CN2 - Assignment 1
CN2 - Assignment 1
CN2 - Assignment 1
W.M.M. Weerasekara
wireless LAN controller and lightweight using VLANs and subnetting, which
1
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
2
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
eliminating the need for manual The applications used in the InnoFlex
configuration of IP addresses. Manufacturing Company's network
design include:
6. VTP (VLAN Trunking Protocol): 1. Wireless LAN controller: A wireless
VTP is a Cisco proprietary protocol LAN controller is a device that
that allows for the management of manages and controls wireless access
VLANs across multiple switches in points in a network. It provides
the network. It allows for the features such as wireless security,
creation, deletion and modification of QoS, and client tracking.
VLANs in a centralized manner,
which simplifies VLAN
2. Lightweight Access Point (LWAP):
A lightweight access point is a
management.
wireless access point that is managed
7. SNMP (Simple Network
by a wireless LAN controller. It
Management Protocol) SNMP is a
provides wireless connectivity to
protocol used for monitoring and
devices in the network.
managing network devices. It allows
a network administrator to query a
3. NAS (Network Attached Storage): A
NAS is a dedicated server for storing
device to get statistics, or change the
and sharing files among the different
device configuration.
departments in the company. It
8. QoS (Quality of Service): QoS is a
ensures that there is enough storage
set of technologies and techniques
capacity and that the files are
used to manage network resources
accessible to all the users in the
and prioritize different types of
network.
network traffic. It allows network
administrators to ensure that
4. DHCP server: A DHCP server is a
software application that manages the
important types of traffic, such as
assignment of IP addresses to devices
voice and video, are transmitted with
in the network. It simplifies the
minimal delay and jitter, while less
process of IP address management by
important traffic is given lower
eliminating the need for manual
priority.
configuration of IP addresses.
Applications
5. VLAN management software: VLAN
management software is used to
3
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
4
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
throughput can also be used to measure providing the desired level of service.
the quality of service in a network. This can be done using QoS
management software, which allows for
These metrics can be used to configure
the configuration and management of the
the different devices in the network such
different QoS metrics on the network
as routers, switches, and wireless access
devices.
points to ensure that the network is
the routing protocol, LLDP for network wide range of products, from consumer
address assignment, and VTP for VLAN company's success relies on its ability to
manages the wireless network using a and efficient manner. This requires a
wireless LAN controller and lightweight robust and reliable IT infrastructure that
access points, with Quality of Service supports the company's operations and
manages the NAS server for file storage The network design of the InnoFlex
and sharing. The company router Manufacturing Company is hierarchical,
manages the connection to the ISP router with a main switch acting as the server
5
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
switch and four other switches connected The use of a network simulator such as
to it to represent each department. The Cisco Packet Tracer allows the
Administration, Production, IT, Storage, implementation and testing of the
and Marketing departments each have network design in a virtual environment.
their own VLAN, network address and This can help identify any potential
IP ranges with DHCP for IP address issues before implementing the network
assignment. The IT department manages in a live environment.
the wireless network using a wireless Overall, the network design of the
LAN controller and lightweight access InnoFlex Manufacturing Company is
points, with Quality of Service (QoS) designed to support the company's
configured for traffic prioritization. The operations and ensure efficient and
storage department manages the NAS reliable communication among the
server for file storage and sharing. The different departments. The use of various
company router manages the connection protocols, applications, and QoS metrics
to the ISP router and the Internet router, ensures that the network is providing the
with access control lists (ACLs) and port desired level of service and can adapt to
security for security. changes in the company's operations.
6
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
the creation of multiple virtual networks DHCP is the most commonly used
on a single physical network, while protocol for IP address assignment, it
subnetting allows for the further division simplifies the process of IP address
of IP addresses into smaller subnets. management by eliminating the need for
Research has shown that VLANs and manual configuration of IP addresses.
subnetting can improve security by In the field of wireless network
isolating different departments and management, wireless LAN controllers
limiting the spread of network-based and lightweight access points have been
attacks. proposed for the management and
Routing protocols such as EIGRP, control of wireless networks. Wireless
OSPF, and BGP have been proposed for LAN controllers provide features such as
efficient distribution of routing wireless security, QoS, and client
information and quick convergence in tracking, while lightweight access points
case of a link failure. EIGRP is a Cisco provide wireless connectivity to devices
proprietary routing protocol that uses a in the network.
hybrid distance-vector/link-state routing Quality of Service (QoS) metrics such as
algorithm and is efficient for large and bandwidth, delay, jitter, and packet loss
mid-sized networks. OSPF is a link-state have been proposed to ensure that
routing protocol that is widely used in networks are providing the desired level
enterprise networks and BGP is used to of service. These metrics can be used to
exchange routing information between configure the different
different autonomous systems.
