Netw490 Project Proposal Team B
Netw490 Project Proposal Team B
Project Proposal
Upgrading IIS
Team B
..
..
..
..
.
Table of Contents
Executive Summary ..................................................................................................................2
1. 0 Revision History..................................................................................................................3
2.0 Project Overview..................................................................................................................4
3.0 Solution Strategy..................................................................................................................7
4.0 Solution Scope ....................................................................................................................9
5.0 FINANCIALS .......................................................................................................................19
6.0 PROJECT CONDITIONS.....................................................................................................20
7.0 PROJECT CLOSE OUT.......................................................................................................21
8.0 PROJECT ORGANIZATION................................................................................................22
9.0 COMMUNICATION..............................................................................................................23
10.0 SIGNATURES....................................................................................................................24
11.0 APPENDIX.........................................................................................................................25
REFERENCES...........................................................................................................................26
PAGE
Executive Summary
Executive Summary:
IIS is an international company that will benefit from the consolidation of networks in three major locations which
are London, Shanghai, and Dallas. They have been in business for 17 years and are continuing to expand. The
current network has essentially been pieced together with a mix of different vendors and standards. There are
many advantages to fully upgrading the current system, such as increasing productivity and efficiency, reducing
cost, and securing the integrity of the business needs. With all new equipment, the system will be more
manageable, reliable, compatible and user friendly.
IIS requires secure, private communications externally as well as internally, with a growing need for security so
the company can easily share information between sites. Operating costs will significantly decrease and time will
be saved due to more efficient equipment. Communications will be improved amongst staff and customers. One
of the savings will come from a VoIP phone system eliminating the need for a PBX or the PSTN. Next, the
implementation of an in-house email system will help secure confidential communications both internally and
externally. The email system will come about through Microsoft Exchange Server with Outlook.
The recommended solution for the WAN connection will be IPSec/VPN over Internet with a secondary
connection for redundancy utilizing Frame-Relay with Point-to-Point Protocol (PPP). This solution will allow for a
secure tunnel for voice and data transfer between sites along with a backup connection for authentication of
Frame-Relay PVCs (Permanent Virtual Circuit) as the failover solution. This type of circuit establishes a physical
connection between two sites eliminating the need to set up a connection.
Risks involved with this project are security risks involved with setting up the new network and consideration of
highly sensitive data and information within the time frame allotted (6 Months). Email is another point of concern
regarding risks for this project, as communications between sites needs to be confidential and secure of
breaches. Other risks will include:
Project Management inefficient
Delays resources, personnel
Backup power supply
Insufficient training
Lack of support
PAGE
Section
1. 0 Revision History
Date
Author
12-9
12-9
12-9
12-12
12-13
12-14,12-15
Chad
Bobby
Ryan
Chad
Ryan
Bobby
12-14
12-15
12-15
12-15
Chad
Ryan
Chad
Jodi
Description
2.1, 2.2
3.2, 3.4, 4.1
4.1
4.1
4.1 (LAN and WAN requirements thru Redundancy)2.3, 3.3,
4.5,11.3
4.1
4.1, 4.2
5.2, 5.3
4.2, 4.3, 4.4
PAGE
Section
Administration (10.1.24.0/21)
PAGE
Sales (10.1.28.0/22)
Marketing (10.1.16.0/21)
Engineering (10.1.0.0/21)
VoIP (10.1.32.0/23)
Mgmt&Native (10.1.34.0/23)
Along with coordinating the VLANs to allow communication between branches through route configuration (subinterfaces) the remote users and sites will utilize IPSec/VPN over Internet for a secure tunnel to communicate
through.
In the past there has been a mix of technologies that the network had to accommodate to function properly. This
mix included Windows, Mac, and Linux. The new infrastructure needs to be compatible with a cross platform of
systems if needed.
With an upgrade of this magnitude it is evident that an overhaul of the phone system must also be included in the
project. The new system will incorporate a VoIP system managed by Cisco Agent Desktop software running
through the server farm. In conjunction with new Cisco 6900 IP phones the VoIP system will bring down costs
that are generally associated with a traditional PBX system with the PSTN.
The benefit behind such a move will increase productivity and efficiency by centralizing a headquarters,
warehouse and prototype manufacturing facility under one roof. Next, the upgrade will include a more secure
and robust WAN connection between IIS headquarters and their branch divisions in Fairfax, London and
Shanghai.
The proposed alternatives in this business case will address the new Corporate Office in Dallas, the Defense
Division in Fairfax, a support and distribution center in London, and the manufacturing division in Shanghai.
