System and Network Admin Project: CQU Nix Internal Network Design

This project details the internal network design for a software development startup, cqunix. The design includes a network diagram illustrating the connection of five servers (Adelaide, Sydney, Gladstone, Darwin, and a backup server in Bundaberg), client computers, a wireless router, and a network router (Rocky) acting as a firewall and gateway. The project outlines server configurations with static IP addresses and client devices dynamically assigned IPs. It justifies the design choices, including the use of a wireless router to reduce load and separate network access, and the assumption that the NBN service provider handles public IP allocation. The design also covers backup and recovery strategies, with automated server updates and data recovery from the backup server, and security measures implemented through the Rocky router's firewall to protect the network from unauthorized access.

Network Design:
Designing the Internal Network:
The internal network diagram for the entire company:
Fig: The internal network diagram including the network organisation of the entire network
with:
i) 5 servers, Adelaide, Sydney, Gladstone, Darwin and the backup server Bundaberg
ii) An additional wireless router to securely connect the clients to the local network
iii) 4 clients computers (Employee 1-4)

iv) Rocky a network router connecting the NBN ISP network(Internet) to this local
network and also serving as the fire wall.
Table of servers:
The table of servers for network and server design:
Servers MAC addresses IP address Client IP ranges
Adelaide 78:30:32:E4:B8:7B 192.168.0.10 192.168.0.50 - 192.168.0.254
Sydney BD:D2:B7:79:8B:1C 192.168.0.20 192.168.0.50 - 192.168.0.254
Gladstone 52:D3:C2:E4:51:E0 192.168.0.30 192.168.0.50 - 192.168.0.254
Darwin D6:02:30:E5:55:06 192.168.0.40 192.168.0.50 - 192.168.0.254
Installation and Configuration details:
The network is such that the servers shown in the table above are assigned with static IP
addresses while all other devices are dynamically assigned their IP addresses by the routers.
The router rocky acts as the firewall and the network gateway.
Justification of Network Design and Assumptions made:
In the design above the network:
 The router Rocky provides the devices within the network with access to the external
network(Internet) and assigns the network a public IP address
 As discussed in the assignment the Router Rocky also acts as the secure gateway
with firewall for the external users to access the network.
 In the network there is an assumption that NBN as the service provider handles the
allocation of IP public addresses to the users within network and outside the
organisation.
 As shown in the diagram the I have added the wireless router with two
antennas and connecting directly to the 4 employee computers
dynamically assigns IP addresses for these clients
computers locally is added to improve on the efficiency of the network.
 The reason for an additional user is:
o To reduce the load on the router Rocky
o To separate access of the servers and that of the clients
Backup and recovery Design:
In the network the assumption is that the server will automatically do their automated
scheduled updates every hour during the work hours 8-5 and then an additional two times
early morning and late in the night.
In case of a failure or any event requiring a recovery the servers affected will request for a
roll back(data recovery) from Bundaberg, the back-up server

Security Design:
1. The router Rocky is intended to work as the firewall for the network protecting all
the devices in the network from unauthorised access from within or outside the
organisation.
2. It felt appropriate to add the wireless router to separate the access control within
the network separating the clients from directly accessing the servers and separating
the server network with the user network