IT3662 SAFENET Network Security and Integration Report Assignment And Case Study on HQ and Branch

Project Instructions

1. Form a group with 3 students.
2. Software needed for this assignment: MS word, MS Visio, Packet Tracer 8.2 or better.
3. The following files must be zipped together for submission to Politemall (name your zip file using member’s admin number):

1. Report (MS word file or PDF)
2. Packet Tracer File
3. PowerPoint File that is used in your presentation
4. Presentation is 20 Minutes for each group. Every student must present.

Figure 1: Company Network Diagram

Case Study

You are a network and security expert hired by SAFENET.com. The management assigned you with the tasks of integrating the headquarters and branch office networks as well as securing the existing network infrastructure. Above is a BASE template which you SHOULD modify or change in accordance to your needs.

The company’s network setup is as follows:

Table1: Company Network Specification

SAFENET.com requirements as follows:

• The company HQ & Branch networks are connected to the Internet via the ISP for both HQ and Branch Office. For this project, we are using the ISP router to simulate the Internet. Connect both HQ and Branch routers using cross cables to the ISP routers.
• Your company has acquired the public IP address range of 200.100.0.0/27 which is shared by HQ and Branch Offices (See Table 1 above). Assign the first usable address to the ISP router’s Ethernet interface and last usable address to each HQ and Branch router’s Ethernet interface. The company uses the private address range of 10.10.0.0/14 for assigning address within the four networks.
• Configure appropriate VLANs and use VTP version 2 to securely propagate VLAN information throughout the HQ network. Ensure inter-VLAN routing communication is setup.
• Within the HQ/Branch, configure appropriate static routing. Company routers should not exchange routes with ISP router as they are connected via Site to Site IPSec tunnel.
• On HQ and Branch routers, implement PAT for internal users to access Internet. Ensure only appropriate IP addresses can access the internet. You may use the router interface for IP address translation. Create a PC and web server on the ISP to simulate internet.
• On HQ and Branch routers, implement DHCP service to automatically assign IP address to all the PC in user networks.
• On HQ server network, install a web server for company website.
•  Appropriate DNAT should be configured by using the next available public IP address range. Implement DNS service if necessary.

Assignment PROPOSAL – MILESTONE 1 – Secure Network Topology Design (To be completed by Week 6)

1. Network Design with 10.10.0.0/14 is completed
2. Subnetting is completed
3. You should have completed the implementation of requirements 1 to 7.
4. Full connectivity should be achieved
5. VLANs, Trunking, Inter-VLAN Routing, Dynamic Routing Protocols, DHCP, PAT and web services should be done.
6. Ensure that your presentation demonstrates the working state of the network with clear explanations of each element

• Network Time Protocol (NTP) allows routers on the network to synchronize their time settings with an NTP server. A group of NTP clients that obtain time and date information from a single source have more consistent time settings and Syslog messages generated can be analysed more easily. This can help when troubleshooting issues with network problems and attacks. Implement NTP and Syslog on company networks.
• The company wants to allow central account management for network devices access. Suggest and implement a server-based authentication method for the company.
• SSH is a network protocol that establishes a secure terminal emulation connection to a router or other networking device. SSH encrypts all information that passes over the network link and provides authentication of the remote computer. As all the company’s network engineer uses CLI to configure the router, you need to implement SSH on all the company network devices.
• The company is very concern about the security level of the company network, you are to apply appropriate firewall technology on the company’s routers.
• Due to the increases of cyber intrusion activity in the internet, the company also wants you to implement Intrusion Prevention System (IPS) on company routers.
• On HQ networks, implement Layer 2 security to prevent various attacks such as STP manipulation attack, Broadcast storms, MAC address table overflow attack and VLAN attack. (Exclude Storm Control configuration)
• On HQ and Branch routers, configure site-to-site IPsec VPN when traffic flows from their respective LANs. The IPsec VPN tunnel is between
• HQ router and Branch router via ISP router. ISP acts as a pass-through and has no knowledge of the VPN. You may suggest and implement appropriate ISAKMP and IPSec security parameters. Document down the parameters in the report.
• You may suggest and implement additional security measures and features to protect the company network, 5% will be awarded based on the difficulty level of the feature implemented.

Assignment – FINAL Project Presentation (To be completed by Week 14) – 30%

1. Each team member is to complete any THREE (3) network security features from items 8 to 15.
2. You are to demonstrate a working copy of Packet Tracer File.
3. Each team member is to showcase THREE (3) features

Assignment Requirements:

You are required to produce a Network Security project proposal (report) which covers the following areas:

1. Physical network diagram (In Packet Tracer format)
2. Detail documentation on the implementation of the above requirements:
3. Reason of suggested implementation (if any)
4. Steps YOU took to configure and implement the solution
5. Configuration parameters in table form (if any)
6. Additional implemented features (if any)
7. Technology Theories are NOT required in the presentation

Further to the report, a working packet tracer file and power point slides for your presentation should be submitted.