Part 2 Case Study Fully Unreal Reality (FUR) is a growing enterprise in need of a...

Transcribed Image Text:

Part 2 Case Study Fully Unreal Reality (FUR) is a growing enterprise in need of a new design for their network. FUR now specialises in virtual reality headsets and is an industry leader in this field. Along with this, FUR has branched out further into VR games, becoming an industry leader in using haptic feedback to imitate human touch in games. They have excelled in creating cheap, but high quality, virtual reality headsets and haptic suits for gaming consoles and PC gamers. FUR have decided to move their headquarters, opting for a more modern and liveable location: Mawson Lakes Technology Park (Tech Park). This has put them in the difficult position of needing a network built for their new headquarters and their branch offices to be upgraded. FUR's previous head office in Sydney will become a branch office. Their Adelaide CBD branch office will move to Tech Park and will require significant upgrades to support the number of staff and devices. FUR currently has the following staffing requirements for each department: Sydney (the current HQ) Department Team Human Resources & Staff 25 25 Expected Growth in 5 Years Limited. Finance Design and Development Software Engineering 53 At least 30%. Game Design 11 At least 30%. VR Game Design 15 At least 50%. Quality Assurance 50 Research Limited. Limited. Art Concept Art 2 5 At least 10%. Virtual Reality 3D Modelling 3D Printing Research 13 At least 15%. 14 At least 40%. 41 At least 50%. Innovate 33 At least 30%. Prototype 12 At least 50%. Product Custom Support 120 At least 25%. Marketing 22 At least 10%. Training 10 Limited. Melbourne Branch Office Department Human Resources & Finance Design and Development Art Team Software Engineering Game Design Quality Assurance Research Concept Art Staff 5 23 3D Modelling Product Custom Support Training 15 5213752 Expected Growth in 5 Years Limited. Limited. At least 10%. Limited. Limited. At least 30%. At least 10%. At least 40%. At least 10%. Adelaide Department Human Resources & Finance Design and Development Art Virtual Reality Product Team Staff 2 Expected Growth in 5 Years At least 20%. 11 At least 30%. Game Design VR Game Design Quality Assurance 21 3D Modelling 4 At least 40% At least 20% Limited. 3D Printing 10 Limited. Research Innovate Prototype 11 Limited. 15 Limited. 25 Limited. Marketing 5 At least 10%. FUR has a few servers at each company location: Web, File and Email. Servers should all have externally accessible IP addresses. Servers and printers should also have an internal (private RFC 1918) static IP address. Other end devices will retrieve their IP configuration from DHCP. Servers should be in a DMZ zone; this means that a server should not be able to ping/access internal devices unless the internal device initiates the connection. Certain teams should also not be able to contact other teams. A list of general security policies (not business policies, firewall policies) include: HR should not be accessible by any team. The entire Virtual Reality (VR) department should not be contactable from any other team. Teams inside the VR department should be able to contact each other. . . VR Game Design team should be accessible to only the Game Design team. The Game Design team should still have access to everything else. All departments should have access to the Internet. Certain limitations apply: The VR department should have no access to Bandwidth Consuming, Potentially Liable, Security Risk, and Unrated web filter categories. The Art department should have no access to Social Networking. The entire company should have no access to: Adult/Mature Content, Security Risk categories. Social networking should be restricted to 30 minutes a day for every department except Art. Virtual Reality is high-bandwidth capable and as a result, traffic from the Virtual Reality department to anywhere should be limited to 100Mbps. Your role in this is to be the network consultant, providing a new network design, equipment list, security policies and traffic flow diagrams. This new design should support the expected growth in 5 years, as shown above. You need to calculate the new headquarter staff numbers. Staff are not expected to be made redundant in the transition to Tech Park. You are free to base the Sydney branch office staffing levels off Adelaide/Melbourne's current staffing levels. Network Design You are required to create a logical network diagram and IP addressing scheme (IP assignment table + VLAN table) for the entire new network. This means that Sydney will be a branch office in your diagram and Tech Park will exist. Use your knowledge of network design learned in other courses and the workshops to assist you in creating a logical diagram suitable to the new network. Remember, you are marked on suitability, scalability, security, redundancy, and all the other network design factors that you have learnt. You may want to go back to previous course Learnonline sites to assist you with implementing network design factors appropriately. You can also view the Network Design video on the course website. Your logical diagram