General Design Considerations for Secure Networks Assignment

Assignment Task

Question

1. This links to your experiences from the day school and the Enterprise Networking, Security and Automation Cisco content.

Explore the current commonplace security challenges present when running an interior routing protocol across a corporate network. Considering how they may affect any design and implementation requirements.

You are advised to use OSPF from the CCNA3v7 course as a starting point – however, you must do additional research for this question beyond the scope of the Cisco content and consider other interior routing protocols – you must cite any sources using OU Cite Them Right referencing. The maximum word count for this question is words, excluding any diagrams. You will be penalised if you exceed the word count by 10%.

2. This question links to the DevNet content; you must also go beyond this and complete research – where you must cite at least two different recent academic papers, when answering this question.

Explore how automation is changing the way infrastructure networking is being managed. Explain the benefits and potential challenges as well as how this is shaping the future of network engineering as a discipline.

You must also do additional research for this question beyond the scope of the Cisco content – you must cite any sources using OU Cite Them Right referencing. The maximum word count for this question is words, excluding any diagrams. You will be penalized if you exceed the word count by 10%.

3. You are working on a free form Packet Tracer challenge activity – as seen in Figure 1, you have been given the ‘London Railways’ network.' The purpose of this EMA question is to build upon each of the following tasks that are designed to test your practical knowledge of OSPF'?

Read the following question with care, and take your time to plan your approach. You can make reasonable assumptions – however, please share these in your TMA submission. You will also be expected to explore any additional commands required to ensure that this will work. While some of the scope has been covered in the TM357 content – you will need to research how to ensure that multiple OSPF areas will interact and exchange routing information as well as configure GRE. This is beyond the module content and is in keeping with the research expectations of a final year degree module.

Before you commence, it is important that you create a constructive file-saving routine with your Packet Tracer file. Keeping pace of any changes and maintaining a modest level of version control. It is also advisable to save a copy, each time you complete a task. The base file is available via the Assessment page of the TM357 website here and was created using v7.2.2 of Packet Tracer.

Your task comes in five stages, where you must build a complex OSPF network with additional features. You have been issued the following network according to the last numerical digit of your student personal identifier (PI) number. For example, if your PI is X1234567 then you look for 7 or if your PI is Y876543B – then 3 is the number you look for. Based on this – you will use the following addressing schemes.

• If your PI ends in 0,1 or 2 – use 33.0.0.0/8
• If your PI ends in 3,4 or 5 – use 66.0.0.0/8
• If your PI ends in 6,7,8 or 9 – use 99.0.0.0/8

Task

1. Designing the Network

You can divide the network in any way you desire, you must write a short word max justification regarding the design of your addressing scheme to solve the challenge.

2. Building OSPF

Based on the diagram and your proposed addressing scheme – configure OSPF, on all routers and interfaces (please read exception note below). All the PC’s and the single Server must also be configured to be members of each OSPF network. Provide evidence by showing the configuration of Paddington and St Pancras as well as the ‘show ip route’ outputs from Victoria and Euston. Please DO NOT include screen shots, this must be the text-based outputs.

Exception Note: GRE Marylebone and GRE Liverpool St MUST NOT be included in this OSPF Network.

3. GRE

Create a GRE tunnel to run from Marylebone to Liverpool St. Ensure that it connects two ends of a private network. Following the same methodology for the OSPF network, select your private networks from the following addresses according to your PI:

• If your PI ends in 0,1 or 2 – use 10.0.0.0/24 for Marylebone and 10.10.0.0/24 for Liverpool St
• If your PI ends in 3,4 or 5 – use 172.16.0.0/24 for Marylebone and 172.17.0.0/24 for Liverpool St
• If your PI ends in 6,7,8 or 9 – use 192.168.0.0/24 for Marylebone and 192.168.1.0/24 for Liverpool St

Configure a static route between both ends of the tunnel and change the ‘GRE’ hosts (PC’s) to test connectivity. Share text output from both Marylebone and Liverpool St. Please show a single screen shot of GRE Liverpool St successfully pinging GRE Marylebone.

4. ACL’s

Create an extended ACL on Victoria it must block only HTTP traffic from OSPF 100, 200, 300 and allow HTTP traffic from all other networks. All other traffic types must not be blocked. Show the text-based output from Victoria – also explicit command line proof on Victoria. As well as screenshots from the OSPF 100 and 101 PC’s, demonstrating that the ACL is blocking and allowing the correct traffic.

This IT and Computer Science has been solved by our PHD Experts at My Uni Paper.