it 200 project 2 - group 4 - final

Ideal Networking Designs, LLC

LAN Design Upgrade Proposal for Corbomite Cases Inc.

Design ArchitectsLoren Schwappach

John Yavenue

Miles Tran

Bradley Buer

Kenneth Diggs

Proposal created for: Corbomite Cases Inc.

IT 200 Introduction to Networking

Colorado Technical University (CTU) Colorado Springs

Professor Kala Marietta (CEO)

December 2010

Design Topics

Topic Presenter Proposal Highlights Miles Tran

Logical Network Layout John Yavenue

Wiring Diagram Loren Schwappach

Geographic Coverage Plan Loren Schwappach

ISP Features John Yavenue

Network/Physical Security Kenneth Diggs

Equipment & Costs Rollup Bradley Buer / John Yavenue

Installation Timeline Miles Tran

Design Summary Loren Schwappach

Parallel Backbone = Highly reliable and resilient networking:• Every high end, plenum, Cat 6e cable will be tripled in the design. This equates to faster speeds, better load balancing, and superior durability.• Our setup is exceptionally resilient to breakdown and single point of failure problems.• Our security and data protection scheme remains the industries finest!

Upgradeability:• This entire proposal is built with future expansion and reduced maintenance in mind. Allowing your company to continue without progressing without interruption.

Speed:• Using CAT6e cables, and a Gigabit internet connection allow your employees to transfer files and share information at tremendous speeds (Gigabit/sec networking).

Superior Customer Service:• We offer the best top quality, 24 hour, phone and internet support as well as a professional networking team with the know how needed to tackle all of your networking problems.

Proposal Highlights

In our updated proposal we intend to bring the following in action

ISP Duality• 2 separate lines ISP lines

• Each line will be capable of Gigabit speed Internet

Enhanced security• Each ISP will go through a firewall/IPS and onto a router• VPN will be used in concert with the logical layout to maximize security• Several security options are available to maximize network integrity

Elimination of points of failure• Device parallelism & loss of single points of failure• Intelligent layout creates redundancy in the most crucial areas

Backup Strategies• Data securely stored onsite• Data also stored safely offsite• UPS devices allow safe shutdown in the case of power loss

Proposal Highlights Continued

Logical Network Layout

The proposed logical network layout was designed to accomplish the following:

Dual Gigabit (1000 Mbps) Internet connectivity at each site from separate providers:

Drastically increases service uptime and stability while offering tremendous communication

speeds.

Dual hardware firewalls:

Cisco ASA 5580-40 with integrated IPS/IDS/UPS.

Dual Cat-6e connectivity to every node (computer, printer, etc):

Triple Cat6e cables run to every node (two are used)

Spare Cat6e is left for quick troubleshooting and network expansions (i.e. IP phones,

etc.)

Minimizes downtime and ensures incredible networking speeds.

HP Storage Works EVA4400

On-site backups with 5 TB capacity, and capability to burn to DVD

Comcast DSAN w/HFC PS with 10 TB capacity off-site backup service

Logical Network Layout Continued…


Geographic Coverage Plan


The proposed wiring diagram was designed to accomplish the following objectives:

Triple Cable Pairing• 3 Plenum Cat-6e cables (Colored and Identified) to each node.

Computer & Printer Identification• Allows quick isolation of faulty cabling• Used for intelligent grouping of network nodes in VPN

Computer & Printer Identification• Triple CAT6e wiring to over 87 Computers, 12 network printers, and extra capacity for future network demands (i.e. VOIP telephones, etc.)

Wiring Diagram

Wiring Diagram Continued...

