Networks·41,457 discussions

Design a wireless converged network

Locked

I need to design a network for 30 on-site user and 10 VPN users.Users inside the office will have only wireless access.Further more, the company use VOIP application as well.I have an idea of implementing DMZ and keep the VOIP server inside DMZ. What mechanism or design should I use with VOIP to ensure QOS with affordable delay? Where should I keep the VOIP server ?

Topic

Clarifications

In reply to Design a wireless converged network

Clarifications

Why DMZ?

In reply to Design a wireless converged network

Typically, a DMZ forwards all ports from WAN to the DMZ port. Why would you want to do that? Enumerate only the ports or port ranges that the VOIP server needs, and put those in the forwarding table.

Your way would work and is easy, but would have many unnecessary risks.

i made a mess

In reply to Why DMZ?

Thanks a lot for the quick reply.
I hope i messed up things by saying about DMZ.
Actually i had an idea of WAN -> ISP router -> Firewall router -> DMZ -> application firewall router -> switches -> wireless access points.
Hope you got my idea now. I hope to keep the FTP, WebServer, Squid(cache) and VOIP server in DMZ. Active directory, dns,& dhcp inside(internal LAN). So my questions are,

1. where should VOIP go? because thr are 10 users who would access remotely. Is there anything to do with that VOIP traffic coming from outside.

2. What firewall should be the first firewall ?

3. What do i need for VPN in design ?

Help from anyone is appreciated…

hmmm…

In reply to i made a mess

I gotta agree with Old Baritone on the whole DMZ for the VOIP hardware. I don’t know what type you are using, but some units won’t work in a normal DMZ scenario (assuming some kind of NAT) as far as traffic, you just set your rules and routes to pass it where it needs to go. as far as a firewall, whatever one you can get the best support.

scenario not descriptive

In reply to hmmm…

I have been asked to design a wireless-based voice/data network for 30 users on site and 10 users for home. 10 users will exploit VPN.That’s only the specification i got. nothing much 🙁

Or, there is this company called Cisco

In reply to Design a wireless converged network

who seem to have some expertise in both IP telephony as well as wired and wireless LANs.

[Author]

Replies