CMT 350: Network infrastructure design diagram

Background: Kamehameha Institute is an organization that provides educational offerings to non-traditional students via the Institute’s website in a three-tier web, application, and database configuration. The State of Hawai’i regulates the educational sector, driving the need to ensure Kamehameha follows the State’s strict security and regulatory requirements. Kamehameha’s leadership is also very concerned with the threat posed by the online theft of their unique intellectual property. Additionally, the number of Hawai’ian entities breached by threat actors is on the rise. Thus, security, privacy, and compliance are all important considerations for the Kamehameha network architecture.

Your boss, the Kamehameha Institute’s Chief Operating Officer (COO) has tasked you to design a network infrastructure for three facilities located in the Hawaiian Islands of Honolulu, Hilo, and Lihue. The COO stipulated that you must provide for strengthened defenses to protect Kamehameha’s cultural heritage. After meeting with the COO, the two of you drafted the following set of requirements for your network design:

• Each of the facilities has three floors:
  • The first and second floor of each building requires 150 network connections each for machines connected to the management network used by administrators to manage the network devices
  • The third floor of each building requires 75 network connections for the servers
  • All sites require redundant connectivity to the other sites (e.g., Internet redundancy between the sites can be accomplished through a single Internet connection and a point-to-point link between the sites or two Internet connections provided by separate vendors along with point-to-point VPN connections between the sites)

• Each datacenter is a redundant failover environment to the other datacenters (Hilo, Honolulu, Lihue)
• A constant connection between the three locations, carrying at least 75 Mbps of data
• All servers at all locations must have redundancy
• Protection from intrusions is required and should be documented
• A plan to verify security and failover measures is required

Submission: Using a network diagramming tool such as Microsoft Visio, or free tools such as LibreOffice Draw or Draw.io available at https://draw.io (no sign-in or registration required), create a network diagram (drawing) specific to the organization that encompasses the three facilities and also depicts any necessary interconnections. Figure 1 shows the draw.io ‘new network diagram’ dialog window:

Figure 1. Draw.io New File Dialog Showing the Network Diagramming Templates

Your diagram should include enough detail to show the topology interconnections. The viewer should be able to understand the Kamehameha Institute’s network environment and be able to implement the architecture you develop. Ensure that you properly cite any external sources.

One of the keys to producing a viable network diagram is labeling the objects consistently and descriptively. Think about what you would want to know about a network device if you logged into it with little prior information. Consider location, floor number, or other pertinent information. At a minimum, include the following elements:

• IMPORTANT: Your network diagram must include an identifying label (e.g., callout box) that includes your class and section, assignment title, your name, and the date. Edit the items in italics. Your assignment will not be accepted if this element is missing:

Example Network Diagram Callout Box.

• Any necessary hardware
• Site-to-Site (WAN) connections (e.g., leased line connectivity, satellite, etc.)
• Annotate the following values for each of the Sites:
  • Network ID
  • Useable Range
  • Subnet Mask
  • CIDR Value
  • Broadcast Address
• All devices require hostnames complying with the following naming conventions:
  • Routing Devices: Rx; where x is the site number incremented by a value of 1 for each routing device
  • Switching Devices: Sx; where x is the site number incremented by a value of 1 for each switching device
  • Servers: SRVx where x is the server number incremented by a value of 1 for each server

• For each site routing device, implement a private ip addressing scheme using a range suitable for corporate infrastructure and include the following:
  • management vlan
  • production vlan

• High availability

When finished, export the diagram as a PDF document (Note: You will need to use this diagram again in Project 3, so ensure you save the xml source file!) and submit it to the Assignment folder. Figure 2 demonstrates how to export your draw.io diagram as a PDF document:

Figure 2. Draw.io ‘Export’ as Function to PDF

When you are finished, upload your work to the dropbox below.

Review the syllabus for information about late policies and resubmitted assignments.