Soylent Co. Network Design Analysis and Improvement Presentation

This presentation provides a comprehensive analysis of Soylent Co.'s existing network, identifying inefficiencies and security vulnerabilities. It proposes improvements such as dedicated sub-networks for each department to enhance performance and the implementation of firewalls and user authentication for robust security. The presentation details the use of VLANs for network segmentation and manageable user access levels. Furthermore, it outlines a proposed network design, including IP address allocation for each department and server, based on the allocated class C network 128.31.57.0/24. The presentation also includes references to relevant research papers supporting the proposed improvements and network security measures. This assignment is aimed at improving network designs and related issues.

A Presentation on
improving network designs

Issues in Existing Network
 The current network consists of
the following network layout.
 Though recently upgraded, the
design is inefficient.
 This means there is bound to be
performance issues in the
network.
 There is no security measure
present in the network.

Suggested Improvements
 Network connections to each department should be ensured by using
dedicated sub networks to improve performance.
 Security in the network must be ensured by installing firewall and other
security applications [1].
 Implementing user authentication process can help secure internal
network communications.

Security
 Cyber-security threats can like malwares,
intrusion by hackers and phishing can be
blocked by using firewalls.
 Distributed Denial of Service as well as
exploit of system vulnerabilities are
prevented by firewalls.
 VLANs are set up for each department as
also for servers so that user access levels
of departments is manageable.
 VLANs can also segment the network
which can provide plenty of benefits [3].
 Segmentation helps a network to isolate
faulty areas and parts affected by cyber
attacks.

Internet
… ……
…
Web + Email
Server Engineerin
g File
Server
HR File
Server
Engineering
Accounts
Human
Resource Administration
Servers
VLAN
Accesses
VLAN
Accesses VLAN
Accesses
VLAN
Accesses
VLAN
Accesses
Secure Network
Router
Cisco ASA Firewall
VLAN Trunk
VLAN Trunks
Proposed Network

Department IP Allocation
Dep
t_N
am
e
IP
_Re
qmt
IPs_A
llocat
ed
Networ
k
Addres
ses
CI
DR
Subnet
Masks
Assigna
ble IP
Ranges
Broadc
ast
Addres
ses
Eng
ine
erin
g
27 30
128.31.
57.0
/27
255.255.2
55.224
128.31.
57.1 -
128.31.
57.30
128.31.
57.31
Acc
oun
ts
19 30
128.31.
57.32
/27
255.255.2
55.224
128.31.
57.33 -
128.31.
57.62
128.31.
57.63
Ad
min
14 14
128.31.
57.64
/28
255.255.2
55.240
128.31.
57.65 -
128.31.
57.78
128.31.
57.79
HR 10 14
128.31.
57.80
/28
255.255.2
55.240
128.31.
57.81 -
128.31.
57.94
128.31.
57.95
Ser
ver
far
m
3 6
128.31.
57.96
/29
255.255.2
55.248
128.31.
57.97 -
128.31.
57.102
128.31.
57.103
128.31.57.0/24 is the class C major
network used for IP address
allocation for the financial firm
Soylent [2].
This network requires breaking into
different sub networks for the four
different departments.
Another subnet is necessary for
enabling network access to the
respective servers.
The table includes network and
broadcast addresses for each sub
network.

Conclusions
 The presentation succeeds in analysing Soylent’s existing network and
lists appropriate improvements for the network.
 Security ensured in the network gets described extensively.
 Then the proposed network design is provided.
 Thereafter the IP address allocation for the sub networks of the four
departments and servers is discussed.

References
 [1] A. Abdelsalam, S. Salsano, F. Clad, P. Camarillo, and C. Filsfils,, April.
SERA: Segment routing aware firewall for service function chaining
scenarios. In 2018 IFIP Networking Conference (IFIP Networking) and
Workshops (pp. 46-54). IEEE. , 2019
 [2] D. Komosný, M. Vozňák, and S.U. Rehman, Location accuracy of
commercial IP address geolocation databases. , 2017.
 [3] M. Koerner, and O. Kao, MAC Based Dynamic VLAN Tagging with
OpenFlow for WLAN Access Networks. Procedia Computer Science, 94,
pp.497-501. , 2016.