Basic Network Design

May 17, 2008 12:05pm pdt

1. lrmoore 28,970
2. ebjers 15,750
3. from_exp 15,302
4. that1guy15 12,852
5. donjohnston 11,698
6. giltjr 10,950
7. pseudocyber 9,050
8. RobWill 8,700
9. donmanrobb 7,075
10. DevilWAH 6,600
11. JFrederi... 6,500
12. _jesper_ 6,475
13. naughton 6,450
14. mkielar 6,000
15. mikebern... 5,680

1. lrmoore 90,534
2. donjohnston 34,918
3. pseudocyber 21,521
4. from_exp 19,502
5. RobWill 18,500
6. ebjers 17,750
7. giltjr 17,050
8. that1guy15 14,602
9. mikebern... 14,430
10. KCTS 12,068
11. keith_al... 11,189
12. _jesper_ 10,475
13. Jim_Coyne 10,450
14. JFrederi... 10,300
15. tvman_od 9,380

02.08.2008 at 05:01PM PST, ID: 23149498

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

7.6

Basic Network Design

Zone: Network Design & Methodology

Hi,

Looking for a basic design for a small/medium community college campus. College has about 1200 users in 7 seperate buildings all connected to a MDF. Have two running ISP's, and 1 backup line, connected to a Cisco 3725 router. Also, have two ASA 5500's (new), two 3850 Cisco routers (new), and a server farm for outside/inside access. Any ideas?

Currently have 3com switches at each building, but can put cisco 1841's if recommended.

Know this is not efficient, so want to make changes.

ISP1 ISP2 backup
___|___|____|__
| Cisco 3725 |
_____________
| |
_________ _____________
server farm -| ASA 5500|----------| 3com switch | -------------- DHCP server (3 class C blocks)
------------- -------------------
| | | | | |
-----------------
| Fiber switch |
------------------
| | | | | |
buildings 1 2 3 4 5 6

Thanks!

Start your free trial to view this solution

Question Stats

Zone: Networking

Question Asked By: kenkup90

Solution Provided By: hbustan

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

02.09.2008 at 02:52AM PST, ID: 20856877

hbustan:

I would connect Each ISP to a separate router and have them behind a firewall.

For each building perhaps connect 2 links connecting to 2 main switches (1 link to each switch) for redundancy and reliability. The 2 main switches will connect to the other end of the firewall.

Perhaps move the DHCP server to the server farm and keep them in a 3rd link from the firewall.

All Internet servers need to be moved to the DMZ segment of the firewall.

02.09.2008 at 03:19AM PST, ID: 20856931

diepes:

I would also recommend that you use a separate subnet/vlan for each building.
If your 1or2 central switches support L3 routing.

The trend is to smaller and smaller subnets, even down to subnet per access switch, to avoid/eliminate spanning tree.

If you are thinking of VoIP in the future, also try and daisy chain as few as possible devices

02.09.2008 at 02:54PM PST, ID: 20859111

kenkup90:

Would it be ISP, firewall, then router or ISP, router, then firewall?

Is it better with an 1841 router at each building or a switch?

Proposed?

ISP1 ISP2 backup
___|___|____|__
| Cisco | Cisco |
| 3835 | 3835 | HSRP or GLBP?
|_______|____ _|
| outside
dmz ____________
server farm - -----------------| ASA5500 |
DHCP server (3 class C blocks) -------------------
| | | | | | inside
-----------------
| Fiber switch | router or VLAN's?
------------------
| | | | | |
buildings 1 2 3 4 5 6 router or switch?

Thanks for your continued assistance.

02.09.2008 at 09:24PM PST, ID: 20860178

hbustan:

Answer 1) ISP, router then firewall
Answer 2) There are new switches with Layer 3 (almost like a switch with integrated router) - these are recommended;

Also on your ASA5500, separate the dmz from the server farm.

HSRP or GLBP??? I'm not sure which suits you more - I would go for HSRP if possible.

Router or VLANs? Routers and VLANs and co-exist.

02.09.2008 at 09:25PM PST, ID: 20860182

hbustan:

Last line should read:

Router or VLANs? Routers and VLANs can co-exist.

02.10.2008 at 03:05AM PST, ID: 20860750

kenkup90:

Hi,

Not sure what you mean by "separate the dmz from the server farm". Should I put the server farm on the inside interface?

Already have the equipment purchased, will need to configure using it.

Thanks for the information you have provided.
Look forward to your response.

02.10.2008 at 04:04AM PST, ID: 20860836

hbustan:

I meant put the DMZ in the right leg of the ASA5500 (Similar to your 1st diagram which had the DHCP)

On the left keep DHCP with the Server farm (DMZ should not be part of that)

DMZ will include any server that will be accessed by the Internet users directly such as your main Web Server and/or Mail gateway and/or main DNS Servers. Other servers not accessed directly by Internet users need to be on the Server Farm such as your database servers, File/Sharing Server, Intranet server, Development servers, etc.

I hope this clarifies my suggestion.

Accepted Solution

20080236-EE-VQP-29 / EE_QW_2_20070628