The customer contacts at IIS will be Jay Susich (CEO) and Faye Moore (CFO). Team B has been put in charge
of responsibilities for the network improvements and upgrade. Team members include:
Team Leader Bobby Delee
Lead Support - Chad Covington, Ryan Daniels and Jodi Edwards
PAGE
PAGE
Section
Low costs
Mobility
The second proposed solution for IIS is to implement secure WAN connection thru IPSec/VPN with a secondary
backup run over Frame Relay with PPP.
Since IIS is in need of a secure line of communications between their branches in Fairfax, London and Shanghai
and the Dallas Headquarters. The use of IPSec?VPN over Internet connection will allow secure tunnel with
encryption for the transfer of data. In the event of a failure, a secondary dedicated lease line will run over Frame
Relay with PPP for authentication between sites. Authentication will take place with PAP and CHAP
authentication methods.
PROJECT PROPOSAL [PROJECT NAME]
PAGE
The third solution proposed for IIS is to implement an in-house email system configured for Microsoft Exchange
Server with Outlook for a secure means of inhouse communications with a secure external connection.
Tangible benefits:
Lower operating costs by consolidating to one building
Savings from using new and more efficient equipment
Elimination of duplicate networking equipment by consolidating to one building
End user productivity gains
Increased services/customers from a more efficient and productive environment
Avoidance of downtime by implementing redundancy
Avoidance of future upgrade costs by planning for future growth
Intangible benefits:
Increased efficiency by consolidating to one building
Improved communication among staff with a corporate email system
Improved communication with customers by using VoIP phones with call management software
Ability to share information without the fear of losing its confidentiality, integrity, or availability because of
a secure high performance network
Increase in employee moral
Increased customer satisfaction
Enhanced ability to meet business goals
PAGE
Section
PAGE
Networking cables
Network cabling and connections for the Dallas Headquarters will include:
Category 6 cabling will be used for:
o End user devices
o VoIP
o Video
o Wireless APs
o Switching equipment
Category 6 cabling between between switches and routers for trunks
Plenum rated Category 6 for installation in plenum space
Category 6 Riser cabling between floors/wiring closets
Multimode fiber optic cabling will be installed between backbone connections and wiring closets/ server
farm
Single mode fiber optic will be recommended between sites
RJ-45 connections/connectors will be used in network cabling and wall jacks
ST Multimode connectors will be used for fiber connections
Network Hardware
Network hardware for the Dallas Headquarters installation will include:
Cisco Catalyst 2960 POE switches (27)
Cisco Catalyst 3560 layer 3 switches (3)
Cisco 2600XM Router (1)
Cisco 2500 WLAN controller (1)
Cisco Aironet 3600 Series AP (10)
Cisco 6900 Series IP Phones (1103 + 25 spare)
Dell Inspiron 660 desktops (1103 + 25 spare) (chosen due to requirement needed and cost)
Printers (24) 8 per floor
Fax machines (3) 1 per floor
Cabling ( 100m-10m-1m Cat6, Multimode Fiber as needed)
Servers
o DNS
o DHCP
o Microsoft Exchange
o RADIUS
o Web
o Application
o Database
Switch and Server Racks
UPS (Uninterrupted Power Supply)
Connectivity LAN-to-LAN
Connectivity between LANs will administered through VLANs through Cisco Catalyst 2960 POE switches and
Cisco 2600XM router between sites.
Network Services
Network
services
administered
through
a client-server architecture at the application layer and above for
data
Network
communications
serviceswill
thatbe
and
will
storage.
administer will
include:
PROJECT PROPOSAL [PROJECT NAME]
PAGE
10
Network Replications
Network replication will occur with a database management system, utilizing a master/slave relationship, with
synchronous replication/ disk mirroring between sites for redundancy.
Cisco Equipment
Cisco equipment which will be utilized throughout network will include:
Cisco Catalyst 2960 POE switches
Cisco Catalyst 3560 layer 3 switches
Cisco 2600XM Router
Cisco 2500 WLAN controller
Cisco Aironet 3600 Series AP
Cisco 6900 Series IP Phones
Name Resolution
DNS along with DHCP will be run and configured through the Windows 2008 Server as a Domain Controller
(DC). Second server will be configured also for DNS and DHCP for addressing internal users and for
redundancy.
IP Network Schemes
PAGE
11
IP Subnet Implementations
IP Address Assignments DHCP or Static
IP addressing will take place through a DHCP server running NAT and will use both Dynamic and Static
addressing
Computers, Servers, Laptops, PDAs and Printers
Computers,
laptops
and PDAs
will
be assigned
dynamic static
Ip addresses
throughsoa that
DHCP
running
NAT
for
unchanged
outside
connection.Servers
for
administrative
and
purposes.
printers
will be assigned
IP addresses,
theyserver
remain
constant
and
Disk Space
Current Data storage for Dallas site at 15 terabytes, will increase to 30
Current Data storage for each branch office at 5 terabytes, will increase to 10
Fault Tolerance
Fault tolerance
for networkArray
will beofhandled
with different
measures.
