Background: Kamehameha Institute is an organization that provides educational offerings to non-traditional students via the Institute’s website in a three-tier web, application, and database configuration. The State of Hawaii regulates the educational sector, driving the need to ensure Kamehameha follows the States strict security and regulatory requirements. Kamehameha’s leadership is also very concerned with the threat posed by the online theft of their unique intellectual property. Additionally, the number of Hawaiian entities breached by threat actors is on the rise. Thus, security, privacy, and compliance are all important considerations for the Kamehameha network architecture.
Your boss, the Kamehameha Institute’s Chief Operating Officer (COO) has tasked you to design a network infrastructure for three facilities located in the Hawaiian Islands of Honolulu, Hilo, and Lihue. The COO stipulated that you must provide for strengthened defenses to protect Kamehamehas cultural heritage. After meeting with the COO, the two of you drafted the following set of requirements for your network design:
Each of the facilities has three floors:
The first and second floor of each building requires 150 network connections each for machines connected to the management network used by administrators to manage the network devices
The third floor of each building requires 75 network connections for the servers
All sites require redundant connectivity to the other sites (e.g., Internet redundancy between the sites can be accomplished through a single Internet connection and a point-to-point link between the sites or two Internet connections provided by separate vendors along with point-to-point VPN connections between the sites)
Each datacenter is a redundant failover environment to the other datacenters (Hilo, Honolulu, Lihue)
A constant connection between the three locations, carrying at least 75 Mbps of data
All servers at all locations must have redundancy
Protection from intrusions is required and should be documented
A plan to verify security and failover measures is required
Submission: Using a network diagramming tool such as Microsoft Visio, or free tools such as LibreOffice Draw or Draw.io available at https://draw.io (no sign-in or registration required), create a network diagram (drawing) specific to the organization that encompasses the three facilities and also depicts any necessary interconnections. Figure 1 shows the draw.io new network diagram dialog window:
Figure 1. Draw.io New File Dialog Showing the Network Diagramming Templates
Your diagram should include enough detail to show the topology interconnections. The viewer should be able to understand the Kamehameha Institutes network environment and be able to implement the architecture you develop. Ensure that you properly cite any external sources.
One of the keys to producing a viable network diagram is labeling the objects consistently and descriptively. Think about what you would want to know about a network device if you logged into it with little prior information. Consider location, floor number, or other pertinent information. At a minimum, include the following elements:
IMPORTANT: Your network diagram must include an identifying label (e.g., callout box) that includes your class and section, assignment title, your name, and the date. Edit the items in italics. Your assignment will not be accepted if this element is missing:
Example Network Diagram Callout Box.
CMIT 350 6980
Project #1 Network Diagram
Student Name: Name
Date: 6/22/2010
Any necessary hardware
Site-to-Site (WAN) connections (e.g., leased line connectivity, satellite, etc.)
Annotate the following values for each of the Sites:
Network ID
Useable Range
Subnet Mask
CIDR Value
Broadcast Address
All devices require hostnames complying with the following naming conventions:
Routing Devices: Rx; where x is the site number incremented by a value of 1 for each routing device
Switching Devices: Sx; where x is the site number incremented by a value of 1 for each switching device
Servers: SRVx where x is the server number incremented by a value of 1 for each server
For each site routing device, implement a private ip addressing scheme using a range suitable for corporate infrastructure and include the following:
management vlan
production vlan
High availability
When finished, export the diagram as a PDF document (Note: You will need to use this diagram again in Project 3, so ensure you save the xml source file!) and submit it to the Assignment folder. Figure 2 demonstrates how to export your draw.io diagram as a PDF document:
