NET603 Week 4 — Network Planning

Planning/Designing a small business network.

Request For Proposal Details

Company Name: there4 travel
A new travel agency that will be based in Christchurch airport & have a branch in Nelson + it must account for possible new locations in the future.
Proposal: IT services will be based at the Christchurch Head Office, and operate a server based, centrally managed solution to the Head Office & the Nelson branch.

Company Staff

1. Christchurch HQ: 1 x CEO/Manager Christchurch
   7 total 1 x Assistant Manager Christchurch
   5 x Travel Agents Christchurch
2. Nelson Branch: 1 x Manager Nelson
   4 total 1 x Assistant Manager Nelson
   2 x Travel Agents Nelson
3. Additional Staff: 2x Mobile Travel Agents

System Requirements Planning

1. Internet access (HTTP, HTTPS, DNS, DHCP, virtual switch? virtual router? Do we have access to a publicly routable IP through NAT/PAT ?
2. Email (SMTP, IMAP4, POP3)
3. DRP (Backup plans, separate cloud storage)
4. IPv6 implementation plan (Dual Stack, NAT)
5. Cloud Services for corporate purposes.

Network/Assessment Requirements

1. Server functionality with active directory (or equivalent) We have chosen FreeIPA
2. Mail server
3. Web server
4. File Server (potentially Samba)
5. Print Server
6. Antivirus server software
7. Resilient Active Directory
8. Desktop implementation (uses for example primary AD to authenticate)
9. Resilient DNS (Currently using OpenDNS with port forwarding from LAN requests to the router).
10. DHCP failover
11. Active Directory Sites and Services
12. Network monitoring software
13. Two or more router configurations connecting HQ to/from Nelson Branch
14. Implement a firewall solution on all exposed routers to protect from intrusion
15. Demonstrate a successful desktop implementation that
    a) Uses AD (or equivalent) for authentication
    b) Has access to email
    c) Browser access to HQ website and Internet
    d) Home drive mapped
    e) Client antivirus (Endpoint security)
16. Backup recover plan

Optional
17. Relevant cloud-based services integrated into the test system network.

18. IPv6 and IPv4 dual stack implementation.

Our Network Setup

Server Functionality: We have implemented a FreeIPA server which is a Linux equivalent of Active Directory. Other linux client machines can then be set up to log into accounts set up by the freeIPA server through LDAP.

Firewall/Router config: pfSense. We have created 2 different VM’s, each running their own pfSense to connect the WAN interface to the LAN interface. These will be used for the Christchurch office, and the Nelson branch.

In each of the LAN environments, we have a FreeIPA server running on Fedora, we can then connect devices to this server to use LDAP to log into accounts that we can set permissions for, this provides authentication, authorization and accounting.

User requirements:

Security Groups:

1. Management: Highest security level, access to all files, router, dhcp, and dns config, admin controls etc.
2. Assistant Management: Access to relevant files and controls, decided by management, may have access to some config settings.
3. Travel Agents: Access to relevant general files needed for day to day work, customer data entry, shared files between branches but separated by folders or some structure.
4. Mobile Travel Agents: Mobile devices, access to relevant general files, shared files.

Customer Requirements:

1. Make Bookings
2. Do we need a website ? maybe just to display a contact page with email ?
   Does the business have or need a website for things like bookings ? or is that all done on site ?

System Requirements: (Fulfills the needs of the users)

1. Shared drives (File sharing) / Database
2. Individual drives (File storage)
3. Secure email
4. Phone/VoIP services
5. Printing services
6. Web access
7. Secure access between HQ and Nelson (VPN, RDP, VNC, SSH)
8. Secure devices (endpoint security)
9. Secure Network (DNS, network monitoring, firewall)
10. Active Directory or equivalent / server/client functionality.

Moving forward we are looking at implementing a more managable DNS option.