GWF) (pp. 38-43).
IEEE.
Wepman, J.A., Bedford, B.L., Ottke, H. and Cotton, M.G., 2015. RF sensors for spectrum
monitoring applications: Fundamentals and RF performance test plan. NTIA Report, pp.15-
519.
Yu, T., Sekar, V., Seshan, S., Agarwal, Y. and Xu, C., 2015, November. Handling a trillion
(unfixable) flaws on a billion devices: Rethinking network security for the internet-of-things.
In Proceedings of the 14th ACM Workshop on Hot Topics in Networks (p. 5). ACM.