RAID (Redundant
Independent
Disks) Data
storage will be mirrored on a RAID-6 system, which
will include a second parity scheme distributed across 5 disks to offer high fault and drive-failure
tolerance
Backup WAN
Spanning Tree will be configured on switches to eliminate loops and broken links for redundancy
Backup power supply
UPS (Uninterrupted Power Supply)
Configure graceful shutdowns
Supply backup devices
o switches
PROJECT PROPOSAL [PROJECT NAME]
PAGE
12
o
o
o
o
o
IP phones
routers
desktops
access points
cabling
Redundancy
Redundancy in the switching of data and communications will be achieved withstar topology:
access layerlayer
distribution
core layer
STP (Spanning Tree Protocol)
File Structure
Layout
(locations
network
shares
and We
howwill
they
are made
to the
client)
Major
shares will
all be
located of
in major
the main
offices
in Dallas.
have
sharesavailable
with proper
security setup for each department.
Group
We
willPolicies
use a single password policy requiring 6 minimum characters, a capital letter and a
number or special character. We will also be implementing an account lockout policy after 5
failed
attempts with invalid credentials. Passwords will be reset every 90 days and not allowed to use
the most previous two passwords.
Active
ActiveDirectory
Directorywill
Layout
be kept simple to start and kept in the main offices located in Dallas.
Integrations Solutions
Drive
DriveLetter
LetterMappings
Mappingscan be made using the first letter of the main departments.
E- Engineering A- Administration H- Human Resources S- Sales M- Marketing
Object
Permissions
We
will implement
administrators of each share (managers or head of departments) and be
assigning users to appropriate shares with the principle of least privilege.
We
File
will
Permissions
have shares on a file server and use the principle of least privilege to ensure
data is protected.
Domain
Policies
We
will use
a single password policy requiring 6 minimum characters, a capital letter and a
number or special character. We will also be implementing an account lockout policy after 5
failed
attempts with invalid credentials. Passwords will be reset every 90 days and not allowed to use
the most previous two passwords.
We willStandards
Group
be setting up groups to assign users into based off of departments and certain
permissions. We will have an administrator, HR, Engineer, Sales, Marketing, and IT groups.
Each one will also have a sub group for lower level users who will have read only access as
well.
Username
We
will use aStandards
first initial, middle initial, last initial 001, 002, etc. (clc001, clc002, etc)
Computer Name Standards
Computer naming scheme will be based on the department the machine is located in. (HR,
Admin, IT, Sales, etc.) Abbreviating the department followed by -001 , -002, etc
We will use
Account
Policies
a single password policy requiring 6 minimum characters, a capital letter and a
number or special character. We will also be implementing an account lockout policy after 5
failed
attempts with invalid credentials. Passwords will be reset every 90 days and not allowed to use
the most previous two passwords.
Routing/ Switching
PROJECT PROPOSAL [PROJECT NAME]
PAGE
13
PAGE
14
about the building without being restricted to their desk. Users can take advantage of using their
laptops, tablets and PDAs with a secure connection. The wireless network will be made up
using a Cisco 2500 WLAN controller and 10 Aironet 3600 Series APs. It will use an 802.11n or
greater standard to achieve maximum performance. All Dell i660 desktop computers will have
built in wireless capability as well if needed.
VoIP/Telephony
Services
A
VoIP phone system
will be used as it is the best option when comparing it to traditional phone
systems such as PSTN and PBX. When compared to the PSTN and PBX systems, VoIP has
more flexibility and functionality by allowing for one medium to run the network. By combining, or
converging the network, management can be centralized and more focused when its now one
network instead of many. This means that the business doesnt have to wait for the telephone
company to make repairs any more. With the VoIP system connected to the same servers as the
data center, in-house IT technicians can manage with ease. Mobility is increased by utilizing
mobile phone applications to connect to the servers that the organization is using, which allows
for more flexibility and control of communications both internally and externally.
The benefits associated with a VoIP network are:
Low costs
Mobility
The strategy
VPN
Strategyfor VPN is to use a connection that will be carried via IPSec/VPN over the Internet
to allow for a secure tunnel connection between the Dallas headquarters and the branch sites.
The VPN connection will be configured and established using VPN software installed on the
users computer. As a backup plan in the event that the VPN connection fails, an alternative
connection using Frame Relay with PPP and authentication through PAP and CHAP will be
used.
