NETWORKS AND TELECOMMUNICATONS

A FULLY FUNCTIONAL NETWORK DESIGN
FOR
SHELLY FASHION

PRESENTED BY:
Osazuwa Olufemi George

Business requirement
Shelly fashion is a clothing boutique that sells clothes to both male and female customers. Their goal is to be the biggest retail clothing store in the country which aims to provide customers from the ages of 5 to 45 years of age a wide variety of quality clothing.
The clothing retail store is open six days a week to customers who come in and buy their clothes directly at the store. The transaction is recorded and stored on the store’s computer with a Store Management Software which keeps track of inventory, sales, and computes the profits of the retail store biannually.
Shelly fashion is looking to expand its reach using internet technology so it would be able to meet with the growing number of customers and also to connect all its other and future branches together to form a centralized network. With the network the retail store would be able to launch its home delivery option where customers would be able to buy clothes online and have their goods brought to them at their homes without having to be physically present at store.
The business owners want to embark on a project to set up a telecommunications network which should be able to reach their business requirements. Shelly fashion’s business requirements for the proposed network are as follows: * Reduce operating cost by cutting cost too make telephone calls over telephone lines. * Generate revenue by reaching more customers via the web. * Increase client satisfaction. * Remote access * Business partner connectivity * Increase employee productivity * Better customer service

Design requirements
The design requirements for the network should be standard. The network design requirements are stated below: 1. Functionality: the working or functionality of the network is the absolute bottom line. Because the network is an integral part of enabling the organization to do their jobs effectively and efficiently, this part is essential. It is here that the use of Service Level Agreements (SLAs) is essential. 2. Scalability: As the organization grows, the network must be able to keep pace. This network and its initial design must enable it to expand accordingly. (NB: A network that cannot keep pace with the organization's needs is not much use). 3. Adaptability: The network must be capable of responding to changes. In this case, the network should have the capabilities to embrace new technologies in a timely and efficient manner. This becomes extremely important as the network ages because change within networking is racing forward at breakneck speeds. 4. Manageability: Since management is the ultimate goal to provide a “true” and “better” proactive network, the network must have the proper tools and design to ensure that the administrator is always aware of its operation and current status. 5. Cost effectiveness: Since budgets and resources can be limited in most cases, building or expanding the network while staying within the predetermined budget is always a benefit to proper network design. 6. Reliability: As the WAN is the backbone of the network, reliability is usually the most important requirement in the designing of the network. 7. Latency: Another big concern with users on the network occurs when network access requests take a long time to be granted. In this case, users should be notified about a latency problem in the network. 8. Compatibility: The network should be compatible with standards or legacy systems, since compatibility is always going to be an issue within the network throughout its life. 9. Simplicity and easy configuration: The network should be simple and easy to configure. 10. Support for remote offices and telecommuters: In today's telecommunications environment, remote satellite offices are becoming commonplace and require network connectivity, so the plan must be accordingly. The organization rapidly increases the number of telecommuters. This must be kept in mind as the placement of network components are determined to ensure that they can handle this requirement when it becomes a priority for the organization.

Network assessment
There are already existing telephone lines in the retail store that it uses to communicate with its other branches, suppliers, business partners and customers. In all branches there is a intercom system that networks all the different departments of the retail store.
We found in our assessment that Shelly fashion network lacks some of the security, reliability and performance most of today’s business demand. Based on our assessment, the current condition of your technology environment is primarily due to lack of quality IT consulting and support, and secondary due to some additional configuration changes required to establish the appropriate security and stability. We found major issues that we recommend addressing immediately. Assessment & Analysis * Lack of redundant drives in some of Shelly Fashion branches. * Norton personal anti-virus software installed on all PCs; no automatic updates enabled on 16 of the 27 PCs that the company is using in all the branches * No connectivity between the branches results in increased traffic, storage, lack of standardized file sharing and lack of unified backup strategy. * No windows operating System automatic update enabled for the workstations in the branches. * No backup configured for the transaction that are going on on every branches. * No disaster recovery plan in place. No procedure in place that can be followed to restore. There is no written disaster recovery procedure in place. Components or full system functionality. In case of disaster, this can lead to longer down times and outages. * No spyware removal solution in use * Found network shares that look like they need to have restricted access. All information is currently available to all on the network. Group policies are not configured properly and share permissions are not standardized. * There are 20 PCs (mix of Dell, HP and Samsung) and 7 Laptops (Toshiba, IBM and HP) 3 all-in-one color inkjet printers approximately 2 years old. * Users have limited training concerning the windows 7 operating systems

