1. by H.B.O. Systems July 13, 2000 Presenters: Janet Hughes, John Banister, Karen Oliver

2. Design Team Goals á Provide the best QoS for cost á Facilitate high quality training á Assist in planning for future growth and development: á 1000% LAN growth á 100% WAN growth á Network life span of 7 to 10 years

3. Local Area Network (LAN) Infrastructure 3 Servers –1 Enterprise Server Student & Staff Directory, Application Services (Microsoft Office, etc.), DNS/E-mail, Library Services, Novell Netware –2 Workgroup Servers Student - Curriculum Applications Administrative - Grades, Attendance, Student Information

4. LAN Infrastructure Continued Main Distribution Facility (MDF) located near Point Of Presence (POP) Vertical Cable to Intermediate Distribution Facility and Portable Classrooms –Fiber –Meet EIA/TIA 568 cable standards Horizontal Cable –Minimum of Cat. 5 Unshielded Twisted Pair (UTP) cable –Accommodate 100 Mbps –Meet EIA/TIA 568 cable standards

5. Classrooms –4 Cat. 5 UTP drops 24 student stations with at least 1 Mbps bandwidth Each student drop will have a 12 port hub connected 1 teacher station with at least 1 Mbps bandwidth Lockable Cabinets LAN Infrastructure Continued

6. Multi-Purpose Building Double Portable Classrooms Building A West Building A East Point of Presence (POP) Main Distribution Facility (MDF) Intermediate Distribution Facility (IDF)

7. 1E 2E 3E 4E 5E 6E 100 Base SX - Multi- Mode Fiber Backbone To IDF-1 To IDF-2 Building A East - MDF Physical Topology Main Distribution Facility (MDF) & Point of Presence (POP) Indicates 100BaseTX To Classrooms 7E 8E9E 10E 11E 12E Indicates Fourplex Wall Mounts

8. Main Distribution Facility (MDF) This is an example of a ladder rack

9. Building A West - IDF-2 Physical Topology 100BaseSX Fiber Cable From MDF Indicates 4 -100BaseTX To Each Room Indicates Fourplex Wall Mounts IDF 13W 2W3W4W5W6W7W 8W9W10W11W12W 1W 14W15W16W17W18W 19W20W21W22W23W24W25W

10. Building A West - IDF-2 Physical Topology - Option 2 100BaseSX Fiber Cable From MDF Indicates 4 -100BaseTX To Each Room Indicates Fourplex Wall Mounts IDF

11. Multi-Purpose Building - IDF-2 Topology Portable Classrooms 100BaseSX -Fiber Backbone Coming From MDF Going To IDF Indicates Fourplex Wall Mounts Indicates 4 -100BaseTX Cables To Each Classroom Indicates Switch in each portable (IDF ) Indicates 100BaseSX from IDF to Portable Classrooms

12. Example of a distribution rack which will be placed in the Main Distribution Facility (MDF) and the Intermediate Distribution Facility (IDF) Items that may be placed in a distribution rack are: Router Switches Hubs File Servers

13. Typical Classroom Computer Layout Classroom Printer Teacher Station Instructor Drop Decorative Raceway Containing Wire Runs for Student Workstations Classroom Hubs Fourplex Wall Mounts

14. WAN Topology to Mountain Sky Elementary 4-T1 Lines - 1.544 Mbps each Cisco 7576 Router Serial Link Mountain Sky Elementary Cisco 7576 Router Serial Link Sunnyslope CO Shaw Butte School Cisco 7576 Router Serial Link Phoenix N.W. C.O. Data Center Cisco 7576 Router Serial Link Greenway C.O. Service Center 1 T1 Line - 1.544 Mbps

15. Greenway C.O. Service Center Cisco 7576 Router Enterprise Server Administrative Server IDF-1 IDF-2 Indicates 100 Base SX from switch to IDF Indicates 100BaseTX cable Virtual Local Area Network 1 (VLAN 1) Virtual Local Area Network 2 (VLAN 2) Student/Curriculum Server (33 - 12 port hubs)

16. Located in MDF 100BaseSX Fiber from MDF to IDF Cisco 5500 stackable - 312 Port Switch Indicates four 100BaseTX cables Each classroom with have 3 - 12 port hubs