PrimarySecondaryVOIP

WirelessAccess Point 1




Cable length

needed to support:

Length

(ft)

Stations

(x)

#Cables

Multiplier

(x)

#Geo

Locations

Multiplier

(x)

Needed

(ft)

B1G3a 70 4 3 4 3360

B1G3b 40 4 3 4 1920

B1G4a 30 2 3 4 720

B1G3c 50 3 3 4 1800

B1G2a 60 4 3 4 2880

B1G5a 60 1 3 4 720

B1G5b 70 1 3 4 840

B1G5c 80 1 3 4 960

B1G2b 70 2 3 4 1680

B1G5e 90 3 3 4 3240

B1G2c 90 2 3 4 2160

B1G5d 100 1 3 4 1200

B1G1a 130 5 3 4 7800

B1G2d 140 1 3 4 1680

Wireless Access 1 20 1 3 4 240


Total Total 32040

Extra Multiplier (x1.1) Purchace: Purchace: 35244

Cable length

needed to support:

Length

(ft)

Stations

(x)

#Cables

Multiplier

(x)

#Geo

Locations

Multiplier

(x)

Needed

(ft)

B1G10c 60 4 3 4 2880

B1G10b 40 3 3 4 1440

B1G10a 50 4 3 4 2400

B1G8a 70 3 3 4 2520

B1G9a 70 4 3 4 3360

B1G8b 90 4 3 4 4320

B1G8d 110 4 3 4 5280

B1G9b 80 4 3 4 3840

B1G8c 90 2 3 4 2160

B1G11a 90 1 3 4 1080

B1G7a 90 2 3 4 2160

B1G11b 110 1 3 4 1320

B1G8e 90 4 3 4 4320

B1G7b 120 2 3 4 2880

B1G11c 130 1 3 4 1560

B1G6b 110 2 3 4 2640



Total Total 45480

Multiplier (x1.1) Purchace: Purchace: 50028

Cable length

needed to support:

Length

(ft)

Stations

(x)

#Cables

Multiplier

(x)

#Geo

Locations

Multiplier

(x)

Needed

(ft)

B2G3a 20 1 3 3 180

B2G3b 30 1 3 3 270

B2G3c 40 1 3 3 360

B2G1a 60 4 3 3 2160

B2G1b 70 4 3 3 2520

B2G1c 80 4 3 3 2880

Total Total 8370

Multiplier (x1.1) Purchace: Purchace: 9207 Total Cat6e cable length needed for all four sites using triple redundancy, and covering over 90 nodes is: 94,479ft of cable. That’s approx: 23,620ft at each site.

At Each Site (For Triple Pairs):Bld1 1st Floor: 8,811ft (37 Jacks)Bld1 2nd Floor: 12,507ft (45 Jacks)*Fabrication Plant: 3,069ft (19 Jacks)* = NA at Denver Site

Internet Service Provider (ISP) Features

Comcast Ethernet Dedicated Internet and Gigabit Internet (Data only) is available at all site locations (AZ, CO, NM).

Price estimates will need to be performed for each site location to determine exact pricing.

Comcast sales representative quoted typical Gigabit Internet Services start around $1,980.00 monthly (Internet only) and can fluctuate to more than $25,000.00 monthly depending upon the setup and service agreement.

Comcast also offers a DSAN (secure, 20TB off-site backup service) with dedicated Gigabit Internet networking at $7,238.12

Construction charges may apply & a long term ( 3 year or greater) service agreement is required.

- John Yavenue

Internet Service Provider (ISP) Features

Quest iQ and Gigabit Internet is available at all site locations (AZ, CO, NM).

Price estimates will need to be performed for each site location to determine exact pricing.

Quest sales representative quoted typical Gigabit Internet Services start around $2,723.00 monthly (Internet only) and can fluctuate to more than $30,000.00 monthly depending upon the setup and service agreement.

Construction charges may apply & a long term ( 3 year or greater) service agreement is required.

- John Yavenue

Network Security

Security Plan:

• Employee education and training– Distribution and control of month security

news letters.

– Bi-annual security training

– Annual network access tests

• Physical security training, automatic watch dog system (optional), and security personnel (optional).– No removable media (USBs, floppy disks,

etc.)