Recommendations * Replace inkjet all-in-one printers with newer, faster laser copier/printer machines. These offer much lower per page printing costs. You will likely recoup your investment in 6-9 months and enjoy considerable savings thereafter. * Business critical servers need to have drive redundancy configured in case of drive failure. Without redundant drives, there is the a potential for large amounts of revenue loss due to the repairs, reloading of the OS, reloading of the applications and restoring the data from backups. * The current IT service partner does not seem to have the technical expertise that your business requires. This can result in unnecessary risks and unplanned downtime. * The current IT provider is extremely slow to respond to your needs. * Organizational units and group policies are not configured correctly. Reconfiguring these important settings will result in improved security, easier system management. * Routers and switches have no firmware or system update plan in place. These devices are often left without updates for a significant time, resulting in weaker security and degraded performance. These components should be reviewed and updated to the latest firmware to keep the network at optimum health and performance. * Consider establishing a full-time VPN connection between the branches for better resource integration. * Enable Norton automatic update on all the PCs Replace inkjet all-in-one printers with newer, faster laser copier/printer machines. These offer much lower per page printing costs. You will likely recoup your investment in 6-9 months and enjoy considerable savings thereafter. * Replace inkjet all-in-one printers with newer, faster laser copier/printer machines. These offer much lower per page printing costs. You will likely recoup your investment in 6-9 months and enjoy considerable savings thereafter.

We are confident that the issues we found can be addressed quickly, resulting in improved security, better system management, increased performance, and greater productivity for yours users.

Infrastructure selection
The local area network for each branch would need a star topology network that would connect to a virtual private Network (VPN) which would link all other branches together. What we also need for this network is; * Modems for every branch * Routers * Switches * Twisted pair LAN cables * File servers * 4 Workstations for each branch

Security strategy
The security methodology is designed to protect the availability, integrity, and confidentiality of data in the organization's information technology (IT) system. * Confidentiality: The system contains information that requires protection from unauthorized disclosure. Examples: Timed dissemination information (for example, crop report information), personal information, and proprietary business information. * Integrity: The system contains information that must be protected from unauthorized, unanticipated, or unintentional modification. Examples: Census information, economic indicators, or financial transactions systems. * Availability: The system contains information or provides services that must be available on a timely basis to meet mission requirements or to avoid substantial losses. Examples: Systems critical to safety, life support, and hurricane forecasting.
Our security strategy involves establishing computer security policies and contingency plans in case of a disaster; protecting data from malicious and non-malicious attacks, as well as non authorized access. Furthermore, it will prevent unauthorised users such as hackers and attackers gaining access to the system and disrupt services, render systems useless, or alter, delete, or steal information. Methods, Tools, and Techniques for circumventing security measures
(Establishing Proactive and Reactive Strategies)
The security system will be based on physical, technical and administrative controls (it includes both preventive and detective controls.).
The physical controls or measures include: * Backup of files and documents; Backup material should be stored in a secure location constructed of non-combustible materials, including two-hour-rated fire walls. * Security guards stationed at the entrances of facilities will intercept intruders and ensure that only authorized persons are allowed to enter. * Locks and keys will be used for controlling access to restricted areas. * Fire extinguishers will be conveniently located for easy access in case of fire outbreak. Also, fire and smoke detectors will be strategically located to provide early warning of a fire.
The technical controls involve: * Access control software is to control sharing of data and programs between users. It provides the ability to control access to the system by establishing that only registered users with an authorized log-on ID and password can gain access to the computer system. * Antivirus software will be installed on all microcomputers to detect, identify, isolate, and eradicate viruses. * Audit trails and violation reports will be frequently and regularly reviewed by security officers and data base managers to identify and investigate successful or unsuccessful unauthorized accesses.
Administrative controls consist of: * Security awareness training that helps users to understand the benefits of security practices; thus, preventing the most common security problem. * Security Policies and Procedures; * Network security policies (for example, e-mail and Internet policies). * Data security policies (access control and integrity controls). * Computer security management and coordination policies.

* Contingency and disaster recovery plans and tests; the disaster recovery plan is a document containing procedures for emergency response, extended backup operations, and recovery.
Testing
Tests will be carried out after the reactive and proactive security strategies have been put into place. These tests will be performed using simulation attacks on a test or lab system; subsequently, the various vulnerabilities of the security system, policies and controls will be adjusted accordingly.

