Primary School Network Design Project: DHCP, ACL, Server Configuration

This project details the design and implementation of a network for a primary school, incorporating a guest user network. The project scope includes implementing DHCP, Access Lists (ACL), and server configuration. The network design follows a user-centric approach, positioning the school router as the central communication point between the guest network and the FTP server. The design utilizes VLANs for network segmentation, including inter-VLAN routing. IP addressing schemes are defined for the school network, guest network, and server network, with considerations for network addresses, broadcast addresses, valid host ranges, and default gateway addresses. The project also includes switch and router configurations, DHCP pool setups, RIP configuration for routing, and security configurations using access lists to restrict access to the FTP server. Testing is performed to verify connectivity and security policies. The configuration steps for various network devices, including switches and routers, are provided, along with the commands used to set up VLANs, assign interfaces, configure IP addresses, and implement DHCP and RIP routing. The project concludes with a summary of the configurations and testing results, along with references to Cisco documentation.

Project Scope
The project aims to design the primary school network with guest user. It describes to
implement the DHCP, Access List and Server Configuration. Our goal is to implement the prescribed
configuration in the proposed network design
Project Requirements
Equipment list
Device Model Quantity
Router 2811 1
Switch L2 2950 2
Switch L2 2960 1
PCs/Laptops PC 50+30+1
Servers Server 1
Network Design Consider Human factor (User-Centric Design) concepts
We have implemented the user-centric design in the network topology. The center of the
network is the school router. It acts as the main part of the communication between guest user and ftp
server. In VLAN, it enables the Inter VLAN routing

IP addresses table including netmask (with justification)
School
Allocated subnet 172.16.100.0 /26
Network address 172.16.100.0
Broadcast address 172.16.100.63
Valid host address range 172.16.100.1 to 172.16.100.62
Default gateway address -
Guest
Allocated subnet 172.16.100.64 /28
Network address 172.16.100.64
Broadcast address 172.16.100.79
Valid host address range 172.16.100.65 to 172.16.100.78
Default gateway address -
School - Server
Allocated subnet 172.16.100.80 /26
Network address 172.16.100.80
Broadcast address 172.16.100.83
Valid host address range 172.16.100.81 to 172.16.100.82
Default gateway address -
SchoolRouter
Interface 0/0.10 172.16.100.1 /26
Subnet Mask 255.255.255.192
Default gateway address -
SchoolRouter
Interface 0/0.20 172.16.100.65 /26
Subnet Mask 255.255.255.240
Default gateway address -
SchoolRouter
Interface 0/0.99 172.16.100.84 /26
Subnet Mask 255.255.255.252
Default gateway address -

FTP Server Network
Allocated subnet 172.16.200.0 /24
Network address 172.16.200.0
Broadcast address 172.16.200.255
Valid host address range 172.16.200.1 to 172.16.200.254
Default gateway address -
Godha_Server
Interface 0/0 172.16.200.1
Subnet Mask 255.255.255.0
Default gateway address -
FTPServer
Ethernet 0 172.16.200.2
Subnet Mask 255.255.255.0
Default gateway address 172.16.200.1

Network Topology Diagram

Switch configuration
Basic Configuration
Switch#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Switch(config)#hostname Varun_VLAN
Varun_VLAN(config)#exit
Set the Current date and Time
Varun_VLAN#clock set 17:31:00 30 May 2018
Varun_VLAN#show clock
17:31:29.027 UTC Wed May 30 2018
Show Version of Cisco IOS
Varun_VLAN#show version

VLAN Creation
Varun_VLAN#conf t
Varun_VLAN(config)#vlan 10
Varun_VLAN(config-vlan)#name SchoolUser
Varun_VLAN(config-vlan)#exit
Varun_VLAN(config)#vlan 20
Varun_VLAN(config-vlan)#name GuestUser
Varun_VLAN(config-vlan)#exit
Varun_VLAN(config)#vlan 99
Varun_VLAN(config-vlan)#name NATIVELAN
Varun_VLAN(config-vlan)#exit

