Network Design

24 April 2017

Network and Cloud Infrastructure

Graham Bowling

Kevin Boyer

Hailey Malacos

Ismail Mohammedali

Patrick Walker
 1

Table of Contents

Scenario 2
Executive Summary: 3
Network Needs Assessment: 3
Budget and Budget Justification: 6
Conclusion: 9
Appendix 10
 2

Scenario
Network Design Specifications
EY (formerly Ernst & Young) is a multinational professional services firm headquartered in
London, United Kingdom. EY is one of the largest professional services firm in the world and is
one of the "Big Four" accounting firms.
The organization operates as a network of member firms which are separate legal entities in
individual countries. It has 231,000 employees in over 700 offices around 150 countries in the
world. It provides assurance (including financial audit), tax, consulting and advisory services to
companies.

EY is looking to grow its office in Tampa by expanding to another floor of the building. They
have assigned your team the task to create a network design for their local area network (LAN).
Following are their requirements for this project:
Number of employees: 50, of which 10 are power users and 40 are regular users;
A designated server room offering maximum uptime for the server(s);
Server(s) to provide internal e-mail and a database that contains all customer information;
A cloud solution to back up the data;
Access to three shared high quality color printers;
Reliable Wi-Fi, each employee will have at least one smart device;
Maximum cost: $1,000,000.00.
You can contact the instructor if you have any additional questions. You are free to make any
assumptions about the network but you have to specify them in your document.
 3

Executive Summary:

Ernst & Young is expanding their office to include forty general users and ten power

users. They have requested at least one server dedicated to support email and a database to store

customer information, three printers, cloud storage to backup their data, and Wi-Fi.

The equipment we chose and our network design focuses on security, flexibility,

redundancy, and scalability. We wanted our design to be scaleable in case EY decides they want

to expand further. Equipment that is flexible and scalable will be much easier to configure and

require less updates. The cost of following through with our design is well below our budget of

$1 million therefore, we invested in extra equipment for backups, further enforcing redundancy.

With the prevalence of data being compromised today, its not if a company is going to be

hacked, its when. Consequently, we are taking advantage of incorporating key security

principles into our design such as: VPN connection, encryption, network segmentation, and

routers with built-in firewalls and IPS. With the following design, EY can count on a secure yet

powerful network infrastructure that meets their needs.

Network Needs Assessment:

We aim to provide a fast, reliable, and secure network for Ernst and Young. We built in

support for a total of fifty machines. Ten of them are power users, who therefore require more

powerful equipment. The other forty are regular users; they will require slightly less powerful

equipment, but with support and infrastructure just as reliable. We are also implementing a total

of three printers. These will be connected to a server with adequate cabling, and a cloud backup

solution for added redundancy. Our servers have been selected for their high performance and

the capabilities to handle fifty users and their mobile devices. Finally, we aim on providing

reliable WiFi for all fifty of the employees.

 4

Network Diagram:
 5

Selected Devices Quantity Price for One Total price Appendix

Reference
Router: 2 $1,069.99 $2139.98
Cisco ISR C892FSP Picture One
Router - 8 Port
Switches: 5 $4,144.95 20,724.75 Picture Two
D-Link Web Smart
DGS-1210-52MP -
switch - 52 ports
Server: 2 $9549.01 19,098.02 Picture Three
PowerEdge R930
Rack Server
Regular Users: 45 $1,001.99 45,089.55 Picture Four
All-in-One Lenovo
ThinkCentre M900z
10F3- UltraFlex II
Power Users: 12 $3,499 41,988 Picture Five
Microsoft Surface
Studio i7-6820HQ
Printers: 3 $562.99 1688.97 Picture Six
Xerox WorkCentre
6515
Cable: TBD $4.99 per 14ft/4.2m TBD
AmazonBasics RJ45
Cat5e Ethernet Patch
Cable
Total price $130,729.27
 6

Budget and Budget Justification:

Total: $104,408.48 (without cable)

With a budget of $1million, we decided that there was some room to invest in high-end

equipment. Originally, we projected that a large amount of money would be utilized in the

purchasing of the equipment. With this in mind we wanted to keep some liquidity in the event

that an issue arises where we would need to purchase new equipment. Also, we wanted leftover

money to go towards software systems.

The above list of hardware that was purchased represents the amount of money used. We

decided that with cheaper than expected prices, we could afford to by extra equipment in order to

have backups.