Network management strategy
Network Management System
The network management system will define the strategy for managing the network; it includes things like software, equipment, security and telecommunication. Its main objective is to ensure that the network is running at its best daily to continue to expand the organisation, maintain its services and ensure the company’s success.
Our network management system for the company will consist of consistently watching routers and switches to see if they are online; as well as managing and maintaining any interface or IP address that communicates over the network; that is any device used in the organisation to make daily business transactions.
The network administrator will use SNMP application (Simple Network Management Protocol) to manage and monitor all the devices connected to the network.
Communication is of utmost importance in network management in order to know what is going on, what issues exist, and how to better maintain and manage the network for the future; the network management system will also involve the customers and employees; because they are the ones using the network every day, therefore they have more knowledge on what is going on with the system. By involving them in the management, it will be easier to get to know about any issue or problem with the network and also what potentially could be done to improve the business.
Network Management Architecture
The following diagram shows how data is managed on the network:

It is an architecture for Cisco Systems for managing data network. This architecture includes a Cisco Call Manager server to manage Voice over Internet Protocol (VoIP); and shows how the Call Manager server is integrated into the NMS topology.
The network management architecture includes the following: * Simple Network Management Protocol (SNMP) platform for fault management. * Performance monitoring platform for long term performance management and trending. * CiscoWorks2000 server for configuration management, syslog collection, and hardware and software inventory management

Network Management * Fault Management: A management system alerts the end user when a fault is reported and corrective actions can be taken. The goal of the fault management is to detect, isolate, log, notify users, and correct faults encountered in the network in order to keep it running effectively. To do so, traps should be enabled consistently on network devices and a RMON alarm and event will be implemented for fault monitoring. * Configuration Management: It includes configuration aspects of network devices such as configuration file management, inventory management, and software management. The goal is to monitor the network and system configuration information so that the effects on network operation of various versions of hardware and software elements can be tracked and managed. * Performance Management: it monitors and measures various aspects of performance using the SNMP so that overall performance can be maintained at an acceptable level. The performance management solution that we will use is InfoVista; to monitor performance and assure IP based network, services and applications. * Security Management: it provides access to network devices and corporate resources to authorized individuals only. * Accounting Management: Usage information of network resources.
Proof of concept
The following is a list of tests that have been conducted to prove our network design: * Ping Equipment and severs: Printers and other devices on the network have been pinged to see if they communicate with each other and tests show it is successful. * Routing and Switching * Security testing * Availability testing * Application load testing
The above tests have been conducted on the network design and all test meet with our desired expectations. This provides a proof that the proposed network design concept can achieve the objectives that it was designed to achieve.
Design proposal/ review

The topology used is the star topology
Our network architecture is a set of several interconnected computer equipment. Each device is connected to the network through a physical medium (FTP Category 6 cable).
The equipment used in our network architecture are:
- Router Cisco 1800 (playing the role of gateway)
- Router Cisco ASA 5510 (playing the role of Firewall)
- Cisco Linksys Switch (Allows you to connect computer equipment)
- Modem Sagem (Allows connection to our network to the Internet)
So we have a network of dimension four (4) sub-networks.
- Administration
- Mail Service
- Accountung
- Data center
These four (4) sub-networks are connected through a switch cisco Linkys 16 ports each, which implies that we have four (4) cisco Linkys switch in our network architecture.
We also note the presence of two physical servers running on HP-branded Windows operating server 2008 standard and playing roles following system:
Windows Server 2008
- Active directory server (for authentication of network users)
- DNS server (for resolving host names and network equipment)
- DHCP server (remote IP address of the computer network)
Windows Server 2008
- Mail server (for sending and receiving email)
The client computers are mostly HP brand computers; and they are running the Windows Seven OS.
The information system of our system is based on a computer network that facilitates the management and smooth running of activities from within the company.
The information system of our network infrastructure relies on a network consisting of a set of computer equipment federated TCP / IP (Transport Control Protocol / Internet Protocol) mode routed using CISCO routers and switches.
Thus, a Cisco ASA 5510 located in server room acts as a Firewall. The category 6 FTP cable connects the router to the gateway (Router Cisco 1800) to which is attached the switch (Cisco Linksys); meanwhile allowing the interconnection of different servers and computer network equipment. A modem connected to the router Sagem Firewall allows the entire network to be connected to the Internet.
Implementation
For the implementation plan, an initial network test will occur. This will be done during off-hours to minimize possible problems; however, the final test will be done during normal business hours to completely evaluate the network performance. The following items below will be completely under evaluation:
- Verify if the design meets key business and technical goals
- Validate LAN and WAN technology and device selections
- Verify the service provider provides the agreed-upon service
- Identify any bottlenecks or connectivity problems
- Test the redundancy of the network.
- Analyze the effects on performance during network link failures.
- Determine the optimization techniques to meet performance and other technical goals.
- Analyze the effects on performance while the network links or devices is under construction
- Identify any risks that can impede implementation and determine the plans for contingencies. Furthermore, we will provide a follow-up after implementation. We will follow up every day until all issues have been resolved and the design has been fully completed.