INF 225

Activity 1
Starting with Simple Network Diagrams
(15 marks)

SUBMISSION INSTRUCTIONS.
You may make use of any designing or drawing tool to complete the required model. The only limitations are as
follows:

1. Make use of the individual assignment cover page and copy your diagram into the page before you
upload the model. Please leave the document that you submit as a word document as it would allow us to mark
the file online. If you change the format then we will need to download the file and it would increase the time
involved in marking.
a. You may draw your model in any modelling tool such as for example, Visio, Smart Draw, LucidChart,
Visual Paradigm, Power Designer or Network Designer – the tool is not important. Choose any one which
you would be comfortable with. As long as your model is clear, visible, legible and all items on the model
is clearly labelled.
b. No hand drawn models will be accepted. If you draw your model by hand then you will receive a zero.
Only during the semester test and the exam will we accept hand drawn models as test and exams have
extremely limited time.
c. Your model should be copied into the cover page word document - If your model is not copied into
a word document with a clear cover page then you will receive a zero

2. Make sure that all objects, components, items (of relevance) that you use in the diagram is labelled. If it
does not have a label then it will be ignored as though the item was not added to the diagram.
3. No late submissions or e-mail submissions will be accepted. The assignments are small and there is more
than enough time to complete them during a normal week.

EXAMPLE 01:
On a consulting company’s TCP/IP Local Area Network (LAN), you find a Windows Personal Computers (PC), a
Linux PC, a File Server and a Print Server with printers attached to it. On the network you will find a Firewall Device
that provides access to consultants’ notebook PCs. Make use of a simple illustration to indicate the distribution of the
devices and connections between the devices stipulated in the aforementioned mini-case. (Note: It is only necessary
to represent one of each relevant device).

1
EXAMPLE 02:
You commune’s owner has decided to build a very small client-server network for your commune. The commune
owner provides you with just enough funds to build a small client-server network with one network printer and one
hub. The 5 students living in the commune each have a workstation on which they work. You can only afford to have
1 Mini-Server, one Network Printer, one Hub and just enough Category 5 network cable to connect the 5 workstations
to the network. Just to be safe, you decide to design the network

Make use of a simple illustration to indicate the distribution of the devices and connections between the devices in
the aforementioned mini-case. (Note: It is only necessary to represent one of each relevant device).

ACTIVITY
You have been hired to design a network for a business with three offices at different geographical locations. All
three of the offices’ network designs should be exactly the same, so you decide to present the complete design of
the head office, and only indicate how the other two offices as well as mobile remote employees will connect to the
main office. Your concern is the design of the main office network as the other two offices will have the same design.

Both branch offices connect the main office over the Internet and each office makes use of a Virtual Private Network
(VPN) and a Firewall Module to establish a connection. All Mobile Remote Employees connect to their office by
means of a VPN over the Internet. All connections to the main office are connected by means of a VPN