IT INFRASTRUCTURE

IT Infrastructure

IT Infrastructure

Introduction

This paper presents a complete network infrastructure for Dewry School building. The campus is big and encompasses vast area of land. The main aim of the paper is to develop and implement a network design of the campus which includes high definition IP cameras for surveillance, VLAN and WAN networks, switches, routers and in the end a contingency plan if the network fails. The devices used in this project are branded by Cisco and the model number and specifications of each device used in the networking design is presented in the below paper.

IT infrastructure design of Dewry School

WAN design of Campus

The Dewry WAN will consist of three regional hubs. Each hub will connect to 11 schools. There are a total of 33 schools in the Washington Elementary School District. Internet access will come from the District Office/Data Center across T1 lines out to its 11 schools and to the other two hubs.

Internet Connectivity

The Internet will come in on a T1 Frame Relay line through our Pix 535 firewall to gain access to the Ethernet PSTN Public Backbone. The Public Backbone will consist of a Master DNS server, a Master E-mail server, and an Apache Web server. The router at the District Office/Data Center will have ACLs and an Intrusion Detection System running on it to filter out any unwanted incoming Internet traffic.

The area between the router and firewall is considered the Demilitarized Zone. WESD will have an Intranet Services Backbone that will consist of a Backup server, Proxy/Cache/Content server for content filtering, Database server, E-mail server, Library server, DNS server, and PDC/Virus server. Each of the schools will gain Internet access through their individual hubs. Sunnyslope Elementary is linked to the District Office/Data Center. Another interesting note is that the Community School (which is in a remote location) will have Internet access via Integrated Services Digital Network (ISDN), because it only requires part-time connectivity to the district.

WAN Internet Security

We will be creating a dual firewall implementation, which will establish a demilitarized zone (DMZ) to allow traffic to access our public servers, but it block the external traffic from entering our private network. Our firewall of choice is the Cisco PIX 535. This firewall performs many important functions. It is an Enterprise-Class security firewall. It has 1.7 Gbps of firewall throughput and allows for 500,000 simultaneous sessions. This high simultaneous session number is important because Internet Explorer tends to open multiple sessions per web page. Not only will the PIX 535 firewall handle all inbound traffic for our public servers, it will also handle all outbound traffic for faculty and students at all schools and regional hubs. Other spec's include: 1-GHz Intel Pentium III Processor, 512MB or 1GB of SDRAM, 16 MB of Flash memory, 256 KB level 2 at 1-GHz, two 64-bit/66-MHz PCIs, and one 32-bit/33-MHz PCI.

Cisco PIX 535

Specifications

Enterprise-Class Security

1.7 Gbps Firewall Throughput

500,000 Simultaneous Sessions

Internet Explorer can have multiple sessions open per web page

1-GHz Intel Pentium III Processor

512 MB or 1 GB ...