NETWORKING DEMONSTRATION

NETWORKING
INFRASTRUCTURE

GROUP 2
Nguyen Le Tuan
Tran Huu Kim Long
Trinh Ngoc Phuc
Le Duc Anh
Tran Van Hieu Nghia
DESIGN A NETWORKED SYSTEM TO MEET A GIVEN
SPECIFICATION.
• Firstly, it is important to re-mention the requirements /
specifications of the local educational institute:
• People: 200 students, 15 teachers, 12 marketing and administration
staff, 5 higher managers including the head of academics and the
program manager, 3 computer network administrators.
• Resources: 50 student lab computers, 35 staff computers, 3 printers
• Building: 3 floors, all computers and printers are on the ground floor
apart from the IT labs – one lab located on the first floor and
another located on the second floor
• With the available resources, it is crucial that I can utilize them to
fulfill the needs of different users of the institution. The 1st and 2nd
are where the student lab computers going to be, with 25 computers
/ floor. 35 staff computers and 3 printers will be put on the ground
floor, and 3 of the staff computers will be used at computer network
administrators, making the rest of them used by other staffs (32
left).
• The Local Area Network for this institution will be connected to the Internet (or other LANs or WANs)
via a gate way that is Router named “R1”. This router will connect to another the Router representing
the Internet (outside LAN) via Serial2/0 Port: “Internet” Router. R1 router will then connect to 5
switches via Fast Ethernet Ports and cables, and their roles / names respectively are:
• Switch1: Distribute network for the lab computers on the 1st floor. The lab computers are represented
by PC “1F”.
• Switch2: Distribute network for the lab computers on the 2nd floor. The lab computers are represented
by PC “2F”.
• Switch3: Distribute network for the Staff computers, which are represented by PC “Staff”. Also, the 3
printers will also be connected here.
• Switch4: Distribute network for the Network Admins computers, which are represented by PC “Admin”.
• Switch5: Form connections with the Servers. There are 4 main servers:
• Mail Server.
• Web Server.
• FTP Server.
• DNS Server.
• NTP Server.
• All the computers will be able to connect to the servers (which is network 192.168.5.0) The lab
computers on the 1st floor and the 2nd floor and the staff computers will not be able to communicate
directly with each other (done by Extended Access List on Router R1, for example they will not be able
to ping each other). However, the Admin Computers will be able to communicate with all other
computers in the LAN. Only the Admin computers can access telnet to configure router R1.
ALLOCATE IP ADDRESSES TO ALL DEVICES:

For the 1st Floor, I will allocate the IP address of the network as follows:
• Network IP Address: 192.168.1.0
• Subnet Mask: 255.255.255.0
• IP Address for the Fast Ethernet port connected to this network on router R1: 192.168.1.1
• Thus, the lab computers will have addresses for example:
o From:
 IP Address: 192.168.1.2
 Subnet Mask: 255.255.255.0
o To:
 IP Address: 192.168.1.26 (because there are 25 lab computers on the first floor)
 Subnet Mask: 255.255.255.0
• I am going to implement DHCP protocol (Dynamic Host Configuration Protocol) so that the
Router can automatically assign IP addresses to the lab computers.
For the 2nd Floor, I will allocate the IP address of the network as follows:
• Network IP Address: 192.168.2.0
• Subnet Mask: 255.255.255.0
• IP Address for the Fast Ethernet port connected to this network on router R1: 192.168.2.1
• Thus, the lab computers will have addresses for example:
o From:
 IP Address: 192.168.2.2
 Subnet Mask: 255.255.255.0
o To:
 IP Address: 192.168.2.26 (because there are 25 lab computers on the second floor)
 Subnet Mask: 255.255.255.0
• I am going to implement DHCP protocol (Dynamic Host Configuration Protocol) so that the
Router can automatically assign IP addresses to the lab computers.
For the Staff Computers, I will allocate the IP address of the network as follows:
• Network IP Address: 192.168.3.0
• Subnet Mask: 255.255.255.0
• IP Address for the Fast Ethernet port connected to this network on router R1: 192.168.3.1
• Thus, the Staff computers will have addresses for example:
o From:
 IP Address: 192.168.3.2
 Subnet Mask: 255.255.255.0
o To:
 IP Address: 192.168.3.33 (because there are 32 Staff computers on the ground floor)
 Subnet Mask: 255.255.255.0
• I am going to implement DHCP protocol (Dynamic Host Configuration Protocol) so that the
Router can automatically assign IP addresses to the lab computers.
For the Network Admins Computers, I will allocate the IP address of the network as follows:
• Network IP Address: 192.168.4.0
• Subnet Mask: 255.255.255.0
• IP Address for the Fast Ethernet port connected to this network on router R1: 192.168.4.1
• Thus, the Network Admins Computers will have addresses for example:
o IP Address: 192.168.4.2, 192.168.4.3, 192.168.4.4 (because there are 3 network admin
computers)
o Subnet Mask: 255.255.255.0
• I am going to implement DHCP protocol (Dynamic Host Configuration Protocol) so that the
Router can automatically assign IP addresses to the lab computers.
For the Server Network, I will allocate the IP address of the network as follows:
• Network IP Address: 192.168.5.0
• Subnet Mask: 255.255.255.0
• IP Address for the Fast Ethernet port connected to this network on router R1: 192.168.5.1
• Thus, the Servers will have addresses for example:
o IP Address:
 192.168.5.2 (Mail Server)
 192.168.5.3 (Web server)
 192.168.5.4 (FTP Server)
 192.168.5.5 (DNS Server)
 192.168.5.6 (NTP Server)
 192.168.5.7 (Syslog Server)
o Subnet Mask: 255.255.255.0

