340 likes | 546 Views
Mountain Sky Elementary. Network Proposal. by. H.B.O. Systems. July 13, 2000. Presenters : Janet Hughes, John Banister, Karen Oliver. Design Team Goals. Provide the best QoS for cost Facilitate high quality training
E N D
Mountain Sky Elementary Network Proposal by H.B.O. Systems July 13, 2000 Presenters: Janet Hughes, John Banister, Karen Oliver
Design Team Goals • Provide the best QoS for cost • Facilitate high quality training • Assist in planning for future growth and development: • 1000% LAN growth • 100% WAN growth • Network life span of 7 to 10 years
Local Area Network (LAN) Infrastructure • 3 Servers • 1 Enterprise Server • Student & Staff Directory, Application Services (Microsoft Office, etc.), DNS/E-mail, Library Services, Novell Netware • 2 Workgroup Servers • Student - Curriculum Applications • Administrative - Grades, Attendance, Student Information
LAN Infrastructure Continued • Main Distribution Facility (MDF) located near Point Of Presence (POP) • Vertical Cable to Intermediate Distribution Facility and Portable Classrooms • Fiber • Meet EIA/TIA 568 cable standards • Horizontal Cable • Minimum of Cat. 5 Unshielded Twisted Pair (UTP) cable • Accommodate 100 Mbps • Meet EIA/TIA 568 cable standards
LAN Infrastructure Continued • Classrooms • 4 Cat. 5 UTP drops • 24 student stations with at least 1 Mbps bandwidth • Each student drop will have a 12 port hub connected • 1 teacher station with at least 1 Mbps bandwidth • Lockable Cabinets
Building A East Main Distribution Facility (MDF) Point of Presence (POP) Building A West Intermediate Distribution Facility (IDF) Building A East Double Portable Classrooms Multi-Purpose Building Mountain Sky Elementary Building Layout
1E Building A East -MDF Physical Topology 2E Main Distribution Facility (MDF) & Point of Presence (POP) 3E 5E To IDF-1 4E 7E 6E 8E 9E 100 Base SX - Multi- Mode Fiber Backbone 10E 12E 11E Indicates 100BaseTX To Classrooms Indicates Fourplex Wall Mounts To IDF-2
Main Distribution Facility (MDF) This is an example of a ladder rack
Building A West - IDF-2 Physical Topology 100BaseSX Fiber Cable From MDF Indicates 4 -100BaseTX To Each Room Indicates Fourplex Wall Mounts IDF 1W 2W 3W 4W 5W 6W 7W 12W 11W 10W 9W 8W 13W 14W 15W 16W 17W 18W 25W 24W 23W 22W 21W 20W 19W
Building A West - IDF-2 Physical Topology - Option 2 100BaseSX Fiber Cable From MDF Indicates 4 -100BaseTX To Each Room Indicates Fourplex Wall Mounts IDF
Multi-Purpose Building - IDF-2 Topology Indicates Fourplex Wall Mounts Indicates 4 -100BaseTX Cables To Each Classroom Indicates Switch in each portable (IDF) 100BaseSX -Fiber Backbone Coming From MDF Going To IDF Portable Classrooms Indicates 100BaseSX from IDF to Portable Classrooms
Example of a distribution rack which will be placed in the Main Distribution Facility (MDF) and the Intermediate Distribution Facility (IDF) Items that may be placed in a distribution rack are: Router Switches Hubs File Servers
Classroom Hubs Fourplex Wall Mounts Instructor Drop Decorative Raceway Containing Wire Runs for Student Workstations Teacher Station Classroom Printer Typical Classroom Computer Layout
WAN Topology to Mountain Sky Elementary Cisco 7576 Router Serial Link Phoenix N.W. C.O. Data Center Cisco 7576 Router Serial Link Greenway C.O. Service Center 1 T1 Line - 1.544 Mbps 4-T1 Lines - 1.544 Mbps each Cisco 7576 Router Serial Link Sunnyslope CO Shaw Butte School Cisco 7576 Router Serial Link Mountain Sky Elementary
MDF Logical Layout Greenway C.O. Service Center Cisco 7576 Router Indicates 100BaseTX cable Virtual Local Area Network 1 (VLAN 1) Virtual Local Area Network 2 (VLAN 2) Enterprise Server Student/Curriculum Server Administrative Server Indicates 100 Base SX from switch to IDF (33 - 12 port hubs) IDF-1 IDF-2
IDF-1 Layout Located in MDF Cisco 5500 stackable - 312 Port Switch 100BaseSX Fiber from MDF to IDF Indicates four 100BaseTX cables Each classroom with have 3 - 12 port hubs
