by

H.B.O. SystemsH.B.O. SystemsJuly 13, 2000

Presenters: Janet Hughes, John Banister,

Karen Oliver

Design Team Design Team GoalsGoals

Provide the best QoS for costFacilitate high quality trainingAssist in planning for future growth and

development:1000% LAN growth100% WAN growthNetwork life span of 7 to 10 years

Local Area Network (LAN) Infrastructure

• 3 Servers– 1 Enterprise Server

• Student & Staff Directory, Application Services (Microsoft Office, etc.), DNS/E-mail, Library Services, Novell Netware

– 2 Workgroup Servers• Student - Curriculum Applications• Administrative - Grades, Attendance, Student

Information

LAN Infrastructure Continued

• Main Distribution Facility (MDF) located near Point Of Presence (POP)

• Vertical Cable to Intermediate Distribution Facility and Portable Classrooms

– Fiber

– Meet EIA/TIA 568 cable standards

• Horizontal Cable

– Minimum of Cat. 5 Unshielded Twisted Pair (UTP) cable

– Accommodate 100 Mbps

– Meet EIA/TIA 568 cable standards

• Classrooms– 4 Cat. 5 UTP drops

• 24 student stations with at least 1 Mbps bandwidth

• Each student drop will have a 12 port hub connected

• 1 teacher station with at least 1 Mbps bandwidth

• Lockable Cabinets

LAN Infrastructure Continued

Multi-Purpose BuildingDouble Portable Classrooms

Building A West

Building A East

Building A East

Point of Presence (POP)

Main Distribution Facility (MDF)

Intermediate Distribution Facility (IDF)

1E

2E

3E

4E

5E

6E

100 Base SX - Multi- Mode Fiber Backbone

To IDF-1

To IDF-2

Building A East -MDF Physical Topology Main

Distribution Facility (MDF) & Point of Presence (POP)

Indicates 100BaseTX To Classrooms

7E

8E 9E

10E

11E 12E

Indicates Fourplex Wall Mounts

Main Distribution Facility (MDF)

This is an example of a ladder rack

Building A West - IDF-2 Physical Topology

100BaseSX Fiber Cable From MDF

Indicates 4 -100BaseTX To Each Room

Indicates Fourplex Wall Mounts

IDF

13W

2W 3W 4W 5W 6W 7W

8W9W10W11W12W

1W

14W 15W 16W 17W 18W

19W20W21W22W23W24W25W

Building A West - IDF-2 Physical Topology - Option 2

100BaseSX Fiber Cable From MDF

Indicates 4 -100BaseTX To Each Room

Indicates Fourplex Wall Mounts

IDF

Multi-Purpose Building - IDF-2 Topology

Portable Classrooms

100BaseSX -Fiber Backbone Coming From MDF Going To IDF

Indicates Fourplex Wall MountsIndicates 4 -100BaseTX Cables To Each Classroom Indicates Switch in each portable

(IDF)

Indicates 100BaseSX from IDF to Portable Classrooms

Example of a distribution rack which will be placed in the Main Distribution Facility (MDF) and the Intermediate Distribution Facility (IDF)

Items that may be placed in a distribution rack are:

Router

Switches

Hubs

File Servers

Typical Classroom Computer Layout

C reated w ith V is io

Classroom Printer

Teacher Station

Instructor DropDecorative Raceway Containing Wire Runs for Student Workstations

Classroom Hubs

C reated w ith V is io C reated w ith V is io

Fourplex Wall Mounts

WAN Topology to Mountain Sky Elementary

4-T1 Lines - 1.544 Mbps each

Cisco 7576 Router

Serial Link

Mountain Sky Elementary

Cisco 7576 Router

Serial Link

Sunnyslope CO

Shaw Butte School

Cisco 7576 Router

Serial Link

Phoenix N.W. C.O.

Data Center

Cisco 7576 Router

Serial Link

Greenway C.O.

