Threaded Case Study of Bangladesh Internet Press Ltd. (BIPL)

1. Threaded Case Study ofBangladesh Internet Press Ltd.(BIPL) By: Md. Ikbal Zavid Abul Kalam Asad Supervise By: Debanon Datta Legal Main Contact, CNAP Ahsanullah University of Science and Technology(AUST) Tejgaon, Dhaka - 1215

2. LAN Specifications: • Transport Speed: 100BaseT & 100BaseFx • Horizontal cabling shall be CAT6 UTP and will have the capacity to accommodate 100 mbps • Vertical (Backbone) cabling shall be Fiber optic multimode cable. • The cabling infrastructure shall comply with EIA/TIA 568 standards.

3. LAN MDF A Main Distribution Facility (MDF) room will be established as the central point to which all LAN cabling will be terminated. It will be the point of presence for the WAN Network connection. All major electronic components for the network, such as the routers and LAN swithces will be housed in this location. LAN IDF Intermediate Distribution Facility (IDF) rooms will also be established, where horizontal cabling lengths exceed EIA/TIA recommended distances. This site already has a conduit infrastructure running between the buildings. (Four) IDF's will service their geographical area and be connected directly to the MDF in a Star or Extended Star topology.

4. Design Goals • Functionality: • The design will provide Bangladesh Internet Press Limited (BIPL)'s Local Area Network (LAN) as well as Wide Area Network (WAN) link for data communication with other branch of the office and the Internet connectivity. • 2. Scalability: • The design will allow the network to grow without any major changes in the overall design. • 3. Adaptability: • The layered design will allow the network to adapt to and implement the future network technology. • 4. Manageability: • Network monitoring and management will be taken into account for ensuring the day to day network stability.

5. ROUTER Administrative Servers Application Servers CURRICULUM ADMIN Library Servers Other servers MDF Switch CAT6 UTP CAT6 UTP Fiber optic cable CAT6 UTP HUB HUB CAT6 UTP IDF Switch CAT6 UTP Consultant Workstations Developer Workstation CAT6 UTP Programmer Workstation HUB Marketing Workstations HUB CAT6 UTP Operator Workstation HR Workstation Logical Diagram:

6. Physical Diagram

7. MDF Diagram

8. IDF Diagram

9. Equipment List:

10. TYPE OF WIRING LOCATION Fiber MM MDF to IDF CAT5 UTP Switches to Hubs; Hubs to Workstations CABLE SPECIFICATIONS At BIPL, we will be using two types of cabling: Fiber-optic multimode cable for the VCC (Vertical Cross Connect or Backbone) runs and CAT6 UTP (Unshielded Twisted Pair) for the HCC (Horizontal Cross Connect) runs. FIBER-OPTIC CABLE: Fiber-optic multimode cable will be run from the MDF (Main Distribution Facility) to IDFs (Intermediate Distribution Facilities). CAT6 UTP: CAT6 UTP (Unshielded Twisted Pair) will be used from all switches to hubs and from all hubs to workstations in the classrooms. This wire will constitute the majority of expense for the wiring due to the amount of usage. See the table below: We estimate the following meter based on distances in our diagram of BIPL:

11. Destination Cable ID Type of Cable Length (Meters) IP Address DNS Server S-1 CAT6 15 192.168.4.2 Mail Server S-2 CAT6 15 192.168.4.3 Print Server S-3 CAT6 20 192.168.4.4 Application Server S-4 CAT6 22 192.168.4.5 DHCP Server S-5 CAT6 22 192.168.4.6 Other Server S-6 CAT6 25 192.168.4.7 IDF1 IDF1-1 Multimode Fiber 170 192.168.4.10 – 192.168.4.35 IDF2 IDF2-1 Multimode Fiber 210 192.168.5.1 – 192.168.5.40 IDF3 IDF3-1 Multimode Fiber 160 192.168.6.1 – 192.168.6.40 IDF4 IDF4-1 Multimode Fiber 300 192.168.8.1 – 192.168.8.254 Cut Sheet

12. IP Addressing Admin Network: 192.168.4.0/22 Curriculum Network: 192.168.8.0/22 Subnet Mask: 255.255.252.0 The uplink ports to each room will be connected via CAT6 cabling to the appropriate IDF running at 100Mbps. The switches in each IDF will be connected directly to the head-in router at the office via multi-mode fiber optic cable. Admin Network: 192.168.4.0/22 All IP addresses on the Admin network will be statically assigned. The address of the workstations will be assigned based on the IDF where the machine connects. Curriculum Network 192.168.8.0/22 All IP addresses on the Curriculum network will be dynamically assigned. The pool of available IP addresses will be maintained at the district office DHCP server and pushed down to the backup DHCP server maintained on site on an hourly basis. The IP addresses are assigning based on building location with IDF4. The IP address range available for the Curriculum workstations will be 192.168.8.1-192.168.8.254

13. Servers DNS: Bangladesh Internet Press Ltd.(BIPL) contain a host for DNS that will maintain a complete directory of all staff personnel and staff population for that location. ADMINISTRATIVE SERVER: The Admin server which will house the staff tracking, attendance, grading and other administration function. It will only be made available to the staff. APPLICATION SERVER: All computers applications will be housed in a central server at the BIPL. As applications such as Word processing, Excel, PowerPoint are needed, they are retrieved from the application server. These servers will be made available to anyone at the school site. OTHER SERVER: It will be considered departmental (workgroup) servers and will be placed according to user group access needs.

14. Access Control List • Access lists are very useful in implementing security on our network. Although the use of passwords, callback equipment, and physical security devices are helpful, they often lack the level of security needed in larger networks. The best advantage is that access lists allow the administrator to filter the packet flow in and out of the router interfaces. Access lists can offer all of the following: • Identify packets for priority • Identify packets for custom queuing • Restrict or reduce the contents of routing updates • Provide IP traffic dynamic access control with enhanced user authentication using the lock-and-key feature • Identify packets for encryption • Identify Telnet access to the router virtual terminals • (Cont.)

15. Access Control List Extended access lists will be employed to ensure administrator network and district network security. This list will applicable to the BIPL router for following works: • Allow Admin Network 192.168.4.0 full access to any of the servers located at BIPL • Not allow Curriculum Network to use FTP. • Allow Curriculum Network to use the Internet • Deny all students access to the Admin network/Admin server/DNS server

16. Security •  By utilizing ACLs on the routers, all traffic from the curriculum LANs will be prohibited on the admin LAN. • Applications such as E-Mail and Directory services will be allowed to pass freely since they pose low risk. • A user ID and Password Policy will be published and strictly enforced on all computers in the District. • All computers in the District network will have full access to the Internet. •  All ACLs will be controlled at the district office.

17. Internet • All Internet connectivity will be controlled through the BIPL office. • This connection will be highly controlled utilizing a double firewall implementation with a public network (Ethernet backbone) established for services that will be exposed to the Internet. • These services include E-mail, Domain Name Services (DNS) and a World Wide Web server. • All connectivity that is initiated from the Internet to the internal District network will be protected via ACLs on the routers that make up the doule firewall architecture.

18. IGRP IGRP is a distance-vector dynamic routing protocol. --IGRP will exchange its routing tables with its directly connectod neighbors every 90 seconds. --Flash updates, triggered by topology changes are also sent. The fjollowing services of commands will configure the router to router using IGRP protocol as well as set up the IP addresses for the router interfaces.

19. THANK YOU