Week 5 Individual Final Assignment
Galo Figueroa
NTC / 362
October 26th, 2017
Eric Winch

Week 5 Individual Final Assignment

I will begin by explaining the network’s current characteristics and components. KFF is comprised of three geographic locations in San Diego County, California. Their home office is located in La Jolla. The two other locations are in Del Mar and Encinitas. They have an OC 1 SONET using a T3 dedicated line connecting all three stores. This requires a fiber optic physical connection between stores since a T3 is equivalent to 28 T1 lines. This dedicated network is leased from the ISP and is guaranteed a continuous uninterrupted connection. This type of connection allows for a total of about 44736 Kbps and has 672 channels. KFF is using a 25Mbps connection to the internet.
All three KFF locations are using a linear bus topology using 100base T Ethernet, which means that Ethernet is used and allows for data transfer rates of up to 100Mbps. The file server, workstations and all equipment previously mentioned are connected to a linear cable. This type of LAN network has disadvantages that outweigh the advantages. One major disadvantage is that the entire network is disabled if there is a break in the main cable, and locating the break can prove to be difficult. Another disadvantage is that the more devices are added, the less efficient it becomes. This outdated design broadcasts data which uses up important bandwidth that can be used for better purposes. The conversion from this topology to a WLAN will benefit KFF on several levels. The addition of wireless technology is a cost-friendly alternative for KFF. It will be less vulnerable to complete outages due to line breaks. If there is a network issue, it will be much easier to isolate. In some cases, issues can even be resolved remotely without ever needing to go the location. Adding and removing stations will be easier by eliminating the need for cabling. Routers and smart switches will be added to learn and map each devices location. This will greatly improve data transfer efficiency by avoiding collisions and using less bandwidth. The addition of wireless technology is a cost-friendly alternative for KFF.
The highest standard of Ethernet wire will still be utilized to connect other KFF devices such as POS stations, VOIP telephones, servers, routers, etc. We will designate a locked (accessible only by authorized personnel) closet which will require biometric access. This room will house the main servers for each location as well as updated compatible UPS backups.. All the switches and connection points will be located here as well. From here, all physical cabling will be installed through ceilings and within walls for concealment. Detailed blueprints will map all cables in case access is needed. Access to the WAN will also be located here.
The effects of data rates in each part of the network are important factors. For example, studies have revealed that most of the traffic happens within a LAN. For this reason, having a switch to control bandwidth and throughput to each device can make the best use out of it. Changes can range from 10/100/1000. Furthermore, when information needs to travel through the WAN, different adjustments can be made. A WAN will tie all three stores together. La Jolla will house the central servers. Backup facilities will be located in the all three stores to avert situations where vital information could be lost. Security measures will be taken into consideration to ensure the safe transmission of data. For example, firewalls will need to be provisioned along with encryption of data to deter information from being obtained by unwanted solicitors. I will explain in more detail later in this paper.
Communication protocols are important in order to maintain a smooth running network. Data is transferred through different mediums such as Fiber optic, twisted pair, and through the air, we will ensure that the software and hardware at each end will be speaking the same language for successful communication. There are connection-oriented protocols and connectionless protocols in the KFF re-design. Each serves its purpose and will be tailored to fit each of KFFs needs. For example, they may need to video conference between locations which will use a connectionless protocol such as UDP. This type of connection can afford to drop some data in order to improve speed. They will also need connection-oriented protocols such as TCP/IP for more sensitive material where losing data is less tolerable. For example, when important files are being transferred, one device will initiate communication by sending a request to open a connection, the other device will acknowledge the request in order for communication to begin. The two devices will communicate back and forth to assure all packets are received. This method enhances QoS.
For communication between the different KFF locations, a fiber optic SONET ring will be established and maintained by the ISP. This will ensure proper maintenance of the lines and quick response times to outages. Although more expensive, a SONET ring greatly protects against outages between locations. If one path is unavailable to one location, it can make its way to the same location through the back. KFF will use ATM over Frame Relay and will require new equipment. The long-term benefit of ATM is that it will allow for future growth and expansion. Also, it provides bandwidth flexibility which allows the customer to monitor and adjust these parameters. An example is if high traffic is anticipated during certain hours, then metrics can be adjusted accordingly. ATM was chosen because different protocols may be used and this provides a great platform and QoS for multimedia. ATM gives the flexibility to scale in speed and network size, and has strong traffic-engineering and network management capabilities.
Traffic analysis is useful in that packets and data traveling through the network can be monitored. This can reveal information such as time of day when traffic may be busiest or even which devices and websites take up the most bandwidth. By understanding traffic flow, the proper adjustments can be made to maximize bandwidth.
The proper security measures will be applied to minimize threats related to data entering or leaving KFF. For the WLAN, we will be using wireless routers and access points, so WPA2 encryption will be used to safeguard against unwanted activity. Our Antivirus software will be McAfee, it allows for different firewalls and settings throughout the network to allow us to minimize any breaches. This software isn’t just plug-and-play. Security settings must be adjusted to the companies’ needs. We will meet with every employee including management to establish permissions and passwords accordingly. We will educate every employee about possible ways the network can be compromised. Examples are changing SSIDs frequently. Also, using long, non-common passwords and changing them often. We will educate them about techniques such as phishing, sniffing, keylogging, etc. that are used to try to infiltrate networks. KFF will have a strict policy on personal devices. They simply will not be allowed to connect to any part of the network including WiFi. NICs will be monitored, and accessing company WiFi with personal devices will not be tolerated.
Firewalls are a key part in keeping networked computers secure. Firewalls are not only used to protect the perimeter, there are host-based firewalls to protect against the entire network being damaged. These help to isolate and protect the LAN if an attacker penetrates the perimeter. There are variations on firewall settings. For example, you can set incoming traffic to monitor packet content or destination address. These are just a few examples on how Firewalls can help lessen the effects of a cyber-attack. Even though security measures will be established, continued monitoring is mandatory to keep data secure. Logs will be examined in a timely manner. We will keep up with patch updates. We will maintain constant vigilance because once security has been successfully compromised, then it is much harder to guarantee its safety.
This network redesign will definitely be a process. We will provide a timeline for the project. Feedback is encouraged and it is important to work closely with the ISP, management, employees, and everyone involved with this project. The methodology includes Analysis, design, implementation, testing, and evaluation. We will include deliverables to show our progress. We have already analyzed and have come up with a design for the new KFF network. The next step is implementation. The implementation process itself involves the next three phases: the first phase will be the installation of the network. This includes ISP setup of the WAN, our LAN setup including WLAN and VLAN. The second phase will involve all the testing and security measures. The third phase is evaluating the network performance once it goes live.
The best way to go about the implementation is to get the WAN established to all three locations with ATM first. The ISP will be given plenty of time to prepare and do whatever is necessary to have the system ready by the start date. Then, we will begin with one LAN. The Del Mar location first, this will facilitate the next two locations because we will learn about any oversights that occur. The second location will be Encinitas, this shall take a relatively shorter amount of time to establish since we will have had experience from Del Mar. Finally, La Jolla will be completed and after successful testing and evaluation, the old network can be removed.