• Hardware/Software security, smart card readers (optional), auditing system, proxy server, firewall, IDS/IPS, and biometric readers.

Other areas that need addressed:

• Physical and environmental considerations.

• Emergency and disaster plans preparation.

• User Auditing, Service Monitoring, and protocol tracking.

• DRP (disaster recovery planning) training for a supervisory personnel.

Network Security

Building access restrictions:

• Employee work areas will be restricted to authorized personnel use only.

Escort requirements and visitor control procedures.

• Sign in/out logs

• Access badges (Escorted/Unescorted)

• For employees going into unauthorized zones will be escorted.

External (Highly Optional ) Security Measures:

• Surveillance cameras every 20 ft on/in the building, with a DVR device.

• Motion detectors

• Finger print bio-metric scanner to all access doors.

• Computer monitor privacy shields

Fire/Bomb Emergencies:

• Fire extinguishers on every wall.

• Fire exits well mark.

• Emergency evacuation training.

• There will be a fire exercises every two month!

Equipment and Cost

Name

Catalog

or

Part Number

Vender Description & Features

Unit

Price

$US

Discount

%

Final

PrinceQty

Total

Price

SmartPro 3kVA Line Sine

UPS, 2U RackSMART3000RM2U SmartPro

3000VA / 3kVA high efficiency line interactive,

extended-run 2U rack / tower UPS $ 1,019.00 0 $ 1,019.00 4 $ 4,076.00 Hyperlink

Rackmount Fiber

Enclosure

12 port capacity

SC Patch Style Plate

F-ENC-RMT-SW-2P-

STSXfiber.com

Rackmount Fiber Enclosure

12 port capacity

SC Patch Style Plate

$ 145.02 0 $ 145.02 1 $ 145.02 Hyperlink

L-120 – Rackmount LCD

Monitor & Keyboard4028754 Cisco 1U LCD 17in, Dell Rack Railsn, w/ Keyboard $ 3,076.00 10 $ 2,768.40 2 $ 5,536.80 Hyperlink

Cisco ASA 5500 Series

Adaptive Security

Appliance

Firewall/IPS

ASA55804010GEK9

-RFCisco

ASA 5580-40 Appliance with 2 1000Base-T Ports,

1GB Flash Memory, 12GB Std Memory Dual AC,

Data Encryption (3DES/AES)

Firewall Protection Includes: (Instant Messenger,

Blocking P2P, Blocking Remote Access

Authentication, Worm Scanning, Malware

Protection, User Authentication, Web Content

Filtering, Anti-phishing, Anti-spyware, Anti-spam,

Antivirus, Content Filtering, Application Layer

Security, Intrusion Prevention)

$ 64,984.00 10 $ 58,485.60 2 $ 116,971.20 Hyperlink

Cisco System MDS 9124

4Gbps FC SwitchDS-C9124-0-K9 Cisco

MDS 9124 4Gbps FC switch with 8 ports active

and 24 expansion slots for total of 24 ports

capable of 1, 2, and 4Gbps

$ 1,906.64 10 $ 1,715.98 2 $ 3,431.95 Hyperlink

Cisco 7201 Series Router CISCO7201 Cisco

Cisco 7201 Chassis Router, Four Gigabit Ethernet

Ports, 1GB Memory, 256MB Flash, Dual Power

Supply, Expansion Slots for 4 Fiber Optic Network

Adapters,

Features: (VPN, NAT support, load balancing, MPLS

support, IPv6 support, Access Control List (ACL),

support, Quality of Service (QoS), HSRP)

