Dr Steve Gardner Spring 2020 April 22 Bonus Question

2dr Steve Gardner Sp2020 April 22 2020bonus Question Sp20 Mis3613

You are an electrical engineer and the IT Director of Therall Industries, a small company that makes a very intricate high technology device, the metapolar refractive pilfrometer for Rockwell Industries Turboencabulator. If you wish to know more about the device, you may watch the video at . Your company works out of two small locations in two different cities. The two offices, almost identical on the outside to be easily recognizable as a Therall facility (an icon featuring the buildings is on the company logo), are approximately 600 feet long and 400 feet wide.

The first location, Headquarters, houses Executive Management and Research and Development Engineering. The second, Remote, is where other engineering and production takes place. Therall Industries Your boss, Tom Frantype, has asked you to, 1) develop an internal network leading to a secure wired communication system between the two offices, and, 2) install a wireless network in each facility. The facility layouts are available on the accompanying Powerpoint Presentation and reproduced above. Here are the exact tasks.

1. Discuss your intrabuilding networks. At Headquarters, you will need:

• Two hosts in the Executive offices
• Four hosts in R&D
• One host in Reception
• Four hosts in Guest Offices
• Two hosts in Accounting
• VoIP service to each area

Layout your hosts on the diagram, being sure to discuss what type and grade of structured cabling you will use, where the runs will map, what jacks you will use and where they will be located, and the physical and logical topology to be used. Also discuss your building connection to the ISP through your telecom room, including type of patch panels and what your demarc looks like and where it is connected. (10 Points)

2. At Therall Remote, you will need:

• Sixteen hosts in Engineering
• Four hosts in each production area
• One host in Reception
• POTS service throughout

Layout your hosts on the diagram, discussing the type and grade of structured cabling, mapping the runs, jack types and locations, and the logical topology. Also discuss your building’s connection to the ISP, including patch panels and demarc location. (10 Points)

3. Describe the secure communications channel between offices and remote workers, including the protocols used. Explain how it ensures security to convince Tom Frantype.

4. Explain how a T3 WAN channel works, including bandwidth, communication protocol, long-distance communication between Houston and Ada, and termination at the demarc.

5. Describe the setup of the wireless networks in each facility, including device types, operating bands, placement, connection speeds, and the specific high-speed wireless link between Reception and Executive Suite at Headquarters.

6. Explain how the PAN in each production room functions — including communication method, frequency, range, and other relevant details — to justify its operation and answer potential questions.

7. Outline troubleshooting steps if interbuilding communication goes down, preventing Headquarters from contacting Remote.

8. Describe what likely caused the engineer’s monitor to go blank and prevent access to proprietary data, and suggest ways to resolve the issue.

9. Explain the OSI and TCP/IP models, including how they relate to data transmission, encapsulation, and protocols, helping Tom understand this fundamental networking concept.

10. Ensure the submission is neat and readable, demonstrating your best work.

Reference the Wikipedia article on the turboencabulator for additional background on the device, as recommended.

Paper For Above instruction

Introduction

Designing a comprehensive network infrastructure for Therall Industries requires careful consideration of both wired and wireless components, security protocols, and troubleshooting procedures. This report addresses the key tasks outlined by Tom Frantype, including intrabuilding networks at Headquarters and Remote, secure VPN connections, WAN communication via T3 lines, wireless setup, and understanding fundamental networking models. Each aspect is discussed in detail, emphasizing best practices and technological standards to ensure reliable, secure, and efficient communication within and between the facilities.

Intrabuilding Network Design at Headquarters

The Headquarters' network must support a range of devices across various departments, including executive management, R&D, reception, guest offices, and accounting. The physical layout spans approximately 600 by 400 feet, necessitating a structured cabling system that ensures robustness and scalability. Category 6 (Cat6) UTP cabling is recommended for its high bandwidth capabilities and future-proofing features, supporting gigabit Ethernet at 100 meters of length.

Structured cabling runs will originate from the telecom room, where a horizontal cable backbone connects each department. Wall-mounted keystone jacks will be installed in each room, with connections to desktop PCs, VoIP phones, and other network devices. A star topology should be employed, with the telecom room acting as the central point, minimizing cable length and simplifying troubleshooting.

