IT499 Project: LAN Network Development, Design, and Security

This project outlines the development of a new Local Area Network (LAN) to address the shortcomings of an existing network. It details the bandwidth requirements for various applications, including email, messaging, web browsing, audio/video streaming, VoIP, and file sharing. The project focuses on restricting user group access through router configuration with access control lists and VLAN management. Key devices used include Cisco 2811 routers, Cisco 2960 and 3500 series switches. The logical and physical network designs are presented, along with an equipment list. Security measures include firewalls, antivirus software, restricted server room access, and IDS/IPS implementation. The project's progress includes completed analysis and estimation phases, identification and purchase of network assets, and definition of a security policy, with ongoing work on network security and logical network design.

Networking Project:
Development of New LAN
Network
Name of the Student:
Name of the University:

Introduction
 This project is aimed to solve the
network problem of the organization.
 The existing Local Area Network
(LAN) does not cover all the
buildings of the organization.
 The current LAN also does not
provide services up to the specific
standards set by the organization.

Current Requirements for Required
Bandwidth and Network Traffic
Application Required Bandwidth
Email 10 – 100 Kbps
Messaging < 10 Kbps
Web Browsing 64 – 100+ Kbps
Audio Streaming 96 -160 Kbps
VOIP 24 – 100+ Kbps
Video Streaming 96 – 200+ Kbps
File Sharing 0 – infinity Mbps

Restriction of User Groups in
Network under Development
 For restricting the access of the internal
network resources for the specific group of
users the router is will be configured with
access control list.
 The each of the group will be divided into
smaller subnet such that the VLAN should
be managed from a central location.
 The rules will be applied in the router
interface for controlling the flow of data
traffic in the network.

Devices Used
Name of the device Model
Cisco 2811 Router Cisco 2800 Series integrated service router
Cisco 2960 Series Switch Cisco Catalyst WS-C2960S-24TS-S 24-port 10/100/1000 switch
Cisco 3500 Series Switch Cisco WS-C3524-XL-EN 3500 Series Catalyst Switch

Logical Network Design

Floor Plan and Physical
Network Design

Equipment List to be
Used
 Cisco Catalyst 2960 24 Port Layer 3
switch.
 Acer Altos R720 Rackmount Servers
 Cisco Catalyst 2811 Series Router.
 Lacie 2 TB 10/100/1000 Back-up
Device
 Cabling

Physical and Logical Security
Plan
 Each of the workstation installed in the
network will be installed with suitable
firewalls and anti virus software so that the
network can be safe from external attacks
like malware, virus and unethical users.
 The servers will be placed in a separate room
with restricted access permission.
 IDS and IPS will be installed in the network
for monitoring the flow of data traffic in the
network and secure it from the external
agents.

Progress Till Now
 Analysis and estimation phases are
complete.
 Network assets have been identified
during the design phase.
 The network assets that are required
for the project have been purchased
and the implementation has
initiated.
 Security policy for the network has
been defined.

Work Under Progress
 Network security design is half
complete and is aimed to provide
complete security to the network.
 Logical network design is currently
25% complete and is aimed to fulfill
all the network requirements of the
organization.
 Network architecture design has
been initiated and will be developed
as per the logical diagram show in