Router 1 Port Serial 2/0 will have the following IP address: 192.168.6.1, subnet mask:
255.255.255.0.
The Internet Router Port Serial2/0 will have the following IP address: 192.168.6.2, subnet mask:
255.255.255.0. And its Fast Ethernet Port IP Address is: 192.168.7.1, subnet mask:
255.255.255.0, which also means that the Network IP Address is: 192.168.7.0. The Mail server
on the 192.168.7.0 Network IP Address is: 192.168.7.3, and the PC on the same Network is:
192.168.7.2.
NETWORK CONNECTION TEST PLAN:
Test Description How Expected Result

Test connection from admin computer to the labs Ping from admin PC to 1F and 2F and Staff PC. Ping successful.
and staff computer.

Test connection from lab 1F to internet PC to Ping from 1F PC to Internet PC. Ping successful.
check the connection from the LAN to the Internet
via routers.

Test connection from all the computers to the Ping from 1F, 2F, Staff and Admin PC to the servers Ping successful.
servers (FTP, DNS, Web, Mail,…)

Test connection from router R1 to router Internet Ping from router R1 to router Internet Ping successful.

Test the connection to the printers Ping from staff and admin computers Ping successful.
IMPLEMENTATION:

Because by default, this router only has 2

Fast Ethernet ports / interfaces, thus I will
have to add three more Fa ports (because in
total I will need 5 Fa ports – and I need to
• Firstly, I’m going to place the Router in and name it “R1”
turnand
theconfigure
port offitsfirst).
ports.
 Before
After

Then I will configure the ports /interfaces with the IP addresses mentioned earlier. This
screenshot below show the configuration for interface Fa0/0 which is then connected to the
network 192.168.1.0 – 255.255.255.0, which is the network of lab computers on the 1st floor.
And I also have to change the state to up (turn the port status to on)
First Floor
Second Floor
Staff Computers
Admin computers
 Server Network

The next picture is the configuration of the interface Se2/0 IP address: 192.168.6.1
 Next I am going to put in the computers, switches, printers and servers of the
LANs and connect them with Copper Straight Ethernet Cable.

• Next I am going to put in the computers, switches, printers and servers of the LANs and
connect them with Copper Straight Ethernet Cable.
 Then, I will configure the DNS server.

• Then, I will configure the DNS server.

Configure its IP address, then
the same for all other
servers
Add the domain names and addresses accordingly to the addresses of
the mail and IP servers
 DOCUMENT AND ANALYZE TEST RESULTS
AGAINST EXPECTED RESULTS.
• Now, I are going to test our network again to see if everything works as I
expected. Firstly, I will ping from the admin computer to the lab computer to check
the connection:

successful!
Then, I will try to ping from the 1st floor lab computer to the internet PC (outside of the LAN) to
check the connection via the routers and switches:

successful!
 FTP SERVER

• ●Preparation
• -First, we go to Web Server and set up the domain name for the web is yo.com.
• -After that, we go to “Services” in the DNS Server to enter the name of the website we set up
and the IP Address of the Web Server(192.168.5.2).
• ●Function:
• -Now we will go to the Web Browser in a PC to check if we could access to the Web by enter
the domain name of the website.
 MAIL SERVER
• ●Preparation:
• -To start,we set up the domain name for each server. Mail 1 we named it yo.com and the user
for each computer in the server are user 1,user 2 with the same password 123. In Mail 2,we
also set up the domain name for server is di.com and for the computer in this Mail 2 we set up
just like the Mail 1 with 2 computers are user 1,user 2 with same password 123.Remember to
enter the domain name,IP Address of Mail 1 and Mail 2 into the DNS Server.
• -After set up the user name and password for all computer in each Mail Server we will go to
Configure Mail and fill every information that we set up in the Mail Server so that each PC can
send mail to each other.
• ●Function
• -To test if we can send a mail or not we will go to a PC and check the Configure Mail again and
go to Compose Mail and send a mail from with content “hello”.
• Example: i will Compose a mail from user 1 in Mail Server 1 to user 2 in Mail Server 2 with
content “hello”
• -We can receive the mail by going to the user 2 in Mail Server 2 and press the “Receive” button.
If the Mail pop up and show a sentence”receive success...” that mean your Mail Server work
well.
 TEST PLAN: DHCP
AND FTP
Test Description How Expected Result
Use the code to activate DHCP from the Router. Then, DHCP Result Successful
Create a group to grant IP to PC IP Address:192.168.1.2
Dynamic IP allocation for PC 1F