Two Cisco ISR C892FSP Routers - 8 Ports were purchased for the office space in order

to provide the best service. As part of the Cisco 890 series, these routers combine Internet access

along with thorough security and wireless services. Offering a high-performance WAN, these

routers were ideal for our network.

We saw switches as critical parts to our network so we decided to buy 5 D-Link Web

Smart DGS-1210-52MP - 52 ports. Two more than the three that were placed in the network

diagram but this was in order to have backups if needed. These switches comply with the IEEE

802.3az Energy Efficient Ethernet standard.

Our servers are the Dell PowerEdge R930 - fully configured with a three-year warranty

plan. These servers offer a 300GB 10K RPM SAS 12Gbps 2.5in Hot-plug Hard Drive. They also

reduce latency and optimizes transactions. With the number of users in the environment this

server seemed to be the most accommodating.

 7

For the regular users we decided on 45 Lenovo ThinkCentre M900z 10F3- UltraFlex II

computers for their powerful convenience. The M900z All-in-One was what set it apart from

other options. These computers are durable and the reliability is favorable for the environment.

With the Intel processor, improved memory and its Wi-Fi capabilities, this powerful computer is

up to our standards.

The power users will have the top of the line Microsoft Surface Studio i7-6820HQ. There

are 10 power users but we decided to go ahead and purchase 12 of these computers in order to

have backups. 1TB HDD and a 128GB SSD make these computers some of the most powerful

on the market.

For printing capabilities, we decided to go with the Xerox WorkCentre 6515. These

printers are compact to reduce unnecessary space consumption and cater to all of the necessary

functions of a workplace environment. The suggested use is for teams of 7 but with a company

that utilizes other forms of shared communication 3 of these printers was enough for the office

space.

Cloud storage: we recommend AWS as cloud solution; the free tier is recommended; as

the data increases it will have to be upgrade to a higher tier. We recommend using S3 for data

that is less than a year old and Glacier for data that is older than 1 year. For security we

recommend using IAM Software. There are many more solutions AWS provides but we see

these as the best options.

 8

Advantages/Disadvantages:

Our network design focuses on redundancy, performance, and security. The D-Link

switches supports both IPv4 and IPv6 protocols. With the added configuration security features

of the switches, the network will remain protected. In addition, the switches allow for quick

implementation, straightforward upgrades, and seamless infrastructure expansion with the added

management options. The Cisco 890 router delivers an additional layer of security to the network

with its built-in security features including a: Zone Based Firewall to stop unwanted traffic, IPS

to protect the network against known signature based malware, FLEX VPN, GET VPN, and

Dynamic Multipoint VPN which offers IPSec encryption to maintain the confidentiality and

integrity of company data. The Cisco router also provides failover protection with a redundant

WAN connection and helps balance the load of traffic in the network. The two Dell PowerEdge

servers offers performance, scalability, and flexibility. The twenty-four internal hard drives

provide 12 TB of memory. We went with top of the line servers in order to maximize

performance in the network.

Two servers have the advantage of balancing the load of traffic within the network as

well as providing another layer of redundancy in the network; if one server fails or is

compromised the second server is there to back it up. In addition to the two physical servers we

have in our network design, we also are taking advantage of AWS cloud storage. This will

provide additional storage to backup data. AWS will provide EY with a platform that is scalable

and reliable. Another reason we chose AWS is that they designed their network architecture with

security in mind, adding another layer of security.

 9

In our network design, we have three switches that connect the printers, computers and

mobile devices to the internet. We purchased an additional two switches in case a switch fails,

the network can still be sustained.

Although we attempted to choose products that maximize scalability, there is always a

possibility that new technology could come out and hardware would need to be replaced.

Another disadvantage is that an attacker could have a zero-day virus or exploit and gain access to

sensitive data or damage the network in other ways. Viruses and Malware offer a concern as

well. Even if only one computer is infected with a virus, there is potential for it to spread to other

systems on the network. Segmenting the network is one of the measures we have in place to

minimize the likelihood of this type of an attack, however, it is still something that needs to be

considered.

Conclusion:

The above network design was carefully selected in order to meet the requirements for

Ernst and Young. Ten power users and forty regular users will be able to access the network and

accomplish the daily functions of the company. With a Cisco router, multiple switches, and the

latest computer hardware, Ernst and Young will have the latest technology available for their

network. Our aim was to provide a fast, reliable, and secure network. We believe that this will be

achieved for Ernst and Young with this design.

 10

Appendix

Picture One

Picture Two
 11

Picture Three

Picture Four
 12

Picture Five

Picture Six