1. The Washington School District Mike, Mark, Joy, Armando, & Mona

2. Overview n R E Miller, Acacia, Desert View, & Mountain Sky n Class B Address n WAN - PPP, Frame Relay, ISDN, OSPF n LAN - Extended Star, TCP/IP, IGRP n Security n Cost

3. Addressing n Class B - 145.29.0.0 n VLANS for Administrative and Students n Administrative and network printers will be static n Students will use DHCP

4. Class B 145.29.0.0 Subnet mask - 255.255.255.0 Used 8 bits for subnets (total usable 254) 8 Bits left for hosts/subnet (total usable 254) 145.29.1.0 - 145.29.10.0 Wan routers Desert View 145.29.20.0 - 145.29.24.0 E0=145.29.20.1 Admin Addresses 145.29.20.100 - 145.29.20.254 Students 145.29.21.0 Printers 145.29.22.0

5. Mountain Sky 145.29.30.0 - 145.29.34.0 E0=145.29.30.1 Admin Addresses 145.29.30.100 - 145.29.30.254 Students 145.29.31.0 Printers 145.29.32.0 RE Miller 145.29.35.0 - 145.29.39.0 E0=145.29.35.1 Admin Addresses 145.29.35.100 - 145.29.35.254 Students 145.29.36.0 Printers 145.29.37.0 Acacia 145.29.25.0 - 145.29.29.0 E0=145.29.25.1 Admin Addresses 145.29.25.100 - 145.29.25.254 Students 145.29.26.0 Printers 145.29.27.0

6. WAN n T1 using Frame Relay to the Internet n 4 T1’s between District Office, Shaw Butte, Service Center –upgrade to DS3 for growth –PPP n T1 from each school to its District hub –Backup TSU ESP n Each District hub will be an Area Border Router; this provides for the requirement of one AS number n Additional router at Data Center going to the Internet, along with access lists fulfills requirement for double firewall.

7. Area Border Routers

9. LAN –Gigabit Backbone –Fiber from MDF to each BLDG –Fiber from IDF to IDF and from MDF to IDF within building –Router connects WAN link (T1) and provides security and routing for VLANS

10. LAN (cont’d) n MDF - switch with router capabilities –Server Central n DNS/DHCP n Email n Administrative n Student n Print n Application and CD Stack n Misc. - DLT Tape Drives, UPS, Racks

11. LAN (cont’d) n IDF –7 drops to each class –28 ports - students (24), teacher (3), network printer (1) –100Mbps to each node –full duplex

12. RE Miller

13. RE Miller

14. RE Miller (cont’d)

16. Security n Administrative user ID and Password n VLANS n Access Lists

17. VLANS n VLAN 1 - Administration n VLAN 2 - Students n Configure ports on switch for each VLAN –use ethernet sub interfaces - E0/1 n Configure uplinks to trunk each VLAN n Full duplex n Use Spanning Tree Protocol (STP) –creates a transparent switch

18. VLANS (cont’d) n IGRP - AS# (Internet Assigned Numbers Authority) n Configure router with virtual interfaces –virtual ethernet sub interfaces must be configured to match switch ethernet sub interfaces –this is needed because of the 5500 series router/switch we are using

19. Access Lists n Used for double firewall n WAN –use access lists to allow traffic from Internet and Intranet to access servers located in DMZ –examples: n access-list 101 permit tcp any any eq 80 in S1 n access-list 101 permit tcp any any eq 25 in S1 n access-list 101 permit tcp any any eq 53 in S1 n access-list 101 permit tcp any any eq 21 in S1 n access-list 101 deny tcp any any n access-list 101 deny udp any any n access-list 102 permit tcp any any eq 80 in E1 n access-list 102 permit tcp any any eq 25 in E1 n access-list 102 permit tcp any any eq 53 in E1 n access-list 102 permit tcp any any eq 21 in E1

20. Access List - LAN n Access-list 105 deny tcp student subnet to administrative server and deny student access to administrative subnet n example: –access-list 105 deny tcp 145.29.21.0 255.255.0.255 145.29.20.22 255.255.0.0 –Access list 105 deny tcp 145.29.21.0 255.255.0.255 145.29.20.0.0 255.255.0.255 –access-list 105 permit any any –applied on E0 interface inbound

21. Cost