Campus Network Design & Security by the implementation of VLANs

Project Title

Campus Network Design & Security by the implementation of VLANs

Project Area of Specialization Information & Communication TechnologyProject Summary

This Project is an Enterprise IT Network Infrastructure for Local Area Network that based on Three (3) Tier hierarchal model for deployment of network on enterprise level Involves three layers which is core layer, Distribution layer and Access layer.

The network infrastructure of the company that would be based on different platforms using cisco, Huawei, juniper all configurations and deployment of infrastructure which are designed in different ways. This Project is running on simulation of cisco that is networking vendor which complete shows from complete topology design to implementations and testing process.

The deployment of this enterprise network is also works on virtualization and network simulations. In early days it was a game changer for network engineers from all corners of the world but with the passage of time technology evolves. We will planned a network infrastructure which is based on local area networks that will works for within organization.

Usually a lot of companies or organizations who wants to deploy the network for their companies directly attached with networks supports and they deployed than as well as but after installation and they feels that their network performance is not suitable according to their works. The major problems in troubleshooting and addition of technology in their existing network were occurs, somewhere faced financial costs and somewhere faced a lot of bugs or errors. Reason is that when any company face faults in their network then very difficulties need to face to find out the exact lack of error link point, but through following enterprise hierarchal model they can easily judge where the lack point in their network.

If need to addition of technologies in network than very easy to take a decision where company wants to expand our network through following this enterprise network.

Project Objectives

Security has been a pivotal issue in the design and deployment of an enterprise network. With the innovation and diffusion of new technology such as Universal computing, Enterprise mobility, E-commerce and Cloud computing, the network security has still remained as an ever-increasing challenge. A Campus network is an important part of campus life and network security is essential for a campus. Campus network faces challenges to address core issues of security which are governed by network architecture. Secured network protects an institution from security attacks associated with network. A university network has a number of uses, such as teaching, learning, research, management, e-library, result publishing and connection with the external users. Network security will prevent the university network from different types of threats and attacks. The theoretical contribution of this study is a reference model architecture of the university campus network that can be followed or adapted to build a robust yet flexible network that responds to the next generation requirements. A hierarchical architecture of the campus network is configured with different types of security issues for ensuring the quality of service. In this project, a tested and secure network design is proposed based on the practical requirements and this proposed network infrastructure is realizable with adaptable infrastructure.

Project Implementation Method

1. Proposed cost-effective design of a Secure Campus Network
2. Creation of VLANs (Virtual LAN) for security
3. Implement firewall for internal and external security

Several challenges confront the implementation of a secure network on a university campus, but the challenge central to this topic is security. Henceforth, we have outlined in detail several possible solutions in maintaining a network, the design of our network in order to encompass such solutions.

It's easy to see why virtual LANs have become extremely popular on networks of all sizes. In practical terms, multiple VLANs are pretty much the same as having multiple separate physical networks within a single organization — without the headache of managing multiple cable plants and switches.  Because VLANs segment a network, creating multiple broadcast domains, they effectively allow traffic from the broadcast domains to remain isolated while increasing the network's bandwidth, availability and security.

A firewall works to monitor and block or allow network traffic, both incoming and outgoing, on a private network.  While there is a hardware firewall to help protect the campus network security, this firewall affects certain outbound traffic and prevents unauthorized inbound traffic.  NetBIOS, SMTP and other miscellaneous ports determined to pose a security risk are blocked in the outgoing direction. This does not impact the majority of academic work-related programs used on the campus.

Benefits of the Project

The system will be provided us Network System Design content (it may be in the form of printed output) of the Network Design system in Campus Management. The system will have a user friendly. This Network designed to aid the calculated planning. It will be more cost effective compared to the Traditional Network System in campuses

• It provides new environment to make Network Design and management the network in the campuses.
• To provide an avenue for Faculty Staff and Management to get their Network Resources in a more convenient way.
• To regain control of the Network System   avoid scalping and overselling of Network System.
• To implement a prototype of a scaled down version of the final system to test the solution and further develop requirements.
• To collect statistics in a more efficient manner for future Network development and implementation in the campus.
• It provides the Network provided system in the Campus.
• To increase efficiency of the Campus network and security system.

Technical Details of Final Deliverable

Pre-requisites for the project implementation are

• Knowledge of TCP/IP Network
• Basic configuration knowledge of Router, Switch and Firewall
• Knowledge of VLAN’s Network
• Knowledge of Inter VLAN’s Network
• Knowledge of Access Control List’s
• Knowledge of DMZ Network

Final Deliverable of the Project HW/SW integrated systemCore Industry ITOther IndustriesCore Technology OthersOther TechnologiesSustainable Development Goals Industry, Innovation and InfrastructureRequired Resources

Item Name	Type	No. of Units	Per Unit Cost (in Rs)	Total (in Rs)
			Total in (Rs)	35000
Cisco Core Switch 6500	Equipment	1	20000	20000
Mikrotik RB750GR3	Equipment	1	15000	15000