Threaded Case Study of Bangladesh Internet Press Ltd. (BIPL) By: Md. Ikbal Zavid Abul Kalam Asad Supervise By: Debanon Datta Legal Main Contact, CNAP Ahsanullah University of Science and Technology(AUST) Tejgaon, Dhaka

LAN Specifications: Transport Speed: 100BaseT & 100BaseFx Horizontal cabling shall be CAT6 UTP and will have the capacity to accommodate 100 mbps Vertical (Backbone) cabling shall be Fiber optic multimode cable. The cabling infrastructure shall comply with EIA/TIA 568 standards.

LAN MDF A Main Distribution Facility (MDF) room will be established as the central point to which all LAN cabling will be terminated. A Main Distribution Facility (MDF) room will be established as the central point to which all LAN cabling will be terminated. It will be the point of presence for the WAN Network connection. It will be the point of presence for the WAN Network connection. All major electronic components for the network, such as the routers and LAN swithces will be housed in this location. All major electronic components for the network, such as the routers and LAN swithces will be housed in this location. LAN IDF Intermediate Distribution Facility (IDF) rooms will also be established, where horizontal cabling lengths exceed EIA/TIA recommended distances. Intermediate Distribution Facility (IDF) rooms will also be established, where horizontal cabling lengths exceed EIA/TIA recommended distances. This site already has a conduit infrastructure running between the buildings. This site already has a conduit infrastructure running between the buildings. (Four) IDF's will service their geographical area and be connected directly to the MDF in a Star or Extended Star topology. (Four) IDF's will service their geographical area and be connected directly to the MDF in a Star or Extended Star topology.

Design Goals 1.Functionality: The design will provide Bangladesh Internet Press Limited (BIPL)'s Local Area Network (LAN) as well as Wide Area Network (WAN) link for data communication with other branch of the office and the Internet connectivity. 2. Scalability: The design will allow the network to grow without any major changes in the overall design. 3. Adaptability: The layered design will allow the network to adapt to and implement the future network technology. 4. Manageability: Network monitoring and management will be taken into account for ensuring the day to day network stability.

Consultant Workstations Programmer Workstation Operator Workstatio n Application Servers CURRICULUM CAT6 UTP ROUTER ADMIN Fiber optic cable Administrative Servers MDF Switch Library Servers IDF Switch HUB CAT6 UTP HUB CAT6 UTP HUB Marketing Workstations HR Workstation CAT6 UTP HUB CAT6 UTP Other servers Developer Workstation Logical Diagram:

Physical Diagram

MDF Diagram

IDF Diagram

Equipment List: SerialProductQuantity 01Cisco 2611 Router01 02Cisco Pix 525 Firewall01 03CISCO 1912F-EN 12 port 10bT 2-port 100bFX Switch01 04 CISCO 24-port 10/100 manageable (hubs) 11 05Cisco 412 Fasthub40 06Aluminum Racks/Ladder Rack02 07Wall Mount Racks (Lockable Cabinets) Port Patch Panel for MDF Port Patch Panel for IDF Port Fiber Cross Connect Patch Panels01 11RJ45 Terminators800 12Wall Mount Termination Kit400 13DNS Server01 14Mail Server01 15Print Server01 16 Application Server 01 17DHCP Server01 18Multi-mode Fiber Optic3 19CAT6 Cable27

CABLE SPECIFICATIONS At BIPL, we will be using two types of cabling: Fiber-optic multimode cable for the VCC (Vertical Cross Connect or Backbone) runs and CAT6 UTP (Unshielded Twisted Pair) for the HCC (Horizontal Cross Connect) runs. FIBER-OPTIC CABLE: Fiber-optic multimode cable will be run from the MDF (Main Distribution Facility) to IDFs (Intermediate Distribution Facilities). CAT6 UTP: CAT6 UTP (Unshielded Twisted Pair) will be used from all switches to hubs and from all hubs to workstations in the classrooms. This wire will constitute the majority of expense for the wiring due to the amount of usage. See the table below: We estimate the following meter based on distances in our diagram of BIPL: TYPE OF WIRINGLOCATION Fiber MMMDF to IDF CAT5 UTP Switches to Hubs; Hubs to Workstations