WAN Router
routers configurations
will need to be configured to support IPsec/VPN to create the secure tunneled
connection between Dallas and the other branches. Frame Relay with PPP will also need to be
configured for the backup WAN link.
VLANs
The
network will use VLANs to identify and separate each department into its own virtual
network. With VLANs, devices in different physical locations can still be part of the same VLAN.
It will add security by only allowing those in the VLAN to communicate with each other and it will
increase performance by being able to contain the broadcast traffic. The Cisco switches will be
used to implement and manage the VLANs. The different departments that will be in their own
VLAN include:
Administration (10.1.24.0/21) VLAN 10
Sales (10.1.28.0/22) VLAN 20
Marketing (10.1.16.0/21) VLAN 30
Human Resources (10.1.8.0/21) VLAN 40
Engineering (10.1.0.0/21) VLAN 50
Voice (10.1.32.0/23) VLAN 55
Mgmt&Native (10.1.34.0/16) VLAN 99
ISP internet service will be through a local ISP called Charter Business. They are able to provide
The
the speeds needed to meet the network requirements and offer multi-location service to support
remote offices.
Backup
Servers in the network will be configured with RAID. Each server will have multiple hard drives to
make up the array and if one fails the data will still be preserved because of the RAID setup.
In order to
Disaster
Recovery
minimize the effects on the business during a disaster there are backup solutions in
place to help keep the network up and running or for recovering information. We have a backup
WAN connection in case the original fails. We also have servers setup with RAID so we will
PROJECT PROPOSAL [PROJECT NAME]
PAGE
15
always have a backup of data in the event of a hard drive failure. Having these backup plans will
help reduce the effect on the business if a disaster were to occur.
Proposed Date
week1
Week 1
Proposed Date
Proposed Date
PAGE
16
Address Listing
Hardware Inventory
o In Use
Cisco Catalyst 2960 POE switches (27)
Cisco Catalyst 3560 layer 3 switches (3)
Cisco 2600XM Router (1)
PAGE
17
Available in storage
Cisco 6900 Series IP Phones(25)
Dell Inspiron 660 desktops(25)
Customer
Date
Time
Location
PAGE
18
Section
5.0 FINANCIALS
5.2 Materials
[This needs to include all materials needed to complete the chosen project and how that material will be obtained
from inventory, purchased, or donated. Only those items purchased will go against the money available Install, config,
training, travel needs to be broken down for hourly rates and justified
Number of personnel, number of days, cost per day, etc needs to be explained
ROI
Software cost details
Operating cost details
Cost from your consulting service, outside vendors, and overall maintenance/support needs to be included.
Discounts needs to be explained ]
Item Manufacturer, Model, and Specs.
Quantity
Required
1150
Donation /
Inventory /
Purchase
Purchase
Value /
Expected
Cost
$690,000
1150
10
1150
1
9
3
1
24
3
Purchase
Purchase
Purchase
Purchase
Purchase
Purchase
Purchase
Inventory
Inventory
$161,000
$9,870
$138,000
$1,000
$13,500
$8,100
$600
$16,000
$ 861,270
$ 161,000
$ 30,000
$ 20,000
$ 10,000
Total
$1,082,270
PAGE
19
Section
PAGE
20
Section
An internal post project review will be held to determine what areas of improvement have been identified during the
project and make sure that positives will be repeated in future projects.
A customer post project review will be held on 12/15/2013] at [meeting location] to discuss aspects of our performance
and provide Team B an opportunity to get customer feedback for areas of improvement.
PAGE
21
Section
Client:
Lead Support
PAGE
22
Section
9.0 COMMUNICATION
Weekly Status Reports will be issued to cover outstanding issues and the status of the project.
Bobby Delee will serve as Team B designated single point of contact.
Bill Baig will serve as IIS point of contact for the project.
Team B suggests all communication relating to this project be conveyed via email and, if possible,
any additional team members be copied to ensure that everyone involved is working with the most
current information.
PAGE
23
Section
10
10.0 SIGNATURES
Client:
Bill Baig
Clients Representative Printed Name Here
Intelligent Imaging Solutions (IIS)
12-15-2013
Dat
Team:
Bobby Delee
Team Member 1s Printed Name Here
Ryan Daniels
Team Member 2s Printed Name Here
Chad Covington
Team Member 3s Printed Name Here
Jodi Edwards
Team Member 4s Printed Name Here
12-15-2013
Date
PAGE
24
Section
11
11.0 APPENDIX
11.1 Project Schedule in Gantt Chart Format [detailed, clear, and concise project milestones]
PAGE
25
REFERENCES
PAGE
26