Cisco Threaded Case Study Cisco Threaded Case Study

This is our selling presentation for

Washington School District

Presented by

Mike

Nick

& Tonya

Our presentation ofOur presentation of

Mountain SkyMountain Sky

SunnySlopeSunnySlope

WAN OverviewWAN Overview

There will be three Regional hubs established with each schools site assigned to go through one of the three hubs. At each Regional hub will be a high-power router. All Internet traffic will be switched to the District Office router for outside contact through a Frame Relay WAN using PVC (always connected).

We will use 4 T1 lines – one between each of the Regional hubs and then one Frame Relay.

LAN OverviewLAN Overview

LAN – Between and within buildings at each school site, running 2 LAN segments -

*One for Teachers and Staff members with Admin Server

*One for Students.

LAN Wiring Scheme LAN Wiring Scheme RequirementsRequirements

Multi-Mode Fiber – 100 Base FX, Fast Ethernet, which has a distance maximum of 400 M.- We will be using for vertical cross-connect. - We will be using a dedicated T1 WAN link to provide Point-to-Point to go between each school’s POP and the Regional hubs.

LAN Wiring Scheme Cont’dLAN Wiring Scheme Cont’d

CAT 5 UTP, 100 Base TX, which has a distance of 100 M.- We will be using for horizontal cross-connect. - We will be using the EIA/TIA-568-B cabling lengths. (3m, 90m, and 6m).- All wiring will be terminated in lockable cabinet containing all terminations, will also include decorative wire and proper conduits or sleeved cores.

LAN Wiring Scheme EndLAN Wiring Scheme End

Each room will accommodate up to 24 student workstations and 1 teacher workstation.

Each IDF and MDF will be a secured lockable closet with key code entrance.

Wiring hub and patch panel may be mounted to wall.

Mountain Sky ModelMountain Sky Model

District Supplied Servers District Supplied Servers and Functionsand Functions

Enterprise servers:* DNS server at MDF to translate hostname to IP

Address for web access available to everyone. * Email Server also at MDF to send and store all e-

mail messages with complete directory of staff members and students at that location.

• Administrative Server at MDF for administrative database – Student tracking, attendance, grading, etc., for teachers and staff only.

District Supplied Servers and District Supplied Servers and Functions (Cont)Functions (Cont)

* Library Server at MDF available to all users. TCP/IP.

Workgroup servers:* Application Server all computer applications such

as word processing and spread sheet software. * Backup Server for nightly backup of data within

each school’s IDF. * DHCP to obtain IP address, located at each

respective school.

IP Addressing (overall)IP Addressing (overall)

Network Number 10.0.0.0Subnet Mask 255.255.0.0254 Subnets65534 Hosts per Subnetover 16.6M host addresses supported

IP Addressing (each school)IP Addressing (each school)2 Subnets per School

– Student (10.1.0.0 - 10.99.0.0) 33 schools/subnets – (66-Future) DHCP Administered

– Administrative (10.101.0.0 - 10.199.0.0) 33 schools/subnets - (66-Future) Static Addresses Assigned

Future Growth– (10.200.0.0 - 10.255.0.0)

Future GrowthFuture Growth

IP Range– 10.200.0.0 - 10.254.0.0

27 additional schools (or additional network growth) supported w/2 subnets for each school

10.0.0.0 is wire address subnet (n/a) 10.255.0.0 is broadcast address subnet (n/a)

SecuritySecurity

For external threats – Internet connectivity will utilize a double firewall implementation (DMZ) at the Data Center with all exposed Internet applications being on a public backbone network. Therefore, all connections initiated from Internet into the Washington Elementary School District will be denied. We are using a two-layer Hierarchical model so that the students and teachers will not cross, causing information to be passed between the two LANs.

Security (cont)2Security (cont)2

We are setting up that our model will have in two physical LAN segments be installed at each of the schools and the District Office. One LAN designated for administrative and one LAN for students. Each computer will be divided in appropriate categories and then placed on the appropriate LAN segment.

Security (cont)3Security (cont)3* We will utilize Access Control Lists (ACLs) on

the routers, all traffic from within the administrative LAN will not allow traffic from the curriculum LAN. ACL exceptions can be made upon individual review. The District Office will control all ACLs.

* Applications such as E-mail and Directory Services will flow freely between LAN segments.

Security (End)Security (End)

* We will set up user ID and passwords for security into the network. We will use First Initial and last name for the User ID. We will use last four digits of Social Security to set up passwords. The user will be required to change his/her password upon first sign-on. Password will require at least 6 digits, not more than 10. Request to change password 30 days, with no repeats.

 * All computers will have access to the World Wide Web

– Internet via the District Office/Data Center. This will be monitored.

Internet ConnectivityInternet Connectivity

The Internet Connectivity for the Washington School District will be provided through the District Office/Data Center via a T1- Data circuit (Frame Relay). Both staff and students will obtain their internet connection from the workstation, through the LAN switch, IDF, MDF, checked by both security measures (backbone and ACL) and out through the District Office Router to the Internet.

PC#1

PC#1

X 24

Internet Connectivity DrawingInternet Connectivity Drawing

District Routers 7000 Series

Service Center

Shaw Butte

Data Center

Network 1 Network 2

IDF Level

MDF LevelOther IDFs connectingOther IDFs

Connecting

3000 Series

User CountsUser Counts

We will 250 max workstations for students and 75 for administrative.

One run for each teacher/admin Three runs (total 24) students/curriculum