You are on page 1of 2

BACKGROUND

The management organization of a stadium is working with the Networking Company


to renovate and update the stadium network. Over the years, the stadium network
has grown. However, little thought was given to overall business goals and infra
structure design. Some new projects went ahead. But the network administrators d
id not have a realistic understanding of the bandwidth, traffic prioritization,
and other requirements needed to support such an advanced and business-critical
network. The stadium management now wants to add new high-tech features, but the
existing network is not capable of supporting them.
EXISTING LOGICAL SYSTEM

THE WEAKNESSES OF THE EXISTING DESIGN


Weakness Impact Possible Solution
Flat Network Design

i. There is no scalability â the network cannot grow without impacting performanc


e
ii. No network segmentation - cannot filter or isolate traffic creating security
risks
Create routed hierarchy

Create segmentation with VLANs Apply traffic filters


No Redundancy i. Large failure domains â Since this is a stub networks, link and
device failures affect large areas of the network.eg. the failure of the edge r
outer.
ii. There is also no redundancy between the switches in the network Create s
maller failure domains

Create redundancy among the switches


Distributed Servers i. Servers at risk - no controlled environment, power ba
ckup or redundant connectivity
ii. Servers not available - no high speed links to servers Move servers to
data center server farm

Install gigabit links to servers, centrally locate


Limited Fiber Availability i. It limits the possible redundancy in the netw
ork Stack the switches and add high speed uplinks.
No Stateful Firewall i. Filtering only, does not prevent all unauthorized or
unwanted traffic Use IOS stateful firewall features
Use access control list to filter traffic.
Firewall are found only at the Edge of Network i. Internal devices are vulnerab
le - no protection from internal attacks Create layered firewall and filt
ering mechanisms
Add IDS at the data center

You might also like