Use the code to activate DHCP from the Router. Then, DHCP Result Successful
Create a group to grant IP to PC IP Address:192.168.2.2
Dynamic IP allocation for PC 2F

Use the code to activate DHCP from the Router. Then, DHCP Result Successful
Create a group to grant IP to PC IP Address:192.168.3.2
Dynamic IP allocation for PC

Admin

Use the code to activate DHCP from the Router. Then, DHCP Result Successful
Create a group to grant IP to PC IP Address:192.168.4.2
Dynamic IP allocation for PC

Staff
 IMPLEMENTATI
ON

First I will go to Router (R1) to enter the code.

Next I will enter the code as shown below.

(1F- 1st Floor)

(2F-2nd Floor)
(ADMIN- Ground Floor)
(STAFF- Ground Floor)
Next you can enter the code as shown below to check if it is set correctly.

(This is the result) (This is the result)

And finally you will enter the PC to see if the router has granted dynamic IP successfully.
• First we go to the PC and then select Desktop.
• Second we switch to DHCP and wait a bit will show results

(1F- 1st Floor – DHCP request successful)

(2F- 2nd Floor – DHCP request successful)
(ADMIN - Ground Floor – DHCP request successful)
(STAFF - Ground Floor – DHCP request successful)
 DOCUMENT AND ANALYST TEST RESULTS
AGAINST EXPECTED RESULTS
So we have successfully allocated dynamic IP for PCs. This is also a result completely true to
what I expected.
PC:1F
• IP Address: 192.168.1.2
• Subnet Mask: 255.255.255.0
• Default Gateway: 192.168.1.1
• DNS Server: 192.168.5.5
PC:2F
• IP Address: 192.168.2.2
• Subnet Mask: 255.255.255.0
• Default Gateway: 192.168.2.1
• DNS Server: 192.168.5.5
PC: ADMIN
• IP Address: 192.168.3.2
• Subnet Mask: 255.255.255.0
• Default Gateway: 192.168.3.1
• DNS Server: 192.168.5.5
PC: STAFF
• IP Address: 192.168.4.4
• Subnet Mask: 255.255.255.0
• Default Gateway: 192.168.4.1
• DNS Server: 192.168.5.5
TEST PLAN: FTP
Test Description How Expected Result

We set up an account on FTP to access Logged in successfully

Log in to FTP from the computer FTP console

Upload a file to the FTP Server Use “put” to post the file Upload successful

Download the file from the FTP Server Use “get” to download the file Download successful
 IMPLEMENTATION
:
I will first click on FTP-Server then select the FTP service.
Next I will create an account and a password.
I have created two, one is a fully functional admin, the other is a user just to read
and list
Next we will move to the desktop of FTP-Server to select Text Editor to create a file.
We write the content in and click on the file
then click Save or Ctrl + S.
After creating successfully we will choose a machine to log in.
• Click on PC.
• Click Desktop and then select Command Prompt.
• Then we use the account created to login

Logged in Successfully
Use “put” to post the file. Remember add .txt
at the end of file’s name.

Upload successful
Then we use the following command to check
again.
To download, enter the following.

Download successful

Document and analyst test results against expected results:

Thus we have successfully logged in, uploaded and downloaded the file. As
expected of this is not difficult at all.
Following the previous sections, this section will explain the installation and operation of NTP
and Syslog.
NTP: I will configure the NTP and see if the devices display at the right time.
 After NTP is working now I will install Syslog.

So I have installed NTP and Syslog. These two protocols have worked well.
INTRODUCTION:
• Now the ACL part. I will create a separate ACL system for each tier to deny and allow some protocols to
access the router.

TEST PLAN:
• I will plan to install the ACL for the system. I will start with the first floor. I will give the first floor ACL 110
for that floor.
Next I will install the 2nd part and I will set that floor to 120.
And finally the staff and admin floor and that floor will be 130.
This is the ACL that I created for the floors.

After I have installed and configured all the floors, I will test to check if the ACL is working
properly.

I will test that the computers on the first, second and staff computers cannot connect to each
other except the admin machines can "ping" the rest.
So the ACL is working well. I will now continue to test services to see if they are affected by ACL.
The first will be SSH.
So that we can be sure that the ACL is working very well.