Small Office $/$ Home Office $($SOHO$)$ Network Implementation

For this assignment, you will create a network diagram to display a network solution that is suitable for a

small business.

Imagine a business is located in an office park in one floor of a new office building $($insurance$,$

accounting, real estate, etc.$).$ The office has all of the modern features of a contemporary workplace,

including adequate and clean power, air conditioning, and good lighting. The office was built with a

secure computer room that already has a direct connection to a local Internet Service Provider's regional

network; this connection will be used for access to the Internet.

The office will include cubical space and office space for $18$ workstations. Four $(4)$ of the workstations

will be located in private offices for the company executives, and the remaining $14$ workstations will be

deployed into cubicles for the employees. The cubicles are located in a spacious, open cubicle area. The

computer room is directly adjacent to the cubicle area, and it has power and cooling that is adequate for

server needs. The computer room has been built with appropriate physical security, so there is

controlled access to the servers. All workstations and servers in all offices, cubicles and other areas are

all easily within $30$ meters of each other, so no cable run will exceed $30$ meters.

For basic security reasons the network design must separate any servers accessible from the Internet in

an area that is logically separate from a private internal area where the internal services and

workstations will reside using a DMZ $($refer to the $"$DMZ and Firewall Placement" section in Chapter $19$

of your textbook$).$ Regardless of where they may reside, the servers and workstations must be protected

from attack.

The diagram must include at a minimum two logically different areas in the network; one area will be

accessible from the Internet, and a second internal area for the workstations and internal servers which

will not be directly accessible from the Internet.

In the internal area, there are several requirements: $1)$ Provide wireless service to all employees. $2)$

Management is particularly concerned that employees do not abuse their access to websites while they

are at work, so employee access to external websites should be controlled. All attempts to visit any

external website which originate from within the internal area will be required to use a proxy server.

All workstations in the internal area shall be wireless DHCP clients, so there must be a DHCP server to

manage IP address requests. Other servers in the internal area will include a database server and the

proxy server mentioned in the previous paragraph.

There will be two network printers in the internal area. The IP addresses of the wireless access point, the

IP addresses of all servers, and the IP addresses of both network printers shall be static addresses $($these

are wired connections$).$ Only the workstations in the internal area will have DHCP delivered IP

addresses.

In the Internet accessible area, a web server and mail server will be deployed. These servers must be

publicly accessible as they will host the company website and company email.

Essential equipment for the Network Design$/$diagram

Internal Area

$$ Wireless Access Point $$ not directly connected to the Internet

$$ DHCP Server

$$ Database Server

$$ Proxy Server

$2$ Network Printers

$18$ Workstations

Internet Accessible Area

$$ Web Server

$$ Mail Server

$$ Secure Shell Server $($bastion host $$ refer to the "Bastion Hosts" sidebar in Ch$.19$ of the textbook$)$

Network Components

$$ Router$($s$)$ as needed

$$ Switch$($es$)$ as needed

$$ Firewall$($s$)$ as needed

$$ Network Intrusion Detection$/$Protection System