Network Infrastructure Setup and Configuration.

NA

Running head: NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Network Infrastructure Setup and Configuration
Name of the Student
Name of the University
Author Note

1
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Summary
Segmenting networks play an important role in ensuring security and privacy within a
network. The network being proposed by the report tries to implement one such network for
alm.co.uk and segments it by using different VLANs for the different use cases including
subnetworks of the four departments. First the report lays down the requirements of the
network and summarizes the device requirements of the four departments in a tabular format.
Then the report presents the network design diagram after which the report discusses the
implementation of the network as well as justifies it. After that the report provides the
subnetting details of the various segments and highlights the networks, subnet masks and
CIDR for each segment. Thereafter the six different VLANs of the six segments are talked
about and the subnetworks they serve is noted. The report also explains how the departments
get restricted from accessing other departments using the access control list extended
commands. Then testing is conducted on whether the access restrictions are effective and if
the devices are able to automatically obtain IP addresses using the DHCP protocol. After this
the report ends with concluding notes.

2
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Table of Contents
Introduction................................................................................................................................3
Discussion..................................................................................................................................3
Requirements..........................................................................................................................3
Network Diagram...................................................................................................................5
Subnet Details........................................................................................................................6
VLAN.....................................................................................................................................8
Access Control List................................................................................................................9
Testing..................................................................................................................................10
DHCP...................................................................................................................................13
Conclusion................................................................................................................................15
Bibliography.............................................................................................................................17

3
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Introduction
It is because segmenting networks play a vital role to ensure security and privacy in
networks, the report proposes a network for alm.co.uk where it tries to implement such
segmentations with the help of VLANs for the different use cases including subnetworks of
the four departments. The report begins by laying down the requirements of the network and
summarizes the device requirements of the four departments in a tabular format. Then the
report presents the network design diagram after which the report discusses the
implementation of the network as well as justifies it. After that the report provides the
subnetting details of the various segments and highlights the networks, subnet masks and
CIDR for each segment. Thereafter the six different VLANs of the six segments are talked
about and the subnetworks they serve is noted. The report also explains how the departments
get restricted from accessing other departments using the access control list extended
commands. Then testing is conducted on whether the access restrictions are effective and if
the devices are able to automatically obtain IP addresses using the DHCP protocol. After this
the report ends with concluding notes.
Discussion
Requirements
The network of the client company alm.co.uk must consist of four departments.
The network should additionally contain four servers, namely the web server, the email
server, the DNS server and the file server.
All of these servers are required to be shared among all the respective users of the different
departments.

4
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Based on the distribution of workstations and other devices for a given department the
appropriate subnetting should be created.
The network must also support wireless connectivity for the mobile devices and laptops of all
users of the four departments.
VLANs are required to be created to segment the network among the 4 departments.
Access to other departments by any of the departments must be restricted through internal
measures.
The devices the different departments contain are summarized below.
Department Devices
Department 1 48 Workstations, 1 printer
Department 2 18 Workstations, 1 printer
Department 3 11 Workstations, 1 printer
Department 4 68 Workstations, 1 printer
This means that the overall network must have 145 workstations and 4 printers along with the
four servers and a separate set of switches and access points for the wireless network.
The private IP network used by the four departments of the network and the servers should be
different from the IP network that is being used by the wireless network to ensure dedicated
network to wireless devices for optimal signals and network service.

5
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Network Diagram
Figure 1: Network Design Diagram
The network of the company alm.co.uk involves four different access layer switches
for the four different departments as well as a one for the wireless network and one for the
four different servers. These access switches directly provide network access to the individual
devices that the network serves, be it workstations, printers, smartphones or servers. The
switches themselves obtain network connectivity from the distribution layer switch which
again receives the routed network from the core router. Each of the access layer switches
have a particular VLAN specified to them. The VLANs of the four departments within which
the network activity takes place have access restrictions configured internally so that they
cannot access other departments. Only the switches that serve the wireless network and the
four servers are not access restricted as the four servers must be accessible to users of all
users of all four departments and the same applies for the wireless network. The access
restrictions are configured on the router where the VLAN subnetting and the DHCP pools for
the different VLANs are also configured. Then the distribution layer receives the network
from this router in trunk mode and after that this switch connects the lower level switches in
switchport access mode to the using the specific VLANs of the respective switches.

