Resource Contrained Network Design and Implementation

摘要

The research study, Resource Constrained Network Design and Implementation, was conducted at the United States Naval Academy (USNA) in order to simulate creating a secure and functional network with constrained resources. This is a problem faced by any administrator trying to maximize the security and functionality of a private network while minimizing the costs involved in the creation and maintenance of a local area network (LAN). Computers are utilized for everything from electronic correspondence via e-mail, to multimedia entertainment, to developing simulations and models of complex engineering designs. However computers are far less useful when isolated off of a network. In this modern age, the ability to network computers and other electronic devices is nearly a requirement in all industries. While the ability to network is essential, the network must be designed in a manner providing confidence in the security of the system and the data. The goals of this research study were established in a step-wise foundation, each step relying upon the completion of the previous goal. The goals were: 1) Configure the most basic LAN, one comprised of a switch and two nodes and establish communication between the two nodes, 2) Introduce a 3600 series router into the network dividing the two LANs to simulate an internal network LAN, and the external internet and permit communications between the two networks, 3) Create Virtual LANs (VLAN) and implement their use on the network, 4) Utilize Access Control Lists with rulesets based upon the VLANs, 5) Introduce a PIX 515E firewall into the network to isolate and protect the internal LAN from the simulated internet.