VLAN Assign to Interface
Varun_VLAN(config)#interface fa 0/1
Varun_VLAN(config-if)#switchport mode trunk
Varun_VLAN(config-if)#switchport trunk allowed vlan 10,20,99
Varun_VLAN(config-if)#exit
Varun_VLAN(config)#
Varun_VLAN(config)#interface range fa 0/2-6
Varun_VLAN(config-if-range)#switchport mode access
Varun_VLAN(config-if-range)#switchport access vlan 10
Varun_VLAN(config-if-range)#no shut
Varun_VLAN(config-if-range)#exit
Varun_VLAN(config)#interface range fa 0/7-11
Varun_VLAN(config-if-range)#switchport mode access
Varun_VLAN(config-if-range)#switchport access vlan 20
Varun_VLAN(config-if-range)#no shut
Varun_VLAN(config-if-range)#exit
Varun_VLAN(config)#interface vlan 99
Varun_VLAN(config-if)#ip address 172.16.100.86 255.255.255.252
Varun_VLAN(config-if)#no shut
Varun_VLAN(config-if)#exit

Router configuration
Varun_School(config)#interface fa0/0
Varun_School(config-if)#no shut
Varun_School(config)#interface fa0/0.10
Varun_School(config-subif)#ip address 172.16.100.1 255.255.255.192
Varun_School(config-subif)#encapsulation dot1q 10
Varun_School(config-subif)#no shut
Varun_School(config-subif)#exit
Varun_School(config)#
Varun_School(config)#interface fa0/0.20
Varun_School(config-subif)#encapsulation dot1q 20
Varun_School(config-subif)#ip address 172.16.100.65 255.255.255.240
Varun_School(config-subif)#no shut
Varun_School(config-subif)#exit
Varun_School(config)#
Varun_School(config)#interface fa0/0.99
Varun_School(config-subif)#encapsulation dot1q 99
Varun_School(config-subif)#ip address 172.16.100.85 255.255.255.252
Varun_School(config-subif)#no shut
Varun_School(config-subif)#exit

Varun_School(config)#interface ser 0/0
Varun_School(config-if)#ip address 172.16.100.81 255.255.255.252
Varun_School(config-if)#no shut
Varun_School(config-if)#exit
Router#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#hostname Godha_Server
Godha_Server(config)#interface ser 0/0

Godha_Server(config-if)#ip address 172.16.100.82 255.255.255.252
Godha_Server(config-if)#clock rate 64000
Godha_Server(config-if)#no shut
00:14:56: %LINK-3-UPDOWN: Interface Serial0/0, changed state to up
00:14:56: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up
Godha_Server(config-if)#exit
Godha_Server(config)#
Router(config)#hostname Godha_Server
Godha_Server(config)#interface ser 0/0
Godha_Server(config-if)#ip address 172.16.100.82 255.255.255.252
Godha_Server(config-if)#clock rate 64000
Godha_Server(config-if)#no shut
00:14:56: %LINK-3-UPDOWN: Interface Serial0/0, changed state to up
00:14:56: %LINEPROTO-5-UPDOWN: Line protocol on Interface Serial0/0, changed state to up
Godha_Server(config-if)#exit
Godha_Server(config)#
Godha_Server(config)#interface fa 0/0
Godha_Server(config-if)#ip address 172.16.200.1 255.255.255.0
Godha_Server(config-if)#no shut

DHCP configuration
ip dhcp pool VarunSchoolDHCP
network 172.16.100.0 255.255.255.192
default-router 172.16.100.1
ip dhcp pool VarunGuestDHCP
network 172.16.100.64 255.255.255.240
default-router 172.16.100.65
ip dhcp excluded-address 172.16.100.1
ip dhcp excluded-address 172.16.100.65