6
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Subnet Details
Subnet
Name
Need
ed
Size
Alloca
ted
Size
Address
Ma
sk
Dec Mask
Assignable
Range
Broadcast
Depart
ment 1
49 62
192.168.16
8.128
/26
255.255.25
5.192
192.168.16
8.129 -
192.168.16
8.190
192.168.16
8.191
Depart
ment 2
19 30
192.168.16
9.0
/27
255.255.25
5.224
192.168.16
9.1 -
192.168.16
9.30
192.168.16
9.31
Depart
ment 3
12 14
192.168.17
0.0
/28
255.255.25
5.240
192.168.17
0.1 -
192.168.17
0.14
192.168.17
0.15
Depart
ment 4
69 126
192.168.17
1.0
/25
255.255.25
5.128
192.168.17
1.1 -
192.168.17
1.126
192.168.17
1.127
Servers 4 6
192.168.17
2.0
/29
255.255.25
5.248
192.168.17
2.1 -
192.168.17
2.6
192.168.17
2.7
Wireles 145 254 10.11.12.0 /24 255.255.25 10.11.12.1 - 10.11.12.25

7
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
s
Networ
k
5.0
10.11.12.25
4
5
The different subnets required for creating the 6 different subnetworks are given in
the above table. The four departments of the company use the subnetworks 192.168.168.0,
192.168.169.0, 192.168.170.0 and 192.168.171.0. The four servers present in the network use
the subnetwork 192.168.172.0. Lastly the wireless network uses the subnetwork 10.11.12.0.
The subnet masks for the given networks are 255.255.255.192, 255.255.255.224,
255.255.255.240, 255.255.255.128, 255.255.255.248 and 255.255.255.0 respectively and the
corresponding CIDR values of the subnets are /26, /27, /28, /25, /29, /24 in the order they are
listed.
The CIDR addressing scheme is chosen over the conventional classful IP addressing scheme
since the CIDR scheme offers smoother transitions the available IP address spaces with every
changes in the CIDR mask values. In contrast in classful IP addressing scheme change in
number of available host IPs in address space when transitioning from class A to class B or
from class B to class C is drastically large. This, most of the time results in wastage of IP
addresses or want of it.

8
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
VLAN
Figure 2: VLANs for the different segments of the network
The six VLANs that have been created for the different segments of the network are
the VLAN names that start with the letter ‘V’. The VLAN V12 is created for the subnetwork
of the wireless network. The VLAN V172 is created for the subnetwork of the servers. The
VLANs V168, V169, V170 and V171 are created for the subnetworks of the four different
departments. The multilayer switch contains the database of all the six VLANs, four for the
different departments and the other two for the servers and the wireless network. This switch

9
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
then connects the respective switches of the six LAN networks through the particular
interfaces in trunk mode. The router configures the subnet classification of the VLANs and
the required DHCP pools. Connection with this router by the multilayer switch also happens
in trunk mode. This enables the network to implement Inter VLAN Routing thus making it
possible for devices of different VLANs communicate with one another in a seamless
manner.
Access Control List
Figure 3: Commands to implement access restrictions

10
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
The access control list commands for restricting pinging and packet transfer activities
between the four different departments are specified in the above screenshot of the console
terminal of the router. Here the commands for access to networks to be denied for any given
network is specified every time for every network and every combination.
Testing
Figure 4: Ping attempt between the devices of departments 1 and rest
The above screenshot shows the ICMP ping requests made by devices from
department 1 with rest of the departments.
Figure 5: Ping attempt between the devices of departments 2 and rest
The above screenshot shows the ICMP ping requests made by devices from
department 2 with rest of the departments.
Figure 6: Ping attempt between the devices of departments 3 and rest

11
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
The above screenshot shows the ICMP ping requests made by devices from
department 3 with rest of the departments.
Figure 7: Ping attempt between the devices of departments 3 and rest
The above screenshot shows the ICMP ping requests made by devices from
department 4 with rest of the departments.
As it can be found from the above four screenshots, all the ping attempts made by all
the four departments to access devices of each other resulted in failures due to the restrictions
in place for prohibiting such access.
Figure 8: Ping attempts between devices of department 1 and the servers
The above screenshot shows the ICMP ping requests made by devices from
department 1 with all the four servers.
Figure 9: Ping attempts between devices of department 2 and the servers

12
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
The above screenshot shows the ICMP ping requests made by devices from
department 2 with all the four servers.
Figure 10: Ping attempts between devices of department 3 and the servers
The above screenshot shows the ICMP ping requests made by devices from
department 3 with all the four servers.
Figure 11: Ping attempts between devices of department 4 and the servers
The above screenshot shows the ICMP ping requests made by devices from
department 4 with all the four servers.
Figure 12: Ping attempts between devices of wireless network and the servers
The above screenshot shows the ICMP ping requests made by devices of the wireless
network with all the four servers.

