Building Corporate Data Networks A Case Study

Delivered atInstitution of Engineers, Sri Lanka - Saparagamuwa Provincial Center31st March 2005

*ObjectivesAt the end of this case study you will be able toTransfer a business communication requirements into a data network requirementDescribe the primary components that constitutes a data networkIdentify the basic elements of LAN, WAN and Security sub systemsPrescribe a high level network structure for a generic corporate data network

*Acme CorporationAcme Corporation is a multinational organization who has two of their manufacturing plants in Sri Lanka. They produce automobile tires for export and local market. The main factory and head office is located at Kelaniya and another factory at BOI zone, Katunayake. They have a warehouse at Peliyagoda and a raw material store at Thalawakale.

Acme Corp need to build a data network to deploy their new ERP (Enterprise Resource Planning) application. The Katunayake factory and Peliyagoda warehouse are to be connected online to the head office and the raw material store is to be connected for batch processing via a dial up facility.

In addition they need to have Internet connectivity, a local web site and E-mail service for their staff. Staff from corporate head quarters (abroad) and telecommuters in Sri Lanka need to gain access to Acme Corp network for various activities. Data and network security are concerns of the network administrator.

*Acme Corporation (Contd)Head Office / Main Factory(Kelaniya)Warehouse(Peliyagoda)TelecommutersBranch Factory(BOI Zone - Katunayake)Mobile UsersRaw Material Stores(Thalawakale)Internet

*Network ElementsUser and server local connectivity at head office, branch, warehouse and storeNetwork switches and devicesCabling infrastructure (copper/fiber)Wide area interconnectivityRoutersLinks from a network service providerInternet connectivityRouterInternet connection from as Internet Service Provider (ISP)SecurityFirewallVirtual Private Network (VPN) deviceTelecommutingRemote access serverModemsTelephone linesWireless connectivity at head officeWireless access pointNetwork address planning

*Branch LANBranch, Warehouse & Stores LAN Devices10/100 Base-TX Autosense Ethernet Switch - 03 nos.Copper (UTP) Cable plant at all 03 locations

*Head Office LANFloor 2Floor 1Floor 3

*Head Office LAN (contd)Head Office LAN Components10/100 Base-TX Autosense Ethernet Switch 03 nos.Optical fiber transceivers 4 nos.Wireless Access Point 1 no.Copper (UTP) / Fiber Cable plant

*Wide Area NetworkEthernetEthernetRouterRouterHead OfficeBranch FactoryWarehouseStores

*Wide Area Network (contd)WAN ComponentsRouters 4 nos.DSU/CSUs 4 nos.(Digital Service Units/Channel Service Units) Modems (synchronous) 5 nos.Leased Lines 2 nos.Head Office Branch FactoryHead Office WarehousePSTN Links (Telephone lines) 5 nos.Head Office 2 nos.Branch Factory 1 no.Warehouse 1 no.Stores - 1 no.

*WAN Connectivity OptionsLeased Links / Clear Channel CircuitsDead copper loopsActive copper loopsMicrowave point-to-point linksMicrowave point-to-multi point access systemPDH/SDH* transmission networks Satellite linksDark fiber loop Free space optics (laser)Public Switched Data NetworksFrame RelayATMPublic IP BackboneMulti Protocol Label Switching (MPLS) IP backbone VPN over InternetPacket over SONET/SDH

* PDH Pleisiochronous Digital Hierarchy SDH Synchronous Digital Hierarchy

*WAN Data ratesLink speedsDS0 - 64 kbps128 / 256 / 512 / 1024 kbpsE1 2 MbpsE3 34 MbpsOC-3c / STM-1 155 MbpsOC-12 / STM-4 622 MbpsOC-48 / STM-16 2.488 GbpsGigabit Ethernet 1,000 Mbps10 Gigabit Ethernet - 10 GbpsFiber Channel 2 Gbps

Uses OSI Layer 2 FramingProtocols

*Dial-up ServicesDial Backupto recover from failed linksDial on Demandto provide on demand access and disconnect while idlingBandwidth on Demandto provide increased bandwidth during congestionOptionsPSTN Public Switched Telephone NetworkISDN Integrated Service Digital Network

*Internet Connectivity10/100 Base-TXInternetRouterISPDSU/CSUERP Server and other shared Resources

*Firewall Security PolicyInternetRouterFirewallVPN GatewayWeb Server andMail ServerISPDSU/CSUERP Server and other shared Resources

*Secure Access to ERP ServerInternetRouterFirewallVPN GatewayWeb Server andMail ServerISPDSU/CSUERP Server and other shared ResourcesClient at Headquarters

Encrypted Authenticated Authorized Accounted

. access only.Downlinks to 2nd and 1st FloorsTo Router

*Internet and SecurityInternet connetivityRouter 1 no.DSU/CSU 1 no.ISP connection 1 no.SecurityFirewall 1 no.VPN Gateway device 1 no.

*Remote Access ServiceRAS ComponentsRemote Access Server 1 no.Modems (Asynchronous) 4 nos.PSTN (telephone) lines 4 nos.

*Complete Head Office NetworkERP Server and other shared Resources

*Bill of Material

Head OfficeBranchWarehouseStoreTotalEthernet Switch31116Optical Transceivers44Router21115DSU/CSU3115Modem (Sync.)21115Remote Access Server11Modem (Async.)44Firewall11VPN Gateway11Wireless AP11Cable Plant

*SummaryBusiness requirementNetwork requirementLocal area networkWide area networkInternet connectivityFirewall and VPN

*Thank you