Cut Sheet DestinationCable IDType of Cable Length (Meters) IP Address DNS ServerS-1CAT Mail ServerS-2CAT Print ServerS-3CAT Application Server S-4CAT DHCP ServerS-5CAT Other ServerS-6CAT IDF1IDF1-1Multimode Fiber – IDF2IDF2-1Multimode Fiber – IDF3IDF3-1Multimode Fiber – IDF4IDF4-1Multimode Fiber –

IP Addressing Admin Network: /22 Curriculum Network: /22 Subnet Mask: The uplink ports to each room will be connected via CAT6 cabling to the appropriate IDF running at 100Mbps. The switches in each IDF will be connected directly to the head-in router at the office via multi-mode fiber optic cable. Admin Network: /22 All IP addresses on the Admin network will be statically assigned. The address of the workstations will be assigned based on the IDF where the machine connects. Curriculum Network /22 All IP addresses on the Curriculum network will be dynamically assigned. The pool of available IP addresses will be maintained at the district office DHCP server and pushed down to the backup DHCP server maintained on site on an hourly basis. The IP addresses are assigning based on building location with IDF4. The IP address range available for the Curriculum workstations will be

Servers DNS: Bangladesh Internet Press Ltd.(BIPL) contain a host for DNS that will maintain a complete directory of all staff personnel and staff population for that location. ADMINISTRATIVE SERVER: The Admin server which will house the staff tracking, attendance, grading and other administration function. It will only be made available to the staff. APPLICATION SERVER: All computers applications will be housed in a central server at the BIPL. As applications such as Word processing, Excel, PowerPoint are needed, they are retrieved from the application server. These servers will be made available to anyone at the school site. OTHER SERVER: It will be considered departmental (workgroup) servers and will be placed according to user group access needs.

Access Control List Access lists are very useful in implementing security on our network. Although the use of passwords, callback equipment, and physical security devices are helpful, they often lack the level of security needed in larger networks. The best advantage is that access lists allow the administrator to filter the packet flow in and out of the router interfaces. Access lists can offer all of the following:  Identify packets for priority  Identify packets for custom queuing  Restrict or reduce the contents of routing updates  Provide IP traffic dynamic access control with enhanced user authentication using the lock-and-key feature  Identify packets for encryption  Identify Telnet access to the router virtual terminals(Cont.)

Access Control List Extended access lists will be employed to ensure administrator network and district network security. This list will applicable to the BIPL router for following works: Allow Admin Network full access to any of the servers located at BIPL Allow Admin Network full access to any of the servers located at BIPL Not allow Curriculum Network to use FTP. Not allow Curriculum Network to use FTP. Allow Curriculum Network to use the Internet Allow Curriculum Network to use the Internet Deny all students access to the Admin network/Admin server/DNS server Deny all students access to the Admin network/Admin server/DNS server

Security  By utilizing ACLs on the routers, all traffic from the curriculum LANs will be prohibited on the admin LAN.  Applications such as and Directory services will be allowed to pass freely since they pose low risk.  A user ID and Password Policy will be published and strictly enforced on all computers in the District.  All computers in the District network will have full access to the Internet.  All ACLs will be controlled at the district office.

Internet All Internet connectivity will be controlled through the BIPL office. This connection will be highly controlled utilizing a double firewall implementation with a public network (Ethernet backbone) established for services that will be exposed to the Internet. These services include , Domain Name Services (DNS) and a World Wide Web server. All connectivity that is initiated from the Internet to the internal District network will be protected via ACLs on the routers that make up the doule firewall architecture.

IGRP IGRP is a distance-vector dynamic routing protocol. --IGRP will exchange its routing tables with its directly connectod neighbors every 90 seconds. --Flash updates, triggered by topology changes are also sent. The fjollowing services of commands will configure the router to router using IGRP protocol as well as set up the IP addresses for the router interfaces.

THANK YOU