III. Scenario Definition
Network topology discovery protocols
such as LLDP and CDP have been The InnoFlex Manufacturing Company
devices to discover and learn about other infrastructure is vital to its operations
7
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
8
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
routing information and quick also be connected to the ISP router and
convergence in case of a link failure. the Internet router to provide internet
LLDP will be configured on the devices access to the network.
to enable network topology discovery. The simulation will include testing of the
DHCP will be configured on the routers different QoS metrics such as bandwidth,
to assign IP addresses to the devices on delay, jitter, and packet loss to ensure
the network. VTP will also be configured that the network is providing the desired
to manage the VLANs across the level of service. The simulation will also
switches. include testing of the various protocols,
In the IT department, the wireless LAN applications, and security measures to
controller and lightweight access points ensure that the network is performing as
will be configured and added to the expected.
simulation. Quality of Service (QoS) will Overall, the simulation using the Cisco
be configured on the wireless network to Packet Tracer will provide a detailed
prioritize traffic according to the understanding of the network design and
company's needs. its capabilities, and will help identify any
In the storage department, a NAS server potential issues before implementing the
will be added to the simulation and network in a live environment. The
configured to provide file storage and Simulation results will be used to make
sharing capabilities. any necessary adjustments to the
The company router will be configured network design to ensure that the
with ACLs and port security to provide network is providing the desired level of
security for the network. The router will service.
IP Allocation
Administration 5 32 10
Production 20 32 20
IT 3 32 30
9
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
Storage 1 32 40
Marketing 8 32 50
WiFi 2 32 60
VLAN 1 IP add 32
10
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
Test Cases
11
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
and 80 (for HTTP) and denies all and denies all other devices.
other traffic.
4. To limit the amount of traffic that can
2. To restrict access to the NAS server
enter the internal network, an ACL
to only the storage department, an
has been applied on the company
ACL has been applied on the storage
router's external interface, allowing
department's switch's interface,
only a specific amount of traffic to
allowing only traffic from the storage
pass through.
department's subnet to access the
NAS server.
access-list 103 permit ip any host
access-list 101 permit ip host
192.168.1.194 gt 1000
192.168.1.97 host 192.168.1.98
access-list 103 deny ip any any
access-list 101 deny ip any any
12
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
network. This can be used to control network design and its capabilities. The
the amount of traffic entering the simulation results were analyzed to
internal network and prevent network identify any potential issues and to
congestion. ensure that the network is providing the
desired level of service.
5. An ACL has been applied on the The VLANs and subnetting were
internal interfaces of the router to successfully configured to segment the
allow access to the Google and network and implement security
YouTube servers only for the IT and measures. The different departments
Marketing departments. were isolated from each other, and the IP
addresses were divided into smaller
access-list 105 permit ip host subnets for each department. This helped
192.168.1.64 host 203.0.115.2 to improve security by limiting the
access-list 105 permit ip host spread of network-based attacks.
192.168.1.128 host 203.0.115.3
EIGRP was successfully configured as
access-list 105 deny ip any any
the routing protocol, providing efficient
distribution of routing information and
This ACL allows only traffic from
quick convergence in case of a link
the IT department's subnet
failure. LLDP was also successfully
(192.168.1.64/27) and the Marketing
configured, allowing for the mapping of
department's subnet
network topology. DHCP was
(192.168.1.128/27) to access the
successfully configured for IP address
Google server (203.0.115.2) and the
assignment, simplifying the process of IP
YouTube server (203.0.115.3)
address management. VTP was also
respectively. It denies all other
configured to manage the VLANs across
traffic.
the switches.
13
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
The simulation results also showed that The simulation results showed that the
the different QoS metrics such as VLANs and subnetting were successfully
bandwidth, delay, jitter, and packet loss configured to segment the network and
service. The simulation also showed that was successfully configured as the
14
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
15
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
References
Slattery, T. and Burke, J. (2022) What is a VLAN (virtual LAN)?, Networking. TechTarget.
Available at: https://www.techtarget.com/searchnetworking/definition/virtual-LAN
(Accessed: January 24, 2023).
What is a subnet? | how subnetting works | cloudflare (no date). Available at:
https://www.cloudflare.com/learning/network-layer/what-is-a-subnet/ (Accessed:
January 25, 2023).
Understand and use the enhanced interior gateway routing protocol (2022) Cisco. Cisco.
Available at: https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-
gateway-routing-protocol-eigrp/16406-eigrp-toc.html (Accessed: January 24, 2023).
Configure link layer discovery protocol (LLDP) Media Endpoint Discovery (MED) port
settings on a switch through the Command Line Interface (CLI) (2022) Cisco. Cisco.
Available at: https://www.cisco.com/c/en/us/support/docs/smb/switches/cisco-small-
business-300-series-managed-switches/smb5820-configure-link-layer-discovery-
protocol-lldp-media-endpoint.html (Accessed: January 24, 2023).
Bandara, N.N. (2023) CDP & LLDP: Part 9: Sinhala: Cisco discovery protocol & link
layer discovery protocol, YouTube. Available at: https://youtu.be/8pYSJBl9Isg
(Accessed: January 24, 2023).
Bandara, N.N. (2023) SNMP in Cisco: Part 8: Sinhala: Simple network management
protocol in cisco packet tracer, YouTube. Available at:
https://youtu.be/mVMWt6qDUcE (Accessed: January 24, 2023).
Cisco packet tracer basic networking - wireless networking (2015) YouTube. Available at:
https://youtu.be/Jp0hhYpNSYY (Accessed: January 24, 2023).
Configure and filter IP access lists (2022) Cisco. Cisco. Available at:
https://www.cisco.com/c/en/us/support/docs/security/ios-firewall/23602-
confaccesslists.html (Accessed: January 25, 2023).
16
ECU3308-Computer Networks 02 Assignment 01
COL/E-012233_W.M.M.Weerasekara
17