UNIT 8 SEMINAR Unit 8 Chapter 10, plus Lab 12 Course Name – IT Network Design Instructor – Jan McDanolds, MS, Security+ Contact Information: AIM – JMcDanolds – Office Hours: Wednesday 9:00 PM ET and Thursday 5:00 PM ET

UNIT 7 REVIEW Covered last week … Chapter 9 - Security and Privacy Architecture Security – integrated within all areas of the network and impacts all other functions on the network. Network Security - the protection of networks and their services from unauthorized access, modification, destruction and disclosure. Network Privacy – a subset of network security, focusing on protection of networks and their services from unauthorized access or disclosure. Three security considerations: protecting the integrity, confidentiality and availability of the network and system resources and data (CIA) OPNET ITGuru Lab 11 RSVP Resource Reservation Protocol Exercises 1 & 2

UNIT 7 REVIEW Quick check of Unit 7 Chapter 9 Security and Privacy Architecture #1 Physical security – name three areas. #2 A policy for user access should include _________ #3 A threat analysis lists what kind of assets?

UNIT 8 Network Design Chapter 10 – The last chapter where it all comes together! Design Concepts Design Process Vendor, Equipment and Service-Provider Evaluations Network Layout Design Traceability Design Metrics

UNIT 8 Design Concepts Builds upon the analysis and the architecture – adds the physical detail and vendor, product and service selections to the network. Example diagram: Top part – WAN architecture describing general topology Bottom part – design detail showing connections

UNIT 8 Design Concepts Design Products Key products of a network design: Network blueprints – locations, diagrams, etc. A component plan Vendor, vendor equipment, and service-provider selections Traceability Metrics for measuring design success

UNIT 8 Design Concepts Diagrams focus on logical functions of the network Similar to a construction design with foundation, walls, electrical wiring, plumbing, etc. Ex: Security design – integrated into network showing where policies would be applied.

UNIT 8 Design Concepts Architecture and Design Products – feed into the two parts of the design process – evaluations and layout

UNIT 8 Design Process Pg 394 Architecture products: Selected topology, selected technologies, equipment types/classes, supporting material, architectural relationships Analysis products: Requirements, flow specifications, problem statements, and service information See Cisco design white paper in Doc Sharing (Cisco newsoln.pdf)

UNIT 8 Vendor, Equipment and Service-Provider Evaluations Evaluation process

UNIT 8 Evaluation Criteria Assigning weights to design candidates… Once we have the candidates, we can produce RFPs

UNIT 8 Network Layout Logical Diagrams Logical diagram of a communication closet Shows the logical interconnection of devices from across a network.

UNIT 8 Component Plans Overlays line-up at strategic locations

UNIT 8 Design Traceability Example of security perimeter project

UNIT 8 Design Metrics Metrics for design coupled with metrics for requirements

LAB 12 Lab 12 in Experiments Manual Firewalls and VPN Network Security and Virtual Private Networks The objective of this lab is to study the role of firewalls and VPNs in providing security to shared public networks.

UNIT 8 Unit 8 Assignment Network Design 1.Summarize the differences between the two characteristics of broadcast and NBMA technologies: native broadcast support and connection support. 2. List and define four of the important functions and features of various networking technologies that should be considered prior to technology selection. 3. Explain why industry displaced FDDI with 100BaseT. 4.Compare and contrast frame relay vs. business DSL for WAN connectivity 5.Explain the role of network simulation in network design validation 6. Complete Laboratory 12. Create a brief summary explaining the outcome of these labs. Do exercises on page 157. Submit a lab report. 5 points for #1 & #3. 10 points for #2, #4, & #5. 10 points for the lab.