Top Down Network Design

GROUP: Vishnupriya, Asha, Mariya, Suhaib

• 

Introduction

The aim of the project is to provide network infrastructure for a travel agency named “there4travel”. there4travel is a new travel agency located at Christchurch airport which has got branch in Nelson. They provide both domestic as well as international travel bookings and tour packages. The aim of the project is to provide a network design for the travel company.

What services or applications they need ?

• Web Server
• Mail Server
• File Server
• Windows Core Server 2016
• Print Server
• Antivirus Server Software
• Domain Name System (DNS)
• Dynamic Host Configuration Protocol (DHCP)
• Virtual Private Network (VPN)
• Active Directory
• Network Monitoring System
• Firewall
• Cloud Server
• Secure Sockets Layer (SSL) 

Design ideas in a brief overview

• It could be better to add VPN for accessing network from any part of the world
• It could be a good idea to implement Network Monitoring System tools such as LogicMonitor, Kaseya VSA and ManageEngine OpManager. Network Monitoring tools will find availability and functions of computers and network services.
• It is necessary to install antivirus software or a spyware protection program to prevent unauthorized access from external resources.
• Encryption should be done to make data more secure to provide privacy and integrity for data communication between networks.

How do you initially think that you would design and build this?

The Organization is relatively small and is based in Christ church with a branch at Nelson. It would be enough to utilize the private IP range 192.168.0.0 – 192.168.255.255. This would ensure security of the network as it includes the network from outside access. The branch at Christ church has departments such as Sales, Marketing, HR and Management. The devices such as Computers, Printers, Scanners and other equipment utilized in one department need to be segregated from the devices in the other departments by the practice of subnetting. The network is segmented into 8 subnets for utilization in the organization.

In addition to this, the servers utilized in the Organization such as the Web server, Mail server, File server and DNS server are placed in a separate subnet to enhance security. The servers need to be accessed from the outside network and the branch at Nelson. This is achieved by utilizing NAT (Network Address Translation). The servers utilize static IP address and the systems are assigned IP addresses by utilizing DHCP.  An internal and external firewall is utilized to secure the network. A proxy server is utilized to secure the Web server as it is accessible from the internet.

The management of features of the network such as permissions and access are done by the use of Active Directory. The network is monitored by the use of a Network monitoring system. This helps to prevent and fix outages and other network issues. A similar network implementation is created for the branch at Nelson. The private IP range 172.16.0.0 – 172.16.255.255 is utilized in the Nelson branch.