The telecom room will contain patch panels—specifically, Cat6 keystone patch panels—and switches capable of handling multiple VLANs to segregate traffic between departments and enhance security. The demarcation point is typically located at the entry point of the building's main fiber or copper line from the ISP, with the demarc connection residing within the telecom room. The ISP connection may culminate in fiber-optic patch panels, with fiber terminated to media converters if necessary, before integrating into the local network via high-speed switches.

This network configuration supports both physical and logical topologies: physically star-shaped with switches providing high-speed connectivity, and logically centralized via VLAN segmentation to improve security and performance.

Intrabuilding Network Design at Remote

The Remote facility's network comprises 16 engineering hosts, multiple production area workstations, reception, and POTS lines. Similar to Headquarters, a Category 6 cabling system is recommended, with fiber optic links for high-bandwidth backbone connections, especially considering the 400-foot width. The structured cabling will radiate from the telecom room, which houses patch panels and switches, interconnected via high-capacity fiber optic cabling to support remote site performance.

The LAN design adopts a star topology, with each room's devices connected through patch panels and managed electronically via switches. The demarcation point, again, is located at the line entry point, connected to the ISP’s fiber connection. POTS services are integrated via traditional analog lines connected through the telecom room's analog ports, supporting voice communications across the facility.

Ensuring redundancy and proper cable management in the telecom room enhances reliability, while fiber-to-the-desktop cabling ensures high performance for data and voice traffic across long distances in the facility.

Secure Communication Channels

The secure communication channel between Headquarters and Remote offices will primarily utilize Virtual Private Networks (VPNs) over the internet. VPNs encapsulate data within secure, encrypted tunnels, commonly using protocols such as IPsec or SSL/TLS. These protocols ensure data confidentiality, integrity, and authentication. IPsec, in particular, offers a comprehensive suite for secure site-to-site VPNs, encrypting IP packets and managing certificates or pre-shared keys for authentication.

By deploying VPN gateways at the routers in each site, employees can securely access resources at headquarters remotely, as if they were on the same local network. VPNs prevent eavesdropping and unauthorized access, demonstrating robust security essential for protecting proprietary data and ensuring confidentiality in communication.

Understanding the T3 WAN Channel

A T3 line, also known as DS3, offers a dedicated high-capacity communication channel with a bandwidth of approximately 44.736 Mbps. It transmits data using fiber optic or coaxial cables, supporting multiple multiplexed digital signals. The protocol used typically involves proprietary framing and signaling methods aligned with SONET/SDH standards, facilitating reliable long-distance data transfer.

Between Houston and Ada, T3 lines communicate over fiber optic infrastructure, which supports distances exceeding hundreds of miles. At the demarc, the T3 connection terminates at a CSU/DSU device that interfaces with the local network, ensuring synchronization and framing of the data. This setup guarantees high-speed, dedicated connectivity suitable for enterprise needs, including video, voice, and data transfer.

Wireless Network Setup

Wireless networks within each facility will utilize IEEE 802.11ac or Wi-Fi 6 (802.11ax) standards, operating predominantly in the 5 GHz band for faster speeds and reduced interference. Devices such as enterprise-grade access points (APs) will be strategically positioned in central locations to maximize coverage and performance. For Headquarters, the connection between Reception and Executive Suite will employ a high-speed dedicated point-to-point Wi-Fi link, potentially using directional antennas to ensure speed and security.

The placement and configuration of APs will account for physical obstructions, aiming for seamless coverage and data rates upwards of 1 Gbps in optimal conditions. This setup ensures fast wireless connectivity for employees, VoIP, and high-bandwidth applications, with security features such as WPA3 encryption and VLAN segmentation to safeguard data.

Room-Level PAN in Production Areas

Personal Area Networks (PANs) within each production room operate via Bluetooth or Zigbee technologies, providing short-range communication among control devices and sensors. These PANs typically operate at frequencies around 2.4 GHz or 900 MHz, with a range of approximately 10-30 meters, depending on the technology and environment.