Service Center

1 T1 Line - 1.544 Mbps

Greenway C.O. Service Center

Cisco 7576 Router

Enterprise Server

Administrative Server

IDF-1 IDF-2

Indicates 100 Base SX from switch to IDF

Indicates 100BaseTX cable

Virtual Local Area Network 1 (VLAN 1)

Virtual Local Area Network 2 (VLAN 2)

Student/Curriculum Server

(33 - 12 port hubs)

Located in MDF

100BaseSX Fiber from MDF to IDF

Cisco 5500 stackable - 312 Port Switch

Indicates four 100BaseTX cables

Each classroom with have 3 - 12 port hubs

Located in MDF

100 Base SX Fiber from MDF to IDF

IDF-1

Indicates four 100BaseTX cables

Each classroom will have 3 - 12 port hubs

Cisco 1900 - 24 port switch - 1 in each portable classroom

• Users will be restricted through the use of VLAN’s

• Every administrative node gains server rights through a user password

• Access outside the LAN is through the District Office

• Outside access to LAN is prohibited through the use of access lists

• Firewalls are utilized through access lists locally and globally

IP ADDRESS ASSIGNMENTS

S0 S1 S2

District Office 190.191.10.3 190.191.10.2 190.191.10.1

Greenway Center 192.191.128.3 192.191.128.1 192.191.128.2

SunnySlope 191.191.0.1 191.191.0.2 191.191.0.3

S0 E0 E1

Mountain Sky 220.100.10.1 220.100.10.3 220.100.10.2

Curriculum Subnet Address 220.100.10.2

Administrative Subnet Address 220.100.10.3

Network Address TranslationNetwork Address Translation

Network Address Translation (NAT) is designed for IP address simplification and conservation, as it enables private IP internetworks that use nonregistered IP addresses to connect to the Internet. NAT operates on a router, usually connecting two networks together, and translates the private (not globally unique) addresses in the internal network into legal addresses before packets are forwarded onto another network. As part of this functionality, NAT can be configured to advertise only one address for the entire network to the outside world. This provides additional security, effectively hiding the entire internal network from the world behind that address. NAT has the dual functionality of security and address conservation, and is typically implemented in remote access environments.

Access List Policy

External Threats:Internet connectivity will utilize a double firewall with all internet-exposed applications residing on a public backbone network.

All inbound traffic from the internet into the school’s private network will not be blocked by the double firewall.

No traffic from the curriculum LAN will be permitted into the Administrative LAN.

Access List Code

RouterA(Config)# Access-list 100 permit ip 192.191.128.0 0.0.0.255RouterA(Config)# Access-List 100 permit ip 191.191.0.0 0.0.255.255RouterA(Config)# Access-List 100 deny ip 190.191.10.1 0.0.0.0RouterA(Config)# Access-List 100 permit ip 0.0.0.0 255.255.255.255RouterA(Config)# Int s0RouterA(Config-if)# Access-group 100 in

RouterA(Config)#Access-List 101 deny ip 200.100.10.3 0.0.0.0RouterA(Config)#Access-List 101 permit ip 0.0.0.0 255.255.255.255RouterA(Config)#Int e0 RouterA(Config-if)#Access-group 101 in

Access List Code (con’t)

• 1 Router 25,928.12

– Cisco 7576

• 3 File Servers 12,797.85

– Super Micro

• Intel Pentium III Xeon - 400 Mhz.

• 3 - 13 Slot Switches 83,376.00

– Cisco 5500

• 3 - 24 Port Switches 4,500.00

– Cisco 1900 with Enterprise software

• 44 Hubs 895.00

– Cisco 400 Fast Hubs - 12 port

• 3 Uninterupted Power Service UPS 1,379.97– Back Ups Pro 1400

• 3 Patch Panels 375.00• 650 ft. 100BaseSX Cable 2,800.00 • 17,360 ft. Cat. 5 UTP 100BaseTX 2,664.00• 6 Equipment Racks 660.00• 44 Lockable Cabinets (250.00ea) 11,000.00

• Decorative Molding Wire Outlets 4,667.00• Raceway System 3,080.00

• Staff Training 60,000.00

• Installation ( 200 drops x 250.00 ) 50,000.00

• Equipment 40,000.00

• T-1 Line Installation 1,500.00

• T-1 Line Service - per year 6,695.00

• Construction 25,600.00

• Installation 45,000.00

• Equipment 146,375.94

• Construction 78,796.00

• Supplemental 150,000.00

Total $375,171.94

DisadvantagesDisadvantages

• Intensive initial setup– VLANS/Trunking

• Training–Costs/Logistics

• Portable Classrooms

AdvantagesAdvantages• Hierachical design• Supports multiple platforms• IP • Ease of security through VLAN’s & Access Lists

– Increase bandwidth distribution• 1 Gb multi-mode fiber to increase bandwith and

speed• No extra fiber run• 100 Mbps copper cable which in creases

bandwidth over 10 Mbps