$ 12,539.00 10 $ 11,285.10 2 $ 22,570.20 Hyperlink

Cisco Catalyst 4948

48 port

1000Base-T Switch

WS-C4948E-S CiscoCatalyst 4948E, IPB, 48-Port 10/100/1000+ 4 SFP+,

AC p/s $ 6,673.93 10 $ 6,006.54 9 $ 54,058.83 Hyperlink

Cisco ASA 5505-BUN-K9

150Mbps FirewallASA5505-BUN-K9 Cisco

Cisco ASA 5505-BUN-K9

150Mbps Firewall

8 Fast Ethernet Ports (2 PoE)

3DES/AES VPN

$ 389.00 0 $ 389.00 2 $ 778.00 Hyperlink

Total $ 207,568.01

Network Connectivity Requirements

Equipment and Cost Rollup Continued…

Name

Catalog

or

Part Number


Unit

Price

$US

Discount

%

Final

PrinceQty

Total

Price

Cisco 1941W-A/K9

Wireless 802.11n Access

Point

Integrated Services

Router

CISCO1941W-A/K9 Cisco

CISCO1941W-A/K9 Cisco Systems 1941 Integrated

Services Fast EN Wireless router

600Mbps data rates withWi-Fi Protected Access

(WPA) and AES (WPA2), EAP authentication: Cisco

LEAP, PEAP, EAP TLS, EAP-FAST, EAP-SIM, EAP-MD5,

EAP-TTLS, TKIP/SSN encryption, MAC authentication

and fi lter, LEAP and EAP-FAST, wireless client

l imiting, RADIUS accounting, Pre-Shared Keys

$ 1,120.00 10 $ 1,008.00 2 $ 2,016.00 Hyperlink

Intel Pro/1000 MT Dual

Port Server Adapter

5 pack

PWLA8492MTPAK5 IntelIntel Pro/1000 MT Dual Port Server Adapter (5

pack) $ 904.05 0 $ 904.05 72 $ 65,091.60 Hyperlink

TRENDnet 1000Base-TX to

1000Base-SX SC-Type

Multi-Mode

Fiber Converter

TFC-2000MSC TRENDnet

TRENDnet 1000Base-TX to 1000Base-SX SC-Type

Multi-Mode

Fiber Converter

50/125µm MMF 850nm

(830nm~860nm) -9.5 -18 8.5 550m

$ 111.95 0 $ 111.95 6 $ 671.70 Hyperlink

SC-SC Duplex Multimode

50/125 (850 nm

wavelength) Armored

Fiber

Custom Made fiber.com

SC-SC Duplex Multimode 50/125 (850 nm

wavelength) Armored Fiber

255mx6fibers=1530m + 10m=1540m

$ 16,640.00 0 $ 16,640.00 3 $ 49,920.00 Hyperlink

CAT 6 Plenum (1000')

Blue CB142-6PL-BL Abergetty CAT 6 Plenum (1000') Blue $ 221.00 0 $ 221.00 28 $ 6,188.00 Hyperlink


White CB142-6PL-WH Abergetty CAT 6 Plenum (1000') White $ 221.00 0 $ 221.00 28 $ 6,188.00 Hyperlink


Red CB142-6PL-RD Abergetty CAT 6 Plenum (1000') Red $ 221.00 0 $ 221.00 28 $ 6,188.00 Hyperlink

CAT 6 Keystone Jack -

Blue 100 TypeCN381-6BL Abergetty CAT 6 Keystone Jack - Blue 100 Type $ 1.66 0 $ 1.66 385 $ 639.10 Hyperlink

CAT 6 Keystone Jack -

White 100 TypeCN381-6WH Abergetty CAT 6 Keystone Jack - White 100 Type $ 1.66 0 $ 1.66 385 $ 639.10 Hyperlink

CAT 6 Keystone Jack - Red

100 TypeCN381-6RD Abergetty CAT 6 Keystone Jack - Red 100 Type $ 1.66 0 $ 1.66 385 $ 639.10 Hyperlink

CAT 6 Shielded (1000')

Grey - EMF ResistantCB142-6FS-GY Abergetty CAT 6 Keystone Jack - White 100 Type $ 193.48 0 $ 193.48 9 $ 1,741.32 Hyperlink

