Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Building a SOHO Network Chapter 19

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Objectives Describe the major steps to consider when designing a SOHO network Describe and implement a SOHO network, including solving assorted problems Explain how security comes into play while building a SOHO network

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Overview

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Introduction to SOHO networks Small office/home office networks require careful design consideration Design needs to include structured cabling, wireless, operating systems, Internet connectivity, and network/system security Must consider servers, workstations, and printers as well

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Three parts to Chapter 19 Designing a SOHO network Building a network Security

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Designing a SOHO network

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Network design methodology –Steps to design and build a network –List of requirements: Define the network’s needs. Why are you installing this network? What primary features do you need? –Network design: What equipment do you need to make this happen? How should you organize it?

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Network design methodology (cont.) –Compatibility issues: Are you using existing equipment, applications, or cabling that have compatibility issues? –Internal connections: What type of structured cabling do you need? Does this network need wireless? –External connections: How do you connect to the Internet?

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Network design methodology (cont.) –Peripherals: How will peripherals come into play? Are you connecting any printers, fax machines, or scanners? –Security: How do you deal with computer, data, and network security?

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. MHTechED’s new network –Grown from 2 to 15 hosts and servers –Moved into new offices –Network is a mess! –Your job is to help design a new network

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.1 MHTechED’s gotten bigger.

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.2 Floor plan for the new MHTechEd

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Building the network

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Building a SOHO network –Design is usually simple –Usually minimal numbers of switches, routers, servers, and workstations –Key is to stick to methodology – the checklist

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Define the network needs –Determine size, location, other physical factors –Determine how many servers and what services are needed –Determine host and server operating systems –Determine software and hardware needs for unique users

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Network design –Quantifies needs for equipment, operating systems, and network applications Workstations Servers Equipment room Peripherals

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Network design (cont.) –Workstations One for each employee? Specific, standardized OS Variations in OS for unique users (i.e., Mac or Linux)

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Network design (cont.) –Servers Purpose and function Quantity Operating System Redundancy (clustering or failover) Virtualization Backups

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Network design (cont.) –Equipment room Size Location within facility Environmental factors (temperature, humidity, etc.) Physical access control Power Cabling to and from room

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Network design (cont.) –Peripherals Depend upon size and needs of SOHO network All-in-One devices (scanner, copier, fax) are common Networked to allow use by all users (dedicated NICs or shared from computer)

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.3 MHTechEd’s cool All-in-One machine

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Compatibility issues –Compatibility issues include Different network cabling types, connectors and devices Backward-compatibility issues Older vs. newer equipment

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Compatibility issues (cont.) –Issues affect interoperability of: Network devices Computers Applications Peripherals Cabling Connectors Other equipment

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.4 CAT 5e and CAT 6 drops in the MHTechED office

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Internal connections –Considerations include: Switches Structured cabling Electrical and environmental limits Wireless (WAP placement) VLANs IP address scheme

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Internal connections (cont.) –Switches Compatibility with network architecture VLAN and PoE features –Structured cabling Clearly labeled runs Length of all runs CAT ratings on all runs Floor plan showing all runs

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Internal connections (cont.) –Electrical and environmental limits Electrical wiring and load capacity Humidity Temperature Fire detection and protection Physical security

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.5 Dedicated circuit

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Internal connections (cont.) –Wireless WAP placement Signal strength/power Encryption/authentication –VLANs Segregate particular users, computers or networks on their own VLAN Prevent broadcast traffic from spanning networks

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.6 Placement of WAP in network

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Internal connections (cont.) –Network management Servers on own VLAN Lights-out management (LOM) –IP address scheme Private/public IP addresses NAT DHCP vs. static

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.7 Lights-out management

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. External connections –External connections affected by: Router or external connection ISP selection and redundancy –Router selection Business class router Available ports Expandability for add-in connections –Additional Ethernet or fiber

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.8 Fixed 100BaseT ports on Cisco 2811

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure 19.9 Cisco HWIC Ethernet card

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure NETGEAR SFP

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. External connections (cont.) –ISP selection includes these considerations: Is there an existing connection into building? Which services offered and cost of ISP Type of connection out Guaranteed bandwidth/throughput Service commitment/uptime/reliability Security

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. ISPs and MTUs –Possible issues with ISPs and MTUs –Maximum Transmission Unit (MTU) for Ethernet is 1500 bytes Some systems set value to less –MTU mismatch: Ethernet connects to a WAN technology with different size MTU –Requires adjustment on systems to fix

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure Adjusting the MTU settings in Dr. TCP

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. ISPs and MTUs (cont.) –Path MTU Discovery (PMTU) Newer technology (2007) created to determine best MTU settings and fix mismatches between LANs and ISPs Adds “Don’t Fragment Flag” to IP packet Pings another device to test MTU settings and corrects if there is a mismatch Some devices block ICMP and prevent PMTU – Creates an “MTU black hole”

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Peripherals –Networked with Ethernet card –Shared from computers –All-in-One devices Printer/copier/fax/scanner –Considerations include: IP addressing (static or reserved addresses) Permissions Capacity/functionality

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure HP M9050

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Figure Location of fax machine and printer

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security overview –Not just an additional or final step –Integral part of all other steps –Integrate security into each design step throughout design and building process

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security considerations –List of requirements: What are the security needs? –Anti-malware on all systems –Firewall w/ACL capacity –Security from equipment theft –Wireless encryption –Wireless network isolation

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security considerations (cont.) –Network design: Ensure equipment satisfies requirements –Microsoft Security Essentials on all systems –Use built-in firewall on Cisco 2811 –Door locks, deadbolts, motion sensors all tied to security monitoring company –WPA Personal Shared Key –Verify that WAPs support isolation

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security considerations (cont.) –Compatibility issues: Will there be security issues with the older equipment? Can the old WAP support WPA2 PSK?

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security considerations (cont.) –Internal connections: What do we need to do to protect the internal network from threats and failures? –Verify anti-malware is installed and updated—install Microsoft Security Essentials and configure for automatic updates –Document the location of all PCs and their associated connections

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security considerations –Internal connections (cont.): What do we need to do to protect the internal network from threats and failures? (cont.) –Configure servers to use RAID 5 –For power failure, use four 5000-joule, rack- mounted standby power supplies in the equipment room: three for servers and one for all routers, switches, etc.

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security considerations –Internal connections (cont.): What do we need to do to protect the internal network from threats and failures? (cont.) –Install removable hard drives for backup –Contract for offsite backup –Configure domain for strict password security

Mike Meyers’ CompTIA Network+ ® Guide to Managing and Troubleshooting Networks, Third Edition (Exam N ) © 2012 The McGraw-Hill Companies, Inc. All rights reserved. Security considerations (cont.) –External connections: How do we connect to the Internet? –Network uses 2811 router’s firewall features, but must be kept up to date –What ACLs must be configured? –Peripherals: Not a traditional security issue, but be aware of security configuration issues and risks