13
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
The above four screenshots show the ping attempts by devices of the four different
departments as well as by the devices of the wireless network like smartphones for accessing
the four servers. It can be found that both the smartphones and the devices of each
department are able to access all the four servers – Web, Mail, DNS and File.
DHCP
The figure below shows that the DHCP protocol is correctly configured as the devices
can automatically pick up their IP addresses from their respective assigned subnetworks. This
protocol is used for assigning IP addresses to all devices of all departments as well as the
servers and for devices that are connecting through the wireless network. The DHCP protocol
is used by the network as it simplifies the process of managing and maintaining the IP
allocation in the entire network and reduces the excess workload and pressure that could have
otherwise affected the work of the network administrators.

14
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Figure 13: Devices obtaining IP address using DHCP protocol
The wireless devices like smartphones are able to have IP addresses assigned automatically
with the help of DHCP protocol. The below figure shows just that.

15
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Figure 14: Wireless Devices obtaining IP address using DHCP protocol
Conclusion
To conclude the above report succeeds in proposing a network for alm.co.uk where it
segments the network by using different VLANs for the different use cases including
subnetworks of the four departments. First the report lays down the requirements of the
network and summarizes the device requirements of the four departments in a tabular format.
Then the report presents the network design diagram after which the report discusses the
implementation of the network as well as justifies it. After that the report provides the
subnetting details of the various segments and highlights the networks, subnet masks and
CIDR for each segment. Thereafter the six different VLANs of the six segments are talked
about and the subnetworks they serve is noted. The report also explains how the departments
get restricted from accessing other departments using the access control list extended

16
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
commands. Then testing is conducted on whether the access restrictions are effective and if
the devices are able to automatically obtain IP addresses using the DHCP protocol.

17
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Bibliography
Čabarkapa, D., 2015. Application of Cisco Packet Tracer 6.2 in teaching of advanced
computer networks. INFORMATION TECHNOLOGY AND DEVELOPMENT OF
EDUCATION ITRO 2015, p.153.
Han, X., Fu, Y., Jiang, J. and Wang, C., 2015. A deadlock-free subnetting mechanism for
high performance broadcasting in NoC. IEICE Electronics Express, 12(19), pp.20150688-
20150688.
Jenkins, H., Moran, D. and Hester, E., 2018. Architecting DHCP and the Internet Using Top.
International Journal of Software Systems Research and Methodology, 1(1).
Kelley, M., Grimes, K., Martin, P. and Reynolds, H., 2018. On the Deployment of DHCP.
Journal of Computer Science and Software Engineering, 9(4).
Koerner, M. and Kao, O., 2016. MAC Based Dynamic VLAN Tagging with OpenFlow for
WLAN Access Networks. Procedia Computer Science, 94, pp.497-501.
Laing, R., Smith, S., Sixtus, J. and Hardy, J., 2019. Deconstructing DHCP Using Zobo.
International Journal of Software Systems Research and Methodology, 3(1).
Laing, R., Smith, S., Sixtus, J. and Hardy, J., 2019. Deconstructing DHCP Using Zobo.
International Journal of Software Systems Research and Methodology, 3(1).
Liu, X., Holden, B. and Wu, D., 2017, July. Automated synthesis of access control lists. In
2017 International Conference on Software Security and Assurance (ICSSA) (pp. 104-109).
IEEE.
Nguyen, V.G. and Kim, Y.H., 2016. SDN-Based Enterprise and Campus Networks: A Case
of VLAN Management. Journal of Information Processing Systems, 12(3).

18
NETWORK INFRASTRUCTURE SETUP AND CONFIGURATION
Prasad, N.H., Reddy, B.K., Amarnath, B. and Puthanial, M., 2016. Intervlan Routing and
Various Configurations on Vlan in a Network using Cisco Packet Tracer 6.2. International
Journal for Innovative Research in Science and Technology, 2(11), pp.749-758.
Raihan, M.A. and Afroze, M., 2016. Securing a Network by Using VLAN, Port Security and
Access Control List (Doctoral dissertation, East West University).
Singh, D.A.K., 2015. Internet Protocol (IP) Address–Subnetting and Supernetting. Int. J.
Emerg. Trends Technol. Comput. Sci, 4, pp.87-90.
Smith, G., Reynolds, D. and McPherson, J., 2018. A Methodology for the Evaluation of
DHCP. Software engineering and CS Journal, 3(1).
Suman, S. and Agrawal, E.A., 2016. IP traffic management with access control list using
cisco packet tracer. International Journal of Science, Engineering and Technology Research
(IJSETR) Volume, 5.
Toler, J., Barnes, P., Manzone, J. and Brown, M., 2019. Emulating DHCP Using Relational
Archetypes. International Journal of Software Systems Research and Methodology, 2(1).