New Network Design

Science & Technology Information Technology, Gaming, Machines, Gadgets
1

Designing new network for our new location…

Ultimate setup would be putting servers on different subnet but for simplicity sake they would be on dedicated gigabit switch while still in the 1.x network.

Opinion?

2

Re: New Network Design

Too many curves, very distracting. :p

3

Re: New Network Design

Damn. If its distracting for you… I don’t want to know what non techie would say. :smiley:

Wesey, not confusing to me at all… thora style bhi hona chaheye. I hate making visio’s with straight line. :bummer:

4

Re: New Network Design

Here is the non-curvy version…

I can’t believe you don’t like curves, man! Don’t say it is too straight/flat for you now. :cb:

5

Re: New Network Design

  1. What's the diff. between Uni and Staff/Student internet?
  2. Shouldn't the diff. interfaces on each side of the firewall be on diff. subnets?
  3. Where's the connection to the cloud?
  4. What's the big deal about gigabit switch? Shouldn't all servers always be on gigabit switches, considering how the costs of such switches have come down so much over the years?
6

Re: New Network Design

What I get from the picture is that - there is only one firewall with three Interfaces. But what exactly do u mean by Staff network ? I mean dividing network into different buildings make sense but lecturers can login in any lecture room? OR students have no access to Network but certain labs .. and thats what u mean student's network?

I'll design network per building or area instead of staff or students or guests. I can also consider putting a transparent proxy if monitoring is the issue here.

7

Re: New Network Design

There are networks.

192.168.1.x (Atlanta, staff domain, HQ location)
192.168.2.x (TX, staff, remote location, VPN into 192.168.1.1 router)
192.168.3.x (Atlanta, Students domain)
192.168.4.x (TX, student domain, remote location)
192.168.5.x (North Houston, remote location, VPN into 192.168.1.1 router)
192.168.7.x (South Houston, remote location, VPN into 192.168.1.1 router)
**10.10.0.x (Atlanta, Online Uni)

Each has its own T1 coming in for internet access - voice/data and we are only worried for this location (atlanta), **bold text.

  1. * All of these will be in same building*
  2. Each with its own firewall and gateway
  3. Each with its own domain and servers
  4. Students do not have access to the Staff network
  5. Students have access to their side of the internet, their labs, their class rooms, going through a central proxy server.
  6. Staff network has access over the student network
  7. From student network (192.168.3.x) the staff PCs will be able to login to the staff network and domain resources. Uni network has the university servers, where students data is stored and classes are held... of course, everything is web based. Uni staff is based in the "staff" network (192.168.1.x) network.

We are moving locations so that is why upgrading to gigabit switch... that is all.

8

Re: New Network Design

I don't get it, why do you need 3 T's for the 3 subnets? You'd be better off load-balancing and tying all 3 T's together. The way it sits currently you're wasting bandwidth.
Another thing I don't understand is why are you not NAT-ing at the firewall level.

Somehow I'm not comfortable with your design.

Shocking Discovery
9

Re: New Network Design

It is a complicated setup with 3 different companies who have their own servers but staff in 1.x network.

Each subnet needs it own dedicated internet... I guess, students (3.x) can get away with some cheap cable/DSL line.

NAT is happening at the router.

Why doesn't the Indian media acknowledge the muslim festivals
Why doesn't the Indian media acknowledge the muslim festivals