IDF-2 Layout Located in MDF 100 Base SX Fiber from MDF to IDF IDF-1 Cisco 1900 - 24 port switch - 1 in each portable classroom Indicates four 100BaseTX cables Each classroom will have 3 - 12 port hubs
Security • Users will be restricted through the use of VLAN’s • Every administrative node gains server rights through a user password • Access outside the LAN is through the District Office • Outside access to LAN is prohibited through the use of access lists • Firewalls are utilized through access lists locally and globally
IP ADDRESS ASSIGNMENTS S0 S1 S2 District Office 190.191.10.3 190.191.10.2 190.191.10.1 Greenway Center 192.191.128.3 192.191.128.1 192.191.128.2 SunnySlope 191.191.0.1 191.191.0.2 191.191.0.3 S0 E0 E1 Mountain Sky 220.100.10.1 220.100.10.3 220.100.10.2 Curriculum Subnet Address 220.100.10.2 Administrative Subnet Address 220.100.10.3
Network Address Translation Network Address Translation (NAT) is designed for IP address simplification and conservation, as it enables private IP internetworks that use nonregistered IP addresses to connect to the Internet. NAT operates on a router, usually connecting two networks together, and translates the private (not globally unique) addresses in the internal network into legal addresses before packets are forwarded onto another network. As part of this functionality, NAT can be configured to advertise only one address for the entire network to the outside world. This provides additional security, effectively hiding the entire internal network from the world behind that address. NAT has the dual functionality of security and address conservation, and is typically implemented in remote access environments.
Access List Policy External Threats: Internet connectivity will utilize a double firewall with all internet-exposed applications residing on a public backbone network. All inbound traffic from the internet into the school’s private network will not be blocked by the double firewall. No traffic from the curriculum LAN will be permitted into the Administrative LAN.
Access List Code RouterA(Config)# Access-list 100 permit ip 192.191.128.0 0.0.0.255 RouterA(Config)# Access-List 100 permit ip 191.191.0.0 0.0.255.255 RouterA(Config)# Access-List 100 deny ip 190.191.10.1 0.0.0.0 RouterA(Config)# Access-List 100 permit ip 0.0.0.0 255.255.255.255 RouterA(Config)# Int s0 RouterA(Config-if)# Access-group 100 in
Access List Code (con’t) RouterA(Config)#Access-List 101 deny ip 200.100.10.3 0.0.0.0 RouterA(Config)#Access-List 101 permit ip 0.0.0.0 255.255.255.255 RouterA(Config)#Int e0 RouterA(Config-if)#Access-group 101 in
Equipment Costs • 1 Router 25,928.12 • Cisco 7576 • 3 File Servers 12,797.85 • Super Micro • Intel Pentium III Xeon - 400 Mhz. • 3 - 13 Slot Switches 83,376.00 • Cisco 5500 • 3 - 24 Port Switches 4,500.00 • Cisco 1900 with Enterprise software • 44 Hubs 895.00 • Cisco 400 Fast Hubs - 12 port
Equipment Costs Continued • 3 Uninterupted Power Service UPS 1,379.97 • Back Ups Pro 1400 • 3 Patch Panels 375.00 • 650 ft. 100BaseSX Cable 2,800.00 • 17,360 ft. Cat. 5 UTP 100BaseTX 2,664.00 • 6 Equipment Racks 660.00 • 44 Lockable Cabinets (250.00ea) 11,000.00
Equipment Costs Continued • Decorative Molding Wire Outlets 4,667.00 • Raceway System 3,080.00
Suplemental Costs • Staff Training 60,000.00 • Installation ( 200 drops x 250.00 ) 50,000.00 • Equipment 40,000.00
Construction Costs • T-1 Line Installation 1,500.00 • T-1 Line Service - per year 6,695.00 • Construction 25,600.00 • Installation 45,000.00
Total Costs • Equipment 146,375.94 • Construction 78,796.00 • Supplemental 150,000.00 Total $375,171.94
Disadvantages • Intensive initial setup • VLANS/Trunking • Training • Costs/Logistics • Portable Classrooms
Advantages • Hierachical design • Supports multiple platforms • IP • Ease of security through VLAN’s & Access Lists • Increase bandwidth distribution • 1 Gb multi-mode fiber to increase bandwith and speed • No extra fiber run • 100 Mbps copper cable which in creases bandwidth over 10 Mbps