Low Voltage Mounting

BracketHW187-9 Abergetty Low Voltage Mounting Bracket $ 0.95 0 $ 0.95 150 $ 142.50 Hyperlink

3 Port Keystone Wall

Plate - WhiteWP200-3W Abergetty 3 Port Keystone Wall Plate - White $ 0.45 0 $ 0.45 150 $ 67.50 Hyperlink

Total $ 139,921.92

Network Connectivity Requirements Continued


Name

Catalog

or

Part Number


Unit

Price

$US

Discount

%

Final

PrinceQty

Total

Price

HP ProLiant DL320 G6

Application Server4009351 Cisco

HP ProLiant DL320 G6 E5630 Application Server

1 Intel Xeon Quad Core 2.53GHz Processot

6GB Memory (96GB Max)

1 GbE NIC (2 Ports)

$ 2,735.00 10 $ 2,461.50 1 $ 2,461.50 Hyperlink


Rack Server

SQL Server

4009351 Cisco


AMD Opteron™ Model 6128 (8 core, 2.0 GHz)


1GbE NC382i Multifunction 4 Ports

$ 6,949.00 10 $ 6,254.10 1 $ 6,254.10 Hyperlink

HP ProLiant DL385

WEB Server4009351 Cisco



(2) 1GbE NC382i Multifunction 4 Ports

$ 2,349.00 10 $ 2,114.10 2 $ 4,228.20 Hyperlink

HP StorageWorks

EVA44004009351 Cisco

HP StorageWorks EVA4400 w 4GB Cache

Drive Type: 8 - 600GB (10,000RPM) HDDs

Drive Desc.: 96 - LFF Fibre Channel/FATA/SDD

$ 3,725.00 10 $ 3,352.50 1 $ 3,352.50 Hyperlink

Total $ 16,296.30

Optional/Recomended Servers


Name

Catalog

or

Part Number


Unit

Price

$US

Discount

%

Final

PrinceQty

Total

Price

EVERFOCUS ECOR4D-250

MPEG 4, 250GB, DVRECOR4D-250 EVERFOCUS

4 Ch. MPEG4, Compact DVR with 120 FPS, GUI

Feature & Built-in DVD Burner. 250 GB Hard Drive $ 396.00 0 $ 396.00 2 $ 792.00 Hyperlink

560 TVL

IR CAMERACA-ES502VR42 CANTEK

CANTEK, CA-ES502VR42, 560 TVL IR CAMERA WITH

2.8-12mm VARIFOCAL LENS $ 206.00 0 $ 206.00 4 $ 824.00 Hyperlink

APX-101- Ceiling

Mounted PIR Sensor

Intrusion Detector

APX-101 Aleph

The Aleph APX101 Ceiling Mount Sensor are

dedicated high ceiling PIR intrusion detectors.

Each model is Pet Immune with choice switch

selectable sensitivity.

$ 71.50 0 $ 71.50 4 $ 286.00 Hyperlink

KnightWatch 150 Watt

MD Security LightEQX150LMDWHT KnightWatch 150 Watt Motion Detection Security Light $ 35.00 0 $ 35.00 4 $ 140.00 Hyperlink

Actatek Finger Print

AccessACTA-1K-FP Actatek

Hectrix has released the Fingerprint only ACTAtek

model that is based on 500 dpi Optical

Fingerprint Scanning Technology

$ 1,190.00 0 $ 1,190.00 2 $ 2,380.00 Hyperlink

Privacy Computer Filter KMW55705 KensingtonKensington Flat Panel (LCD) Privacy Computer

