7 replies
by mshavrov
First, determine bussiness needs - who will be a clients, what is traffic requirements for each client, how offen data sent to client, etc. This will give you an picture of what network connectivity to outside world do you need.
Second, analyze traffic flow between servers and applications. How offen and what volumes are transfered. This will give you a picture and base for LAN planning.
Third, based on application structure, determine which resources should be accessible from outside and which not and what are relations between components. This will give you a base for security planning.
Fourth, check company's security policy on what resources should be protected and how. And perform appropriate actions to implement this policy.
Good luck,
Poster rated this answer.
Poster rated this answer.
by pnunez
The first step is to determine the business needs, for example. How many hits per day are they getting on their site, who are the clients, and is data being sent. By doing this you will be able to determine the amount of bandwidth needed for this project.
Assuming you already know the size of the company and how many nodes are going to be on the network, you than can determine the type of routers and switch you will need. If the company has less than 100 nodes and the data being sent is not that big, than you can probably go with a 2620 cisco router, if you will like to segment your network by the department you can get a 2900 cisco switch and implement VLANs per department that way you add a layer of security to your design. Keep in mind that you need to be familiar with trunking and subinterfacing.
With these products you can implement access list, vlans, NAT, and a few other things. However you will need two routers, 1 just in case the other goes down.
In addition, you will need to implement an IDS, depending on the size of the clients pocket you can determine what they can have, if you need something inexpensive but reliable, you can probably go with SNORT, keep in mind that SNORT only detects it does not prevent. So if you have the $$$ you can go with a Cisco IDS 4250 Sensor.
Finally you will need to add a PIX firewall from cisco, I suggest Cisco PIX525.
Best of luck
Pedro Nunez Bautista
CCNA, Linux +
pnunez@nensinc.com
Poster rated this answer.
This discussion is closed to new replies.
Trending Networks posts
Sort by Trending