by H.B.O. Systems July 13, 2000 Presenters: Janet Hughes, John Banister, Karen Oliver

Design Team Goals á Provide the best QoS for cost á Facilitate high quality training á Assist in planning for future growth and development: á 1000% LAN growth á 100% WAN growth á Network life span of 7 to 10 years

Local Area Network (LAN) Infrastructure 3 Servers –1 Enterprise Server Student & Staff Directory, Application Services (Microsoft Office, etc.), DNS/ , Library Services, Novell Netware –2 Workgroup Servers Student - Curriculum Applications Administrative - Grades, Attendance, Student Information

LAN Infrastructure Continued Main Distribution Facility (MDF) located near Point Of Presence (POP) Vertical Cable to Intermediate Distribution Facility and Portable Classrooms –Fiber –Meet EIA/TIA 568 cable standards Horizontal Cable –Minimum of Cat. 5 Unshielded Twisted Pair (UTP) cable –Accommodate 100 Mbps –Meet EIA/TIA 568 cable standards

Classrooms –4 Cat. 5 UTP drops 24 student stations with at least 1 Mbps bandwidth Each student drop will have a 12 port hub connected 1 teacher station with at least 1 Mbps bandwidth Lockable Cabinets LAN Infrastructure Continued

Multi-Purpose Building Double Portable Classrooms Building A West Building A East Point of Presence (POP) Main Distribution Facility (MDF) Intermediate Distribution Facility (IDF)

1E 2E 3E 4E 5E 6E 100 Base SX - Multi- Mode Fiber Backbone To IDF-1 To IDF-2 Building A East - MDF Physical Topology Main Distribution Facility (MDF) & Point of Presence (POP) Indicates 100BaseTX To Classrooms 7E 8E9E 10E 11E 12E Indicates Fourplex Wall Mounts

Main Distribution Facility (MDF) This is an example of a ladder rack

Building A West - IDF-2 Physical Topology 100BaseSX Fiber Cable From MDF Indicates BaseTX To Each Room Indicates Fourplex Wall Mounts IDF 13W 2W3W4W5W6W7W 8W9W10W11W12W 1W 14W15W16W17W18W 19W20W21W22W23W24W25W

Building A West - IDF-2 Physical Topology - Option 2 100BaseSX Fiber Cable From MDF Indicates BaseTX To Each Room Indicates Fourplex Wall Mounts IDF

Multi-Purpose Building - IDF-2 Topology Portable Classrooms 100BaseSX -Fiber Backbone Coming From MDF Going To IDF Indicates Fourplex Wall Mounts Indicates BaseTX Cables To Each Classroom Indicates Switch in each portable (IDF ) Indicates 100BaseSX from IDF to Portable Classrooms

Example of a distribution rack which will be placed in the Main Distribution Facility (MDF) and the Intermediate Distribution Facility (IDF) Items that may be placed in a distribution rack are: Router Switches Hubs File Servers

Typical Classroom Computer Layout Classroom Printer Teacher Station Instructor Drop Decorative Raceway Containing Wire Runs for Student Workstations Classroom Hubs Fourplex Wall Mounts

WAN Topology to Mountain Sky Elementary 4-T1 Lines Mbps each Cisco 7576 Router Serial Link Mountain Sky Elementary Cisco 7576 Router Serial Link Sunnyslope CO Shaw Butte School Cisco 7576 Router Serial Link Phoenix N.W. C.O. Data Center Cisco 7576 Router Serial Link Greenway C.O. Service Center 1 T1 Line Mbps

Greenway C.O. Service Center Cisco 7576 Router Enterprise Server Administrative Server IDF-1 IDF-2 Indicates 100 Base SX from switch to IDF Indicates 100BaseTX cable Virtual Local Area Network 1 (VLAN 1) Virtual Local Area Network 2 (VLAN 2) Student/Curriculum Server ( port hubs)

Located in MDF 100BaseSX Fiber from MDF to IDF Cisco 5500 stackable Port Switch Indicates four 100BaseTX cables Each classroom with have port hubs

Located in MDF 100 Base SX Fiber from MDF to IDF IDF-1 Indicates four 100BaseTX cables Each classroom will have port hubs Cisco port switch - 1 in each portable classroom

Users will be restricted through the use of VLAN’s Every administrative node gains server rights through a user password Access outside the LAN is through the District Office Outside access to LAN is prohibited through the use of access lists Firewalls are utilized through access lists locally and globally

IP ADDRESS ASSIGNMENTS S0 S1 S2 District Office Greenway Center SunnySlope S0 E0 E1 Mountain Sky Curriculum Subnet Address Administrative Subnet Address

Network Address Translation Network Address Translation (NAT) is designed for IP address simplification and conservation, as it enables private IP internetworks that use nonregistered IP addresses to connect to the Internet. NAT operates on a router, usually connecting two networks together, and translates the private (not globally unique) addresses in the internal network into legal addresses before packets are forwarded onto another network. As part of this functionality, NAT can be configured to advertise only one address for the entire network to the outside world. This provides additional security, effectively hiding the entire internal network from the world behind that address. NAT has the dual functionality of security and address conservation, and is typically implemented in remote access environments.

Access List Policy External Threats: Internet connectivity will utilize a double firewall with all internet-exposed applications residing on a public backbone network. All inbound traffic from the internet into the school’s private network will not be blocked by the double firewall. No traffic from the curriculum LAN will be permitted into the Administrative LAN.

Access List Code RouterA(Config)# Access-list 100 permit ip RouterA(Config)# Access-List 100 permit ip RouterA(Config)# Access-List 100 deny ip RouterA(Config)# Access-List 100 permit ip RouterA(Config)# Int s0 RouterA(Config-if)# Access-group 100 in

RouterA(Config)#Access-List 101 deny ip RouterA(Config)#Access-List 101 permit ip RouterA(Config)#Int e0 RouterA(Config-if)#Access-group 101 in Access List Code (con’t)

1 Router 25, –Cisco File Servers 12, –Super Micro Intel Pentium III Xeon Mhz Slot Switches 83, –Cisco Port Switches 4, –Cisco 1900 with Enterprise software 44 Hubs –Cisco 400 Fast Hubs - 12 port

3 Uninterupted Power Service UPS 1, –Back Ups Pro Patch Panels ft. 100BaseSX Cable 2, ,360 ft. Cat. 5 UTP 100BaseTX 2, Equipment Racks Lockable Cabinets(250.00ea) 11,000.00

Decorative Molding Wire Outlets 4, Raceway System 3,080.00

Staff Training 60, Installation ( 200 drops x ) 50, Equipment 40,000.00

T-1 Line Installation 1, T-1 Line Service - per year 6, Construction 25, Installation 45,000.00

Equipment 146, Construction 78, Supplemental 150, Total $375,171.94

Disadvantages Intensive initial setup – VLANS/Trunking Training –Costs/Logistics Portable Classrooms

Advantages Hierachical design Supports multiple platforms IP Ease of security through VLAN’s & Access Lists –Increase bandwidth distribution 1 Gb multi-mode fiber to increase bandwith and speed No extra fiber run 100 Mbps copper cable which in creases bandwidth over 10 Mbps