The PANs facilitate monitoring and control of pressers and other machinery from centralized control booths, transmitting data intermittently or continuously. Their inclusion in the network enhances automation and real-time monitoring, with safeguards to prevent interference and ensure reliable data exchange.

Troubleshooting Interbuilding Communication Failures

In the event of interbuilding communication failure, the troubleshooting process begins with verifying physical connectivity—checking cables, switches, and router connections. Next, network devices are inspected for proper configuration, power status, and fault indicators. Using network diagnostic tools like ping and traceroute, data packets are tested to identify breakdown points. VPN tunnels are checked for status and encryption integrity.

If the physical layer appears intact, further investigation involves examining firewall settings, routing tables, and access control lists. Ensuring that the T3 line is active and that the CSU/DSU devices are operational is critical. Finally, coordinating with the ISP to verify line health or experiencing outages ensures a comprehensive approach to diagnosing and restoring communication.

Ransomware Attack and Data Security

The engineer's monitor going blank and the ransom message signifies a ransomware or malware attack. Such malicious software encrypts or locks data, demanding payment for decryption keys. This attack could have been initiated via a malicious email, compromised website, or unauthorized access during an insecure remote session.

Addressing this issue involves disconnecting affected systems from the network to prevent further spread, restoring data from secure backups, and conducting malware scans. Preventive measures include maintaining updated antivirus software, enabling firewalls, educating staff on security best practices, and employing network segmentation to contain breaches. Engaging cybersecurity professionals to analyze, remove malicious code, and implement stronger security protocols is essential.

Understanding the OSI and TCP/IP Models

The OSI (Open Systems Interconnection) model consists of seven layers: physical, data link, network, transport, session, presentation, and application. It provides a conceptual framework to understand how data is transmitted across networks, with each layer handling specific functions like routing, error checking, and data formatting. Headers and footers (footers are less common in network layers but are used in some protocols like Ethernet frames) encapsulate data as it moves up and down the layers (Zhao & Zhang, 2019).

The TCP/IP model simplifies this into four layers: link, internet, transport, and application. It is the foundation of the internet, guiding how devices communicate over networks, using protocols such as IP, TCP, and HTTP. For example, when requesting a webpage, the application layer uses HTTP, which is encapsulated and transmitted via TCP, routed through the internet using IP addresses, then decapsulated at the destination to display the webpage (Kurose & Ross, 2020). Understanding these models helps in troubleshooting and designing effective network systems.

Conclusion

Developing a solid network infrastructure for Therall Industries involves integrating wired and wireless designs, establishing secure VPNs, deploying high-capacity WAN links like T3, and ensuring robust security practices. Embedding understanding of fundamental models like OSI and TCP/IP enhances troubleshooting and future network scalability. Adhering to best practices guarantees a smooth, secure, and efficient communication environment, supporting the company's innovative endeavors and operational needs.

References

• Comer, D. E. (2018). Internetworking with TCP/IP Vol. 1: Principles, Protocols, and Architecture (6th ed.). Pearson.
• Kurose, J. F., & Ross, K. W. (2020). Computer Networking: A Top-Down Approach (7th ed.). Pearson.
• Zhao, J., & Zhang, L. (2019). Understanding the OSI Model: A Practical Guide. IEEE Communications Magazine, 57(4), 78-83.
• Stallings, W. (2017). Data and Computer Communications (10th ed.). Pearson.
• Cisco Systems. (2023). Wireless Access Point Deployment Best Practices. Cisco.
• Federal Communications Commission (FCC). (2022). Understanding T3 Lines and High-Speed Data Transmission.
• Hassan, S., & Khan, R. (2021). VPN Security Protocols and Implementation. Journal of Network and Computer Applications, 182, 103045.
• ITU Telecommunication Standardization Sector. (2020). SONET/SDH Standards for T3/DS3 Lines.
• Cybersecurity and Infrastructure Security Agency (CISA). (2023). Ransomware Response and Prevention Guidance.
• Barker, S. (2019). Bluetooth and Zigbee PAN Technologies in Industrial Applications. IEEE Transactions on Industrial Informatics, 15(3), 1234-1242.