Implementation Phase (Del Mar)

* Establish the WAN between all locations and verify with ISP techs. (2 days) * Setup up Telco room and all locations with all the hardware required by the new network. This means switches, routers, servers, computers, telephone systems, etc. all necessary cabling will be run concurrently. All physical security such as alarms, cameras and biometrics will also be done at the same time. (6 days) * Set up all necessary software and security such as firewalls, passwords, permissions, etc. Also educate all employees (6 days) * Create test plan (1 day) * Testing (4 days) * Evaluate project and interview users for feedback (3 days)

Implementation Phase (Encinitas)

* Setup up Telco room and all locations with all the hardware required by the new network. This means switches, routers, servers, computers, telephone systems, etc. all necessary cabling will be run concurrently. All physical security such as alarms, cameras and biometrics will also be done at the same time. (4 days) * Set up all necessary software and security such as firewalls, passwords, permissions, etc. Also educate all employees (4 days) * Create test plan (1 day) * Testing (3 days) * Evaluate project and interview users for feedback (1 day)

Implementation Phase (La Jolla)

* Setup up Telco room and all locations with all the hardware required by the new network. This means switches, routers, servers, computers, telephone systems, etc. all necessary cabling will be run concurrently. All physical security such as alarms, cameras and biometrics will also be done at the same time. (4 days) * Set up all necessary software and security such as firewalls, passwords, permissions, etc. Also educate all employees (4 days) * Create test plan (1 day) * Testing (3 days) * Evaluate project and interview users for feedback (1 day)

Once the new network has been finalized, it will begin to save KFF time and money by providing real-time updates to the entire network. For example, Inventory will be seamless and will require much less time effort by employees. This new network will allow KFF to stay ahead of the competition and will also allow them to make necessary upgrades for future expansion.

References

Telecommunications Essentials: The Complete Global Source, Second Edition, by Lillian Goleniewski. Published by Addison-Wesley.
Copyright © 2007 by Pearson Education, Inc

https://www.wikipedia.org/

http://computernetworkingsimplified.com/category-1/basic-building-blocks-of-a-computer-network/what-are-the-building-blocks-of-a-computer-network/