Comprehensive Network Design Report for a Large Organization

This report details a comprehensive network design for an organization with six departments and over one thousand users, emphasizing security and efficient data transfer. It utilizes the NIST framework and incorporates passive optical networking (PON) for connectivity, with a single fiber optic cable splitting into multiple connections using passive optical splitters. The design includes a firewall to filter packets and an Intrusion Detection System (IDS) to detect attacks, along with an IP addressing scheme using IPv4 class C addresses and subnetting to support future growth. The report provides an IP addressing table, showing subnets allocated to each department. The design also incorporates a gateway to connect the network to the internet.

Running head: NETWORKING
NETWORKING
(Student’s Name)
(Professor’s name)
(Course)
(Date)

NETWORKING 2
Introduction
A proper design ought to provide security not only to the network users and their traffic
but also it must prevent attackers from getting access to the organization network. This design is
based on the NIST framework. The design comprises of six departments with over one thousand
users. This means that the number of servers ought to be between 50 and 100 so as to provide the
required services by the organization.
Network Design
This paper has utilized Microsoft Visio 2013 for network design. The typical design has
utilized the current technology i.e. passive optical networking commonly known as PON. This is
a type of technology which involves passive optical splitters so as to divide one optical
connection to serve the various endpoints as shown by figure one below. In here, the designer
has passed a single fiber from an Optical Line Terminal port from the IT department to the other
five departments. This is then split off using the 1.32 splitter into the five different connections in
each department. Each and every connection ought to have an endpoint which has to offer
Ethernet connectivity to the five endpoints (Burridge, 2015).
This design has also utilized the use of a firewall which located between the organization
and the Internet Service Provider. The reason as to why this design has utilized a firewall is to
filter packets; the device monitors all the packets that enter the organization network. Second,
this design has utilized the use of IDS which is located between the data center’s router and the
IT department-router. The aim of this device is to detect any form of attack targeted to the
organization servers. A gateway has also been installed between the firewall and the organization
router. The gateway has been assigned 192.168.1.1 IP address. Gateway is used to connect the
network to the internet

NETWORKING 3
IP addressing scheme
IP addressing is required for communication purposes. With a good addressing scheme in
place, then packets are forwarded from one department to another or from one location to
another with ease (Rossi, Louis, & Thomas, 2000). This design requires an Internet Protocol
domain which can support over one thousand hosts. The IP address to be utilized here IP v4 class
C type of IP address. The six departments will each be divided into subnets which can be sub-
dived into subnets later if need be. This is done to facilitate future growth. The whole network
design with use 192.168.1.1 as the network gateway to connect to the internet.
The IP addressing is as shown by the table shown below
Location CIDR notation Maximum No
of subnets in
each location
The required
number of
users
Maximum
number of
users allocated
Finance
department
192.168.1.0/24 –
192.168.1.224/24
40 500 640 users
Human Resource
department
192.168.2.0/24 –
192.168.2.224/24
40 500 640 users
Marketing
department
192.168.3.0/24 –
192.168.3.224/24
40 500 640 users
Procurement
department
192.168.4.0/24-
192.168.4.224/24
40 500 640 users
IT department 192.168.5.0/24-
192.168.5.224/24
40 500 640 users
Administrative 192.168.6.0/2- 40 500 640 users

NETWORKING 4
department 192.168.6.224/24

NETWORKING 5

NETWORKING 6
References
Burridge, A. (2015, June 11th). Campus LAN Design – A Different Approach. Retrieved from
Packet Pushers: https://packetpushers.net/campus-lan-design-a-different-approach/
Rossi, Louis, & Thomas. (2000). Cisco and IP addressing by Louis D Rossi. New York:
McGraw-Hill.