Umuc Cmit 265 Fundamentals Of Networking Hello There I Have

Umuc Cmit 265 Fundamentals Of Networkinghello There I Have Am Lost

Given the complexity and scope of the assignment, your task is to develop a detailed network design proposal for UMUC's new building in Adelphi, Maryland. The proposal should cover three main sections: Physical Network Design, Network Addressing, and Network Services Design. You need to specify the topology, media, connecting devices, computer systems, physical layout, subnetting, IP configurations, network services, and security measures, supported by diagrams where applicable.

In the Physical Network Design section, define the network topology, select appropriate media and devices, determine the physical placement of computers and wiring, and justify each choice. For Network Addressing, create subnets based on room or department criteria, assign network addresses and subnet masks, and specify how IPs are allocated. For Network Services Design, identify required services, servers, security measures, and justify the selections based on the building's layout and operational needs.

Paper For Above instruction

Introduction

The efficient and secure design of a computer network is fundamental to the smooth operation of any organizational infrastructure, particularly within an educational environment such as UMUC. This proposal aims to outline a comprehensive network infrastructure plan for a newly leased building in Adelphi, Maryland, housing classrooms, labs, offices, and a library. The design prioritizes security, scalability, and reliable connectivity while accommodating specific requirements like segregated networks for staff, students, and public access, wired connectivity, and wireless access for partial areas. This document covers physical layout, network addressing, and services, supported by diagrammatic representations and technical justification.

Physical Network Design

The network topology selected for this project is a hierarchical star topology, leveraging switches as central connecting points for each department and floor to ensure scalability and ease of management. This structure facilitates the segmenting of different user groups—student, staff, and public—into separate VLANs for security and traffic management. The core layer will consist of managed Layer 3 switches capable of routing between VLANs and supporting security features like ACLs and port security.

The media of choice is primarily Ethernet using Cat6 cable, which supports high data rates and future expansion, connecting devices through switches distributed throughout the building. Each of the six computer labs, offices, and public areas will have dedicated switches, with trunk ports linking these switches to the core switches. For security, perimeter firewalls will be installed between the core network and the Internet, with IDS/IPS devices monitoring traffic for suspicious activities.

Computers in labs, offices, and the library will be connected via wired connections within secured closet spaces, each equipped with patch panels and labeled for easy maintenance. For wireless access, a dedicated wireless access point (AP) will be installed in the Student Lobby, supporting up to 254 simultaneous users, conforming with the project’s wireless specifications. Fiber optic cabling may be used for backbone connections between floors, ensuring high bandwidth and minimal latency.

The layout will position the main network distribution points in server closets on each floor, with structured cabling routes to minimize interference and maximize reliability. Justifications include the high reliability of wired connections for administrative and instructional systems, the flexibility of VLAN segmentation for security, and the designated wireless AP for public access in common areas, reducing overhead on wired connections.

Network Addressing

The assigned network address space, 10.11.12.0/23, provides 512 IP addresses, suitable for the building’s scale. To segment the network effectively, subnets will be created based on department and room function, with specific IP ranges assigned:

  • Student Lab (50 users): 10.11.12.0/25 (subnet mask 255.255.255.128), IP range 10.11.12.1–10.11.12.126, with the first IP reserved for the network address and the last for broadcast.
  • Classroom Labs (six labs): 10.11.12.128/26 (for Labs 1 and 2), 10.11.12.192/26 (for Labs 4 and 5), each supporting 32 computers with room for expansion.
  • Library: 10.11.13.0/28, supporting 10 computers for students and 5 for staff, with dedicated IP ranges.
  • Offices: 10.11.13.16/28, with individual IP addresses assigned to each computer, including multi-station offices such as admissions.
  • Server Rooms: 10.11.13.32/29, designated for servers and network infrastructure devices.

Arrange subnets to minimize broadcast domains and improve security, with routing controlled through Layer 3 switches or dedicated routers. Static IPs are assigned to servers and critical devices, while DHCP scope pools manage dynamic IP assignment for user devices.

Network Services Design

The network will require several core services: DHCP for dynamic address management, DNS for hostname resolution, Active Directory for user management, and file/print servers to support academic and administrative operations. An email server must be deployed securely, with access controls to prevent unauthorized data exfiltration.

Security measures will include VLAN segmentation, ACLs restricting access between user groups, port security, and robust firewall policies. Wireless access points will be configured with WPA3 encryption, and all network traffic monitored by IDS/IPS systems. VPN access may be supported for remote administrative management, with multi-factor authentication enforced.

Additional network devices include redundant core switches, firewalls with intrusion detection features, and network management servers to monitor and troubleshoot the infrastructure proactively. Backup Internet lines, such as a secondary fiber connection or a dedicated LTE/5G backup, will ensure high availability and minimal downtime, meeting the specified bandwidth and reliability criteria. Critical security measures are justified by the sensitive nature of student and staff data, requiring layered security strategies such as secure VLANs, intrusion detection, and strict access controls to prevent unauthorized access or data breaches.

In conclusion, the proposed network design provides a scalable, secure, and efficient infrastructure tailored to UMUC’s needs, aligning with best practices in network engineering. The hierarchical star topology ensures ease of management and future growth, while segmentation and security measures protect critical data. Detailed wiring schematics and device configurations will further enhance implementation and troubleshooting capabilities, ensuring reliable operations for the university's diverse functions.

References

  1. Odom, W. (2019). CCNA 200-301 Official Cert Guide, Volume 1. Cisco Press.
  2. Carroll, K. (2018). Fundamentals of Networking: IPv4 and IPv6. Cisco Press.
  3. Kurose, J. F., & Ross, K. W. (2017). Computer Networking: A Top-Down Approach. Pearson.
  4. Stallings, W. (2020). Data and Computer Communications. Pearson.
  5. Forouzan, B. A. (2017). Data Communications and Networking. McGraw-Hill Education.
  6. Cisco Systems. (2022). Cisco Network Design Fundamentals. Cisco White Papers.
  7. Mueller, J. (2018). Networking the Small Business. O'Reilly Media.
  8. Sezer, R., & Kocakulak, M. (2019). Network Security Strategies. IEEE Communications Surveys & Tutorials, 21(3), 2344-2362.
  9. IEEE Standards Association. (2021). IEEE Std 802.3-2018: Ethernet. IEEE.
  10. National Institute of Standards and Technology (NIST). (2020). Guidelines for Cybersecurity in Educational Networks.

Related Assignments