should be drawn using Draw.IO (https://app.diagrams.net/). You are given significant freedom in what you choose to do in terms of design, link speeds and hostnames. Keep all decisions appropriate to the case study, include justifications and assumptions. Draft Security Policies & Traffic Flow for Tech Park Headquarters After you have decided on your new design it is time to write your draft security policies and illustrate how the network will work with the draft security policies implemented. You only need to create these policies, use cases, and traffic flow diagrams for the new Tech Park Headquarters. Your draft security policies should be written like how you would write a firewall policy (they will be implemented as firewall policies in Part 3). These draft security policies should take the form of a table. The format of the table is up to you to decide on and make. All policies should use the same table format. Traffic flow diagrams should clearly illustrate how traffic will move throughout the network in different use cases. At the very least a traffic flow diagram should show: Who initiated the connection in the use case, Where the traffic flow is allowed to go, Where the traffic flow is not allowed to go. You will need to create more than one traffic flow diagram. You may find it easiest to write several use cases to show network activity ("HR connects to the Internet", "VR connects to the Art department") and then draw traffic flow diagrams based off the use cases. Ensure the use cases are included in your traffic flow supporting document. Equipment List The second task in this part is to create an equipment list. This may take the form of paragraphs for each device or a table which cleanly outlines the equipment that has been chosen for the new network design. Equipment for this new network should include: Networking devices (NOT consumer-based devices, enterprise vendors only): Routers, Layer 3 switches, Layer 2 switches, Access Points, o Wireless LAN Controllers. Firewall appliances (these MUST be Fortinet). Prices for the above Licensing Hardware The equipment list should not include: Printers, Servers, Other end devices. All equipment choices should be justified and compared to other potential solutions. All choices should also be researched, particular attention should be paid to the port speeds, density, and compatibility with Fortinet. It is not appropriate to state, "Because it will work well for this company". Your equipment list should include references, you might find footnotes to be particularly suitable. A footnote should include a link to the website/resource and the date you viewed it. Part 2 Case Study Fully Unreal Reality (FUR) is a growing enterprise in need of a new design for their network. FUR now specialises in virtual reality headsets and is an industry leader in this field. Along with this, FUR has branched out further into VR games, becoming an industry leader in using haptic feedback to imitate human touch in games. They have excelled in creating cheap, but high quality, virtual reality headsets and haptic suits for gaming consoles and PC gamers. FUR have decided to move their headquarters, opting for a more modern and liveable location: Mawson Lakes Technology Park (Tech Park). This has put them in the difficult position of needing a network built for their new headquarters and their branch offices to be upgraded. FUR's previous head office in Sydney will become a branch office. Their Adelaide CBD branch office will move to Tech Park and will require significant upgrades to support the number of staff and devices. FUR currently has the following staffing requirements for each department: Sydney (the current HQ) Department Team Human Resources & Staff 25 25 Expected Growth in 5 Years Limited. Finance Design and Development Software Engineering 53 At least 30%. Game Design 11 At least 30%. VR Game Design 15 At least 50%. Quality Assurance 50 Research Limited. Limited. Art Concept Art 2 5 At least 10%. Virtual Reality 3D Modelling 3D Printing Research 13 At least 15%. 14 At least 40%. 41 At least 50%. Innovate 33 At least 30%. Prototype 12 At least 50%. Product Custom Support 120 At least 25%. Marketing 22 At least 10%. Training 10 Limited. Melbourne Branch Office Department Human Resources & Finance Design and Development Art Team Software Engineering Game Design Quality Assurance Research Concept Art Staff 5 23 3D Modelling Product Custom Support Training 15 5213752 Expected Growth in 5 Years Limited. Limited. At least 10%. Limited. Limited. At least 30%. At least 10%. At least 40%. At least 10%. Adelaide Department Human Resources & Finance Design and Development Art Virtual Reality Product Team Staff 2 Expected Growth in 5 Years At least 20%. 11 At least 30%. Game Design VR Game Design Quality Assurance 21 3D Modelling 4 At least 40% At least 20% Limited. 3D Printing 10 Limited. Research Innovate Prototype 11 Limited. 15 Limited. 