Filter Anti-glare Screen 19" LCD $ 150.42 0 $ 150.42 90 $ 13,537.80 Hyperlink

Tri-class Dry Chemical

Fire ExtinguishersC8774 Amerex Corp

Multipurpose monoammonium phosphate dry

chemical extiguishers effectively snuff out

ordinary combustibles, flammable liquids, gases

and electrical equipment fires. Heavy-duty steel

cylinders resist corrosion and impacts

$ 46.30 0 $ 46.30 30 $ 1,389.00 Hyperlink

Total $ 19,348.80

Optional Physical/Network Security Items


Name

Catalog

or

Part Number


Unit

Price

$US

Discount

%

Final

PrinceQty

Total

Price

Comcast Monthly DSAN

Backup Sercive w/HFCN/A Comcast

Quoted: 10TB DSAN Backup Sercive w/HFC PS by

Comcast (Monthly Service) $ 7,238.12 0 $ 6,514.31 1 $ 6,514.31 Hyperlink

Comcast Gigabit Ethernet

without DSAN Backup

Service

N/A Comcast Quoted (estimate) for monthloy Gigabit Internet $ 1,980.00 0 $ 1,980.00 1 $ 1,980.00 Hyperlink

Quest Gigabit Ethernet N/A Quest Quoted (estimate) for monthloy Gigabit Internet $ 2,723.00 0 $ 2,723.00 1 $ 2,723.00 Hyperlink

Option 1: Entire Package N/A N/ANetwork Connectivity Requirements + Servers +

Security Devices $ 383,135.03 0 $ 383,135.03 1 $ 383,135.03 N/A

Option 2:

Network+ServersN/A N/A Network Connectivity Requirements + Servers $ 363,786.23 0 $ 363,786.23 1 $ 363,786.23 N/A

Option 3:

Network OnlyN/A N/A Network Connectivity Requirements + Servers $ 347,489.93 0 $ 347,489.93 1 $ 347,489.93 N/A

Monthly Service Quotes

Installation Timeline

Your custom designed proposal included the following:

1)From the moment we land at the site, our friendly team of experts will make your proposed network upgrade as quick and hassle-free as possible while ensuring the highest quality install.

We expect to begin and complete installation at all four sites (including router, switch, and server installation/setup/and testing) within 1-2 weeks.*

* Availability of components and shipping times can cause large delays in proposal implementation.

• Office Bld. [Total estimated time: 7 days]

Physical [3 days] • Racks will be placed in equipment room and assembled [Day 1]

• Includes firewall, servers, switches, cabinets, and monitor/keyboard• Placement of routers [Day 1]

• Laying of triple wires to routers• Laying triple wires to 87 computers [Day 2]

• Installation of tracks and jacks• Laying wires for 12 network printers [Day 3]

• Installation of tracks and jacks• Placement and installation of UPS devices [Day 3]

Logical [3 days]• Configuring devices [Day 1]• Creating VPN [Day 2]• Finalizing configuration [Day 2]

• Ensure functionality and ease of use for each device• Test backup strategies [Day 3]

Security [1 day]• Installation of card readers (Optional) [4 hours]• Installation of Cameras and motion detectors (Optional) [4 hours]• Test security devices [2 hours]

Installation Timeline

• Warehouse [Total estimated time: 5-8 days]

Physical [2-4 days]• Racks will be placed in equipment room and assembled [Day 1]

• Includes firewall, servers, switches, cabinets, and monitor/keyboard • Placement of routers [Day 1]

• Laying of triple wires to routers• Laying triple wires to computers [Day 2-4]

• Installation of tracks and jacks• Placement and installation of UPS devices [Day 2]

Logical [2-3 days]• Configuring devices [Day 1-2]• Creating VPN [Day 1]• Finalizing configuration [Day 2]

• Ensure functionality and ease of use for each device• Test backup strategies [Day 2]

Security [1 Day]• Installation of card readers (Optional) [4 hours]• Installation of Cameras and motion detectors (Optional) [4 hours]• Test security devices [2 hours]

Installation Timeline continued

Summary

Your custom designed proposal included the following:

Parallel backbone with no single point of failure.

Upgrade & expandability.

Phenomenal speeds.

Unsinkable protection.

Highest quality service at the lowest possible price.

Large team of nationally recognized networking experts.

Questions?