King Fahd University of Petroleum And Minerals Computer Engineering Dept. COE – 444 Internetwork Design & MGT A structured Data Network Design and Upgrade for CCSE Network “Server Placement”

Group#11  Muhammad Al-Abdul-Hadi  Ahamd Mosaic  Amjad Muslih  Haider A. Al-Mubarac  Muhammad AL-Saeed

OUTLINE  Recommendations for Server Placement  Main Factors in Security Aspect  New Proposed Design  Problems Faced

Recommendations for Server Placement  CCSE-PSRV2 (Student print server, Antivirus server) o Remove it from VLAN 67(administration). o Put it in VLAN 172 (Student).  VLSI (COE Faculty Printer Server) o no need to place in the shared VLAN o suggest to place it in Faculty subnet, VLAN 65. o place it on 3Com since it connects all faculty switches together.

Recommendations for Server Placement (Cont.)  CCSE-DBP2 (Student publishing and database platform) oused mainly by students. oRemove from VLAN67 oPlace it in students VLAN172  CCSE-DBP1 (Database platform; publishing setup) oRemove it from VLAN67 oplace on VLAN 65 oassuming it will be used mainly by faculty.

Recommendations for Server Placement (Cont.)  MAKKAH (CCSE web server): Remove from VLAN64 Place in VLAN172 frequently accessed by student  CCSE-MATERIAL (MatLab Server): traffic of 51% (peak hour). Replace the 100 Mbps with 1 Gbps & connect it to switch 3Com /103.  CCSE-SOFTWARE: traffic of 45% (peak hour). replace the 100 Mbps with 1 Gbps. Upgrade server

Recommendations for Server Placement (Cont.)  KUZAMA, Bareed (mail server): oOld Workstation used as a server. oUpgrade it to a higher performance server

Recommendations for Server Placement (Cont.)  Soldier (POP3 Server, Mailbox Server, CCSE Network Time server): oPeak traffic 84.4%(high) oseems to be a loaded all the time. oKeep it in faculty VLAN65 oDuplicate one to VLAN172

Main Factors in Security Aspect  Physical Access. oPhysical place restricted to authorized people.  Administrative Delegation. oDeciding who will have administrative authority over the server  User Authentication. oTo verify that users are who they declare themselves to be.  User Authorization. oRegulating what users have access to log on and what server resources they can access.

Main factors in security aspect  System Privileges and Restrictions. oSetting the access permissions to the applications.  Application Privileges and Restrictions. oAccess to the applications on a server should be restricted to a subset of users based on their job function.  System Auditing. oNeeded for monitoring effectiveness of the configuration.  Security Patches Management. oPoor patch management can be particularly damaging to a server environment.

Security  From the above assessment it can be seen that the security used in CCSE servers is good and does not need any further improvement.

VLAN 64 (Administration and Monitoring) VLAN 172 (Student/Labs)

VALN 64 (UNIX Servers)

Problems  Lack of information: oWho uses what? oHow many users use the application? oHow frequently the application is needed by users?  Delay in getting the required information.  The traffic analysis doesn’t help in making decisions.

?