25 Limited. Marketing 5 At least 10%. FUR has a few servers at each company location: Web, File and Email. Servers should all have externally accessible IP addresses. Servers and printers should also have an internal (private RFC 1918) static IP address. Other end devices will retrieve their IP configuration from DHCP. Servers should be in a DMZ zone; this means that a server should not be able to ping/access internal devices unless the internal device initiates the connection. Certain teams should also not be able to contact other teams. A list of general security policies (not business policies, firewall policies) include: HR should not be accessible by any team. The entire Virtual Reality (VR) department should not be contactable from any other team. Teams inside the VR department should be able to contact each other. . . VR Game Design team should be accessible to only the Game Design team. The Game Design team should still have access to everything else. All departments should have access to the Internet. Certain limitations apply: The VR department should have no access to Bandwidth Consuming, Potentially Liable, Security Risk, and Unrated web filter categories. The Art department should have no access to Social Networking. The entire company should have no access to: Adult/Mature Content, Security Risk categories. Social networking should be restricted to 30 minutes a day for every department except Art. Virtual Reality is high-bandwidth capable and as a result, traffic from the Virtual Reality department to anywhere should be limited to 100Mbps. Your role in this is to be the network consultant, providing a new network design, equipment list, security policies and traffic flow diagrams. This new design should support the expected growth in 5 years, as shown above. You need to calculate the new headquarter staff numbers. Staff are not expected to be made redundant in the transition to Tech Park. You are free to base the Sydney branch office staffing levels off Adelaide/Melbourne's current staffing levels. Network Design You are required to create a logical network diagram and IP addressing scheme (IP assignment table + VLAN table) for the entire new network. This means that Sydney will be a branch office in your diagram and Tech Park will exist. Use your knowledge of network design learned in other courses and the workshops to assist you in creating a logical diagram suitable to the new network. Remember, you are marked on suitability, scalability, security, redundancy, and all the other network design factors that you have learnt. You may want to go back to previous course Learnonline sites to assist you with implementing network design factors appropriately. You can also view the Network Design video on the course website. Your logical diagram should be drawn using Draw.IO (https://app.diagrams.net/). You are given significant freedom in what you choose to do in terms of design, link speeds and hostnames. Keep all decisions appropriate to the case study, include justifications and assumptions. Draft Security Policies & Traffic Flow for Tech Park Headquarters After you have decided on your new design it is time to write your draft security policies and illustrate how the network will work with the draft security policies implemented. You only need to create these policies, use cases, and traffic flow diagrams for the new Tech Park Headquarters. Your draft security policies should be written like how you would write a firewall policy (they will be implemented as firewall policies in Part 3). These draft security policies should take the form of a table. The format of the table is up to you to decide on and make. All policies should use the same table format. Traffic flow diagrams should clearly illustrate how traffic will move throughout the network in different use cases. At the very least a traffic flow diagram should show: Who initiated the connection in the use case, Where the traffic flow is allowed to go, Where the traffic flow is not allowed to go. You will need to create more than one traffic flow diagram. You may find it easiest to write several use cases to show network activity ("HR connects to the Internet", "VR connects to the Art department") and then draw traffic flow diagrams based off the use cases. Ensure the use cases are included in your traffic flow supporting document. Equipment List The second task in this part is to create an equipment list. This may take the form of paragraphs for each device or a table which cleanly outlines the equipment that has been chosen for the new network design. Equipment for this new network should include: Networking devices (NOT consumer-based devices, enterprise vendors only): Routers, Layer 3 switches, Layer 2 switches, Access Points, o Wireless LAN Controllers. Firewall appliances (these MUST be Fortinet). Prices for the above Licensing Hardware The equipment list should not include: Printers, Servers, Other end devices. All equipment choices should be justified and compared to other potential solutions. All choices should also be researched, particular attention should be paid to the port speeds, density, and compatibility with Fortinet. It is not appropriate to state, "Because it will work well for this company". Your equipment list should include references, you might find footnotes to be particularly suitable. A footnote should include a link to the website/resource and the date you viewed it.