1 Semester 3 Threaded Case Study Royal Palm A/3B Ip Siu Tik Tsang Man Wu Wai Hung Wong Lai Ting

2 Wide Area Network

3 LAN Area Network

4 LAN Wiring Scheme

5

6 Addressing and Network Management Class A private address /20 is assigned 7 subnets for two administrative network and five student network /23 - Administrative Network /23 - Administrative Network /23 - Student Network /23 - Student Network /23 - Student Network /23 - Student Network /23 - Student Network

7 Addressing and Network Management Administrative Network /23Router Interface E0 (Admin LAN) > Switches Domain Name Server Server Web Server Administration File Server Administration Server > Staff PC's Static Addresses /23Router Sub-Interface E0 (Admin LAN) > Staff PC's Static Addresses

8 Addressing and Network Management Student Network 83 classrooms and each classroom support maximum 24 computers. 1992(83X24) IP addresses are needed

9 Addressing and Network Management /23Router Interface E1 (Student LAN) Library Server Application Server Student File Server DHCP Server Router Sub-Interface E1 (Student LAN) Router Sub-Interface E1 (Student LAN) Router Sub-Interface E1 (Student LAN) Router Sub-Interface E1 (Student LAN) > DHCP addresses for IDF > DHCP addresses for IDF > DHCP addresses for IDF > DHCP addresses for IDF > DHCP addresses for IDF 5

10 Security Access Lists 101: Student VLAN has no access to admin server or admin file server -- E0 in – router(config) # access-list 101 permit ip any router(config )# acces-list 101 deny ip any any router(config )# interface e0 router(config-if) # ip access-group 101 in

11 Security Access Lists 102: Any traffic leaving administration VLAN not from a valid address on that VLAN is denied Permit Web Server (port 80), DNS(port53) and SMTP(port 25) to be accessible from the student VLAN --E0 out – router(config) # access-list 102 permit tcp any any eq 80 router(config) # access-list 102 permit tcp any any eq 25 router(config) # access-list 102 permit tcp any any eq 53 router(config) # access-list 102 permit udp any any eq 53 router(config) # access-list 102 deny ip router(config) # access-list 102 permit ip any any router(config) # interface e0 router(config-if) # ip access-group 102 out

12 Security Access Lists 103: Any traffic leaving student VLAN not from a valid address on that VLAN is denied --E1 in— router(config) # access-list 103 permit ip any router(config) # access-list 103 permit ip any router(config) # access-list 103 permit ip any router(config) # interface e1 router(config-if) # ip access-group 103 in

13 Internet Connectivity Double firewalls for protection Access Control Lists (ACLs) is utilized in routers tcp port 53(DNS service), 80 (web server) and 110( service) available only Admin server cannot be accessed by student VLAN

14 Internet Connectivity Side effect of using ACLs: increase the latency of traffic increase the CPU utilization of the routers ACL latency effect slow down accessing to , internet & intranet browsing, log on process

15 User Counts Location Student/Curriculum Runs Administrative/Teacher Runs Total Runs Building Building Building Building Building Science building, 628 Computer building double portable classroom Multipurpose building Cafeteria 9312 Total332

16 ~The End~