17. Located in MDF 100 Base SX Fiber from MDF to IDF IDF-1 Indicates four 100BaseTX cables Each classroom will have 3 - 12 port hubs Cisco 1900 - 24 port switch - 1 in each portable classroom

18. Users will be restricted through the use of VLAN’s Every administrative node gains server rights through a user password Access outside the LAN is through the District Office Outside access to LAN is prohibited through the use of access lists Firewalls are utilized through access lists locally and globally

19. IP ADDRESS ASSIGNMENTS S0 S1 S2 District Office 190.191.10.3 190.191.10.2 190.191.10.1 Greenway Center 192.191.128.3 192.191.128.1 192.191.128.2 SunnySlope 191.191.0.1 191.191.0.2 191.191.0.3 S0 E0 E1 Mountain Sky 220.100.10.1 220.100.10.3 220.100.10.2 Curriculum Subnet Address 220.100.10.2 Administrative Subnet Address 220.100.10.3

20. Network Address Translation Network Address Translation (NAT) is designed for IP address simplification and conservation, as it enables private IP internetworks that use nonregistered IP addresses to connect to the Internet. NAT operates on a router, usually connecting two networks together, and translates the private (not globally unique) addresses in the internal network into legal addresses before packets are forwarded onto another network. As part of this functionality, NAT can be configured to advertise only one address for the entire network to the outside world. This provides additional security, effectively hiding the entire internal network from the world behind that address. NAT has the dual functionality of security and address conservation, and is typically implemented in remote access environments.

22. Access List Policy External Threats: Internet connectivity will utilize a double firewall with all internet-exposed applications residing on a public backbone network. All inbound traffic from the internet into the school’s private network will not be blocked by the double firewall. No traffic from the curriculum LAN will be permitted into the Administrative LAN.

23. Access List Code RouterA(Config)# Access-list 100 permit ip 192.191.128.0 0.0.0.255 RouterA(Config)# Access-List 100 permit ip 191.191.0.0 0.0.255.255 RouterA(Config)# Access-List 100 deny ip 190.191.10.1 0.0.0.0 RouterA(Config)# Access-List 100 permit ip 0.0.0.0 255.255.255.255 RouterA(Config)# Int s0 RouterA(Config-if)# Access-group 100 in

24. RouterA(Config)#Access-List 101 deny ip 200.100.10.3 0.0.0.0 RouterA(Config)#Access-List 101 permit ip 0.0.0.0 255.255.255.255 RouterA(Config)#Int e0 RouterA(Config-if)#Access-group 101 in Access List Code (con’t)

25. 1 Router 25,928.12 –Cisco 7576 3 File Servers 12,797.85 –Super Micro Intel Pentium III Xeon - 400 Mhz. 3 - 13 Slot Switches 83,376.00 –Cisco 5500 3 - 24 Port Switches 4,500.00 –Cisco 1900 with Enterprise software 44 Hubs 895.00 –Cisco 400 Fast Hubs - 12 port

26. 3 Uninterupted Power Service UPS 1,379.97 –Back Ups Pro 1400 3 Patch Panels 375.00 650 ft. 100BaseSX Cable 2,800.00 17,360 ft. Cat. 5 UTP 100BaseTX 2,664.00 6 Equipment Racks 660.00 44 Lockable Cabinets(250.00ea) 11,000.00

27. Decorative Molding Wire Outlets 4,667.00 Raceway System 3,080.00

28. Staff Training 60,000.00 Installation ( 200 drops x 250.00 ) 50,000.00 Equipment 40,000.00

29. T-1 Line Installation 1,500.00 T-1 Line Service - per year 6,695.00 Construction 25,600.00 Installation 45,000.00

30. Equipment 146,375.94 Construction 78,796.00 Supplemental 150,000.00 Total $375,171.94

31. Disadvantages Intensive initial setup – VLANS/Trunking Training –Costs/Logistics Portable Classrooms

32. Advantages Hierachical design Supports multiple platforms IP Ease of security through VLAN’s & Access Lists –Increase bandwidth distribution 1 Gb multi-mode fiber to increase bandwith and speed No extra fiber run 100 Mbps copper cable which in creases bandwidth over 10 Mbps