Ccna Project, The Existing Stadium Network

 

BACKGROUND The management organization of a stadium is working with the Networking Company to renovate and update the stadium network. Over the years, the stadium network has grown. However, little thought was given to overall business goals and infra structure design. Some new projects went ahead. But the network administrators d id not have a realistic understanding of the bandwidth, traffic prioritization, and other requirements needed to support such an advanced and business-critical network. The stadium management now wants to add new high-tech features, but the existing network is not capable of supporting them. EXISTING LOGICAL SYSTEM  

THE WEAKNESSES OF THE EXISTING DESIGN Weakness

Impact

Possible So Solution

Flat Network Design

i. There is no scalability â the e

network cannot grow without impacting performanc

ii. No network segmentation - cannot filter or isolate traffic creating security risks Create routed hierarchy

Create segmentation with VLANs Apply traffic filters No Re Redu dund ndan ancy cy i. La Larg rge e fai failu lure re do doma main ins s â Since this is a stub networks, link and device failures affect large areas of the network.eg. the failure of the edge r outer. ii ii. . The There re is al also so no re redu dund ndan ancy cy be betw twee een n the the swi switc tche hes s i in n t the he netw networ ork k maller failure domains

Crea Create te s

Create redundancy among the switches Di Dist stri ribu bute ted d Serv Server ers s i. Ser Serve vers rs at at risk risk - no con contr trol olle led d en envi viro ronm nmen ent, t, p pow ower er b ba a ckup or redundant connectivity ii. ii. S Ser erve vers rs not not ava avail ilab able le - no no hig high h spe speed ed link links s t to o s ser erve vers rs data center server farm

Move Move serv server ers s t to o

Install gigabit links to servers, centrally locate Li Limi mite ted d Fib Fiber er Av Avai aila labi bili lity ty i. It li limi mits ts the the p pos ossi sibl ble e r red edun unda danc ncy y i in n t the he netw netw ork ork Stac Stack k the the swit switch ches es and and add add high high spee speed d upli uplink nks. s. No Sta State tefu ful l Fire Firewa wall ll i. Fil Filte teri ring ng only only, , does does not not p pre reve vent nt a all ll u una naut utho hori rize zed d or unwanted traffic Use IOS stateful firewall features Use access control list to filter traffic. Firewall Firewa ll are are found found only only at the Edge Edge of of Network Network

i. Internal Internal device devices s are vulner vulnerab ab

 

le - no pr protection fr from in internal at attacks ering mechanisms Add IDS at the data center

Create l la ayered f fi irewall a an nd f fi ilt