Mr. Khoza runs a small business in Midrand, Gauteng. His business has been steadily growing since
its inception in February 2019 in spite of the ill-effects of the COVID-19 lockdowns as well as the
ripple effects of the economic issues and financial markets such as rising fuel prices and inflation.
He, Mr. Khoza, has asked you to design a secure network for his small business. Additionally, he
would like you to design and build a cost-effective network for his business.
The current setup is such that every PC and laptop user uses a 3G dongle to connect to the Internet.
When users need to print, they either copy the work that needs to be printed to USB flash drives
or email their work to any one of the five users whose PCs are attached to a printer – all printers
connect via USB cables.
The new network, according to Mr. Khoza, should cater to at least thirty devices, fifteen desktops
(PCs), seven laptops including Mr. Khoza’s laptop, two servers and four BYOD devices. Additionally,
Mr. Khoza wants to allow visitors such as customers and suppliers to connect mobile devices to get
Internet connectivity. All users with PCs and laptops should still be able to print.
The premises where Mr. Khoza runs his business has six offices (rooms). All the rooms are located
on the same floor. Mr. Khoza has an office and does not share office space. There are two open-
plan offices, the first open-plan office houses seven desktops and the remainder of the PCs are
housed in the second open-plan office. Two laptop users share an office while the other three
laptop users share a separate office. A small storeroom has been selected for use as a server room..Mr. Khoza is looking at opening two new offices within twelve months, one in Roodepoort and
the other in Pretoria North. The two branches will be launched at the same time. The
Roodepoort branch is expected to launch with ten computer users. The Pretoria North branch is
expected to kick off with 25 users.
Q.1.1 With all the work completed in Part 2 and additions to this Part, you are required to write
a network proposal for Mr. Khoza’s network. The network solution for Mr. Khoza must
enable all offices to connect, work remotely, communicate and share information.
Ensure that you address the following in this part:
A. A description full network solution is provided.
B. The updated LAN and WAN diagrams.
C. The solution must clearly indicate the main considerations, including, scalability,
security, server redundancy, etc. are provided.
D. The solution must indicate how the connectivity of offices and routing will be
achieved.
E. A brief justification for the need for the devices in your solution as well as brief
justifications for all protocols involved in your solution.
F. The details of the QoS involved.
The proposal must be presented in a well-structured and well-formatted report. The
structure of your report must be professional and must include an introduction, the main
body, and a conclusion. The main body of your report must use headings and paragraphs
to structure the report. Use the table below to guide you.
Network Proposal for Mr. Khoza's Small Business
Introduction:
This network proposal aims to provide a secure and cost-effective network solution for Mr. Khoza's small business in Midrand, Gauteng. The proposed solution will enable connectivity, remote work capabilities, efficient communication, and seamless information sharing across all offices. The primary considerations in this solution include scalability, security, server redundancy, and efficient routing.
Full Network Solution Description:
The proposed network solution for Mr. Khoza's small business includes the following components:
1. Local Area Network (LAN):
- The LAN will be implemented using Ethernet switches to connect all devices within each office. Each office will have its own dedicated switch.
- The LAN will include separate VLANs for different departments, such as finance, sales, and administration, to ensure network segmentation and enhanced security.
- All desktops, laptops, and printers will be connected to the LAN.
2. Wide Area Network (WAN):
- To establish connectivity between offices, a virtual private network (VPN) will be implemented over the Internet.
- The VPN will ensure secure and encrypted communication between different office locations.
- Each office will have a dedicated VPN gateway/router to facilitate connectivity.
3. Server Infrastructure:
- A dedicated server room will be set up in the small storeroom, equipped with at least two servers for redundancy.
- The servers will host critical applications and services, including file sharing, email, and a centralized database.
- The server room will have redundant power supplies, cooling systems, and physical access controls to ensure data integrity and security.
4. Internet Connectivity:
- Instead of using 3G dongles, a dedicated broadband connection will be established in each office to provide fast and reliable internet access.
- Wireless access points will be installed in each office to provide wireless connectivity for mobile devices.
5. Printers:
- All printers will be connected to the LAN using Ethernet connections to enable printing from desktops and laptops.
- Mobile devices of customers and suppliers will be provided with a separate wireless network for internet connectivity.
6. Future Branch Offices:
- The proposed network solution is designed to accommodate the addition of two new branch offices in Roodepoort and Pretoria North.
- Each branch office will have their own LAN, WAN connectivity, and server infrastructure, similar to the main office.
- The VPN connectivity will allow seamless communication and information sharing between all offices.
Considerations:
- Scalability: The proposed solution is scalable and can accommodate the addition of new offices and users.
- Security: Network segmentation, VLANs, VPN, and physical security measures in the server room ensure data confidentiality and integrity.
- Server Redundancy: The implementation of at least two servers in the server room provides redundancy and ensures high availability of critical applications and services.
- Routing and Connectivity: VPN gateways/routers in each office will establish connectivity between offices and enable efficient routing of data packets.
Justification for Devices and Protocols:
- Ethernet switches: Used for LAN connectivity, allowing high-speed and reliable communication between devices within each office.
- VPN: Provides secure and encrypted communication over the Internet, ensuring data confidentiality.
- VPN gateways/routers: Enable connectivity between different office locations and efficient routing of data packets.
- Broadband connections: Offer fast and reliable internet access for all offices.
- Wireless access points: Provide wireless connectivity for mobile devices and separate networks for customers and suppliers.
- VLANs: Segments the network, enhancing security and preventing unauthorized access to sensitive data.
Quality of Service (QoS):
- QoS will be implemented to prioritize network traffic and ensure that critical applications, such as VoIP, have sufficient bandwidth.
- QoS policies will be configured on the switches and routers to manage network congestion and optimize performance.
Conclusion:
The proposed network solution for Mr. Khoza's small business provides a secure and cost-effective network infrastructure that enables seamless connectivity, remote work capabilities, efficient communication, and information sharing across all offices. The inclusion of scalability, security, server redundancy, and efficient routing ensures a robust and reliable network that can support the future growth and expansion of the business.