1. Virtual Company Group 8 Presentation Date: 26 -27 June 2012 20/04/2017
prepare by group8

2. Content Introduction Objective of Virtual Company
20/04/2017
Content
Introduction
Objective of Virtual Company
Introduction of Network Infrastructure in Virtual Company
Operating System and Services in Company usage
Security in Company
Switch and Router CISCO
Problems and solutions
Completed and Uncompleted Tasks
Experiences of Virtual Company
References of Services in Virtual Company
Questions and Answers
prepare by group8

3. Introduction Group number : 8 Supervisor : HY Leapcheang
Manager : LONG Chanthorn
Group Member :
CHHOEUN Sambath
HOEUNG Kunthea
MEN Amara
NHEAN Sophan
NY Sreypech
SIN Sokheng
SORY Sokuntheara

4. Objective of Virtual Company
Understand the real network infrastructure of company
Understand the security in the company
Install and configure services : AD, DNS, DHCP, File Server, Proxy, Firewall, Mail and Webmail, Web, FTP, VPN, and DHCP Relay Agent.
Understand the rules allow or deny in firewall
Team work
Understand problem solving
Improve self-learning

5. Introduction to Network Infrastructure Virtual Company

6. Operating Systems and Services in Company usage
The company use two Operating Systems :
Microsoft :
Windows Server 2008 (File Server, AD,DNS and DHCP)
Windows 7
Linux :
Red Hat 6 (Mail, Web, FTP, Firewall and Monitoring)

7. Operating Systems and Services in Company usage
Microsoft : Window Server 2008
The first server: ( /29)
AD : group8.lan
DNS : group8.lan
Backup network : use Backup4all Professional 4 setup wizard tool(software from internet)
Backup data from file server
DHCP : g8-ad.group8.lan
Scope : /26
Range : –
Excluded: –
Some services : Backup, Anti virus, Nsclient….

8. Operating Systems and Services in Company usage
The second server: ( /29)
File server : sharing data and assign permission
There are 5 folder Common, Finance, HR, IT and Marketing
Assign permission for manager and staff
Disk quotas : limited space for clients
Home_user : 60GB(one user 5GB)
Data : 122GB Common(42GB)and Finance, HR, IT and Marketing(20GB)
Windows 7 : setup as clients
IP from DHCP server

9. Operating Systems and Services in Company usage
Linux : There are three machines using Red Hat 6
First server: Web server and FTP server( /26)
Web server :
: Joomla website (port 443)
movie.group8.lan : Movie website (port 80)
flowershop.group8.lan: Flower Shop (port 80)

10. Operating Systems and Services in Company usage
FTP server :
Use service pure-ftpd (download from internet)
There are four groups (department of client)
There is a directory and has four sub-directories for clients can download and upload
Quota: 3GB for each (IT and Finance Department) and 2GB for each (HR and Marketing Department)

11. Operating Systems and Services in Company usage
Second server: Mail and Webmail ( /26)
Mail server using Zimbra (download from internet)
Webmail name g8mail.group8.lan and using security port (https or 443)
Authentication with certificate (log fail only 3 time)
There are three groups user IT, HR, Finance and Marketing department

12. Operating Systems and Services in Company usage
Third server: setup as firewall, VPN, Proxy server, DHCP Relay Agent and Monitoring
IP : /29 LAN Server interface
/26 LAN Client interface
/29 LAN DMZ interface
Rule firewall
Allow client request IP from DHCP server, use DNS, Join Domain, Access file sever, .etc.
Allow LAN Client, LAN Server, LAN DMZ can access to internet by using proxy
NAT Post Routing and Pre-routing
Allow DNS local can forward to DNS public
Allow VPN, etc.

13. Operating Systems and Services in Company usage
VPN server
Use packet openvpn-as RHEL5.x86_64.rpm (download from internet)
Open VPN provide IP address to clients network address range /26 (Secure IP address of VPN)
Allow Open VPN’s users use local DNS and access File Server (IP address ) by use port 138,139,443,445,538
and port 943 with protocol TCP and UDP.

14. Operating Systems and Services in Company usage
Proxy server: (Port 3128)
Use service Squid
Sharing internet to client and filter contents
Proxy configure authentication with all user in AD
All staff can’t access to website but Manager has full access to any websites
Delay pool (Limit speed download and upload)
Client can download only 10KB/s.
Manager can download only 20KB/s

15. Operating Systems and Services in Company usage
DHCP Relay Agent
Relay from LAN Client interface to LAN Server interface in the router (Enable client gets IP address)
Monitoring
Configure with Nagios
Monitor on hosts and services (Up or Down)

16. Company Security Network Security Firewall (IPTABLE)
DMZ : allow external can access webhosting
Proxy - Squid (User Authentication)
Configure SSL Web Application for hosting
VPN (authentication, Provide password for Open VPN’s users )
Antivirus

17. Company Security Data Security Permission data share
Back up local (configuration)
Backup Network (data ,file share and configuration …….)

18. Router and Switch (CISCO and HP)
- Sub interface
- Dynamic NAT
2. Switch:
- VLAN
- Trunk port
- Native VLAN

19. Problems and Solutions
Network Problem:
Configure router CISCO
Network monitoring
System Problems:
Can not map home folder to the clients on Windows bit standard
Can not install Acronis on Win bit standard
Can not install packages on Redhat 6,
Firewall machine getting down, full of Kdump file
Clients VPN can not login to the server

20. Problem and Solution System Solution:
Reinstall Windows Server bit
Changing the repository on install the packages from the CD (Redhat 6)
Reinstall the new Redhat 6 with non GUI
Checking on iptables rules

21. Completed and Uncompleted Tasks
Task Completed:
File Server and Quota
Map home folder, and Map drive
Assigned Permission to Each directory
Setting Quota
AD, DNS, DHCP
Domain Controller
Create users and Groups
DNS update automatically from DHCP server (DDNS)
Provide IP address from DHCP server to clients

22. Completed and Uncompleted Tasks
Web Server
Creating hosting website (3 websites), one with SSL
Proxy Server
Sharing Internet
Blocking domain
Limit Upload and Download Bandwidth
User Authentication
5. File Transfer Protocol (FTP)
All staffs can read data in their department
Manager have full control on their department
Only manager can delete the data on their department

23. Completed and Uncompleted Tasks
6. Virtual Private Network
Allow VPN’s clients to access from Outside network
7. Mail
Set up mail and webmail server with SSL (SSL Encryption and Certificate)
8. Backup
Backup data on each department
Backup Configuration file on Mail, Webmail, Proxy, Firewall, FTP…

24. Completed and Uncompleted Tasks
1. File Transfer Protocol
Clients Can not access FTP server from Outside network
Web server
Can not hosting webmail to Internet
Mail and Webmail Server

25. Experiences of Virtual Company
Non _Technical
- Understand the important of team work
Understand how to adapt myself to work in team
Solidarity in team
To know how to deliver task for members in group
To know about responsibility for our task
To know about tasks organization and task priority
Improve self-learning by using searching skill.

26. Experiences of Virtual Company
Related _Technical
Get familiar with the installation of services such as Proxy, File server, DNS, DHCP especially DMZ, mail hosting, web hosting, webmail hosting, Firewall and network monitoring, etc.
Understand Network and Data security
Understand how to designed Network Infrastructure
Understand IP sub netting to assign for each computer (LAN)

27. Referent Service Virtual Company

28. Thanks for Your Paying Attention!
Question and Answer
Thanks for Your Paying Attention!