NST 231 – NETWORKING II COURSE PROJECT SPRING 2019 1 Objectives In this Capstone Project activity, you will demonstrate your ability to: • Design and implement an IPv4 addressing scheme that fulfills...

Networking II Course Project


NST 231 – NETWORKING II COURSE PROJECT SPRING 2019 1 Objectives In this Capstone Project activity, you will demonstrate your ability to: • Design and implement an IPv4 addressing scheme that fulfills the requirements • Design and implement an IPv6 addressing scheme that fulfills the requirements • Design and configure VLANs setup which fulfills the requirements • Design, configure, verify, static and dynamic routing for the necessary networks • Implement the required port and device security. • Create detailed design documentation for your proposed network • Explain your implementation and demonstrate its operation • Produce documentation of your testing and network configuration that could be used by others to maintain and expand the network. Required Resources • Cisco Packet Tracer 7.2.1 • Word processing software (Microsoft Word / OpenOffice Writer or equivalent) • Network Diagraming software (Microsoft Visio / Lucidchart or equivalent) Part 1 – Design Scenario You are a network specialist at a consulting firm. You have been hired by a client firm (Canucks Rock International) to complete the network design for their new office in Lowell. VLANs based on functional areas are used to segment the business’s networks. The network will have 2 connections to the internet and one network connection will be used as the primary connection first and if that connection goes down, it will fail over to the secondary connection. The company has purchased 10 switches and 3 routers for their network. The facility has a 4- floor office building and a manufacturing facility. There are two fiber connections between the manufacturing facility and the main office building The manufacturing facility needs 2 switches and will need a router is to be used to link the router back to the office building router. A Packet Tracer File will be made available to you with these devices and have all available ports. All the switches will be identical but the routers will be configured differently You will need to examine each device to determine the exact physical configuration. You will need to use the routers and switches as configured. The switches in the manufacturing building are to be named Pogie and Kerfuffle. The router in the manufacturing building is to be named Klick and will connect back to a router in the office building named Traductrice as well as the router for the primary internet connection. The router connecting to both the primary and backup the internet providers will be in the office building – name Ennuyeux. The system should use dynamic routing inside the company to adapt in case any connection between routers were to fail. Each floor has 2 switches, name them [Floor#]etage[Device#] (1st device on the 4th floor is 4etage1) Customer support has 44 stations on the 1st floor, 25 on the second floor, 20 on the 3rd floor and 12 on the 4th floor. Accounting had 2 on the 4th floor, 7 on the second floor and 10 and the third floor. Human NST 231 – NETWORKING II COURSE PROJECT SPRING 2019 2 Resources has 1 on the 1st, 2nd and fourth floor and 2 on the third floor. Senior admin has 1 on the 1st, 2nd and 3rd floor and 4 on the 4th floor. IT has 1 on the 4th floor and 1 on the 3rd floor. You have been asked to provide a network design so that each functional areas uses a minimal number of IPv4 addresses. Each area is required to support a different number of computer systems. The numbers provided do not include IP addresses needed for networking equipment nor for network address overhead. Area End Devices Manufacturing 1009 Customer support 101 Accounting 19 Human Resources 5 Senior Administration 7 IT Support (In Management VLAN) 2 You also need to provide IPv6 network design. You have been asked to create a logical design using the subnet hextet of the IPv6 address to create appropriate subnetting. Each network is required to operate as a separate logical LAN with routing between networks implemented using a router. This will allow the company to implement appropriate security once they have the network operational. Design Documentation Requirements (40% of grade): 1. A complete network topology diagram for your network including port assignments and links. 2. A full explained network addressing scheme for both IPv4 and IPv6 addressing. You should start your blocking for IPv4 at 192.168.128.0 and use 2001:DB8:1867::/48 for our IPv6 space. Don’t forget routed link IP addresses. 3. Your primary ISP, Meilleur IP Services, requires that you connect using the fixed IPv4 6.18.12.2/30 and a fixed IPv6 2001:DB8:1812:1::2/64 address for over a serial connection with a 4 Megabits/second speed. 4. You backup ISP, Sauvegarde, requires that you connect using the fixed IPv4 address of 12.24.18.14/30 and a fixed IPv6 address of 2001:DB8:1982:1::14/64 over a serial connection with a 2 Megabits/second speed Implement Requirements (60% of grade) Configure network security to the client requirements 1) Set device names as required. 2) Setup a static exit interface default route to the primary ISP and a backup static exit interface default route to the backup ISP in case of failure of the primary ISP. 3) Configure all passwords as encrypted. 4) Require username and password for all login attempts on all connections: a) Username: racine b) Password: motAPasse! 5) Disable AUX port access. 6) Configure a banner warning. NST 231 – NETWORKING II COURSE PROJECT SPRING 2019 3 7) Configure VLANs, ports assignments and trunking per the design. Close all ports that are not used. 8) Register two MAC address per open switch port in the office building Attempts by other devices to use the open switch port must be logged but the port should not stop functioning. Ports in the Manufacturing facility should allow an unlimited number of connections as these ports are provided by IT but used by the production engineers for their own purposes 9) Setup 1 PC on each VLAN. Configure your device with a static IP address in the block, the correct gateway and a DNS server of 1.1.1.1 Verify the network. Create documentation of all of the following tests. 1) Verify all security restrictions have been correctly implemented. 2) Verify that your dynamic routing handles the failure of any of the internal links. 3) Verify that your system moves to the backup in the primary ISP connection fails. 4) Verify each PC can ping all other PCs in the company. 5) Verify each PC can ping the DNS server. 6) Verify you can open the web page at www.cyber.mcc from each PC. 7) Cause a failure in the primary ISP link and retest connectivity to DNS and webserver. Final Documentation Requirements (60% of grade) Submit the following files: • A Packet Tracer file containing your completely configured network. • A full explained network addressing scheme for each VLAN and device. • IP address assignments for all network devices. • Documentation of all VLAN configuration • Documentation of your testing • A complete network topology for your network Objectives Required Resources Part 1 – Design Scenario Design Documentation Requirements (40% of grade): Implement Requirements (60% of grade) Configure network security to the client requirements Verify the network. Final Documentation Requirements (60% of grade)