22
McBride Financial Services Network Design – Boise Office Soris Cox, Isaac D. Davis, Rodney Ham, Steve Hommel Network Concepts NTC/500 Chen Li 6 September 2009

McBride+Financial+Services+Team+a v04 Alternate the Me

Embed Size (px)

Citation preview

Page 1: McBride+Financial+Services+Team+a v04 Alternate the Me

McBride Financial ServicesNetwork Design – Boise Office

Soris Cox, Isaac D. Davis, Rodney Ham,Steve Hommel

Network Concepts NTC/500Chen Li6 September 2009

Page 2: McBride+Financial+Services+Team+a v04 Alternate the Me

McBride Financial Services, Boise Office LAN

Page 3: McBride+Financial+Services+Team+a v04 Alternate the Me

Overview Service Request Details Network Requirements:

Hardware/Software Security Scalability

Logical Design Network Topology Network Training Network Maintenance

Page 4: McBride+Financial+Services+Team+a v04 Alternate the Me

Service Request

The McBride Financial Services, Boise Office LAN was designed in response to a service request prepared by Hugh McBride SR-mf-005 – LAN Design, Boise Office

Abram LaBelle, of Smith Systems Consulting, met with Mr. McBride and discussed the requirements and design needs

Page 5: McBride+Financial+Services+Team+a v04 Alternate the Me

McBride Financial Services, WAN Locations

Boise, ID LAN will act as a Network Hub for McBride Financial Services

Other locations connect to Boise through firewall-secured internet connections

Other locations: Billings, MT Jackson, WY Cheyenne, WY Bismarck, ND Fargo, ND Rapid City, SD Sioux Falls, SD

Page 6: McBride+Financial+Services+Team+a v04 Alternate the Me

Hardware Servers (1 each)

Gateway/DMZ authentication server Web site server (www.McBrideFinancial.com) Email server ([email protected]) eFax/Secured network authentication server SQL DBMS serverWorkstations and Laptops Administrative Staff workstations (x 2) Client Kiosk workstation (x 1) Laptop Ports for Mortgage Brokers (x 3)

Page 7: McBride+Financial+Services+Team+a v04 Alternate the Me

Hardware

Monitors and Peripherals All Laptop Ports and

Workstations shall include wide screen, flat panel monitors

Keyboard Wireless, IR Mouse

Other Wired Cat5 Ethernet

router LTO Backup Tape Library

Page 8: McBride+Financial+Services+Team+a v04 Alternate the Me

Network Software, Applications and Services

Retina eEye Digital Security: Uses standard browser based technology for

logon,management, and reporting.

The asset driven architecture enables users to manage by logical grouping or assets regardless of the IP address

Advanced charting permits rapid determination of the highest risks within an environment by businessfunction or asset

Page 9: McBride+Financial+Services+Team+a v04 Alternate the Me

Network Software, Applications and Services

Linux Email Server Software:

AtMail

Complete Mail Server Support

Groupware Server Webmail Server Email Server Anti-Virus

Support Anti-Spam Filter Comprehensive

WebAdmin interface Complete Webmail Client SQL Database Backend

support

Page 10: McBride+Financial+Services+Team+a v04 Alternate the Me

Logical Network Design Top-Down Methodology Employed

Benefits of Top-Down Network Design: Modularity Ease of Troubleshooting Reduced Costs

Design Composed of Layers

Page 11: McBride+Financial+Services+Team+a v04 Alternate the Me

Boise LAN – Hierarchal Diagram

Page 12: McBride+Financial+Services+Team+a v04 Alternate the Me

Network Layers

Core Layer Focuses on Availability and Performance Meshing for Redundancy

Distribution Layer Implements Routing Policies Assures Intended Traffic Flows Through

Access Layer Facilitates Connectivity by End-Users Forwards Traffic to Distribution Layer for

Routing

Page 13: McBride+Financial+Services+Team+a v04 Alternate the Me

Network Protocol

Network Protocol – TCP/IP

Protocol Addressing Scheme Classless IP Addressing Classless Inter-Domain Routing Routing Summarization

Class C Addresses

Address Allocation Scheme (Table 1)

Page 14: McBride+Financial+Services+Team+a v04 Alternate the Me

Network Addressing Scheme

Device Type IP Address Range Reserved Type of Allocation

Routers 192.168.10.1-192.168.10.5 Static

Servers 192.168.10.10-192.168.10.20 Static

Printers 192.168.10.21-192.168.21.31 Static

Clients 192.168.10.100-192.168.10.254 Dynamic Host Configuration Protocol

Table 1: Address Allocation Scheme for McBride-Boise Network

Page 15: McBride+Financial+Services+Team+a v04 Alternate the Me

Logical TopologyDMZ Bus and Secured LAN Bus

The logical topology of the Boise Office LAN is two bus networks: The DMZ bus supports the web and email

servers and a client kiosk workstation The secured network supports SQL server,

printers, eFax, and workstations

Both bus networks are secured by firewalls that allow access through authentication servers

Page 16: McBride+Financial+Services+Team+a v04 Alternate the Me

Logical Topology – Bus with DMZ and Secured LAN

Page 17: McBride+Financial+Services+Team+a v04 Alternate the Me

Physical Topology – Bus Similar to the Logical Topology with

noted exceptions: The two bus networks are “flattened” into

a single bus Because the firewalls are applications,

internal to the authentication servers, they are excluded from the physical topology

A router, connected through a gateway server, facilitates external (Internet) network communications

Page 18: McBride+Financial+Services+Team+a v04 Alternate the Me

Physical Topology – Bus

Page 19: McBride+Financial+Services+Team+a v04 Alternate the Me

Network Training Plan

Phase I Leadership Training will help ensure

management level employees are prepared to train employees

Quick Reference Guides will be issued for reference material after implementation

Phase II Engagement of employees Refining Quick References Guides Team Surveys

Page 20: McBride+Financial+Services+Team+a v04 Alternate the Me

Network Maintenance Smith Systems Consulting responsible for

Boise LAN network maintenance Schedule to be communicated in advance Advantages:

Cost effective Provides flexibility for periodic maintenance Units will last longer and fewer issues Energy saving throughout each location and

possibility of going green Reduces equipment failures across the board

Page 21: McBride+Financial+Services+Team+a v04 Alternate the Me

Maintenance Schedule

Page 22: McBride+Financial+Services+Team+a v04 Alternate the Me

Summary The Boise LAN design meets the

functional needs specified by McBride in service request SR-mf-005

The network design offers scalability, security, and flexibility for planned growth of the organization

A comprehensive plan is submitted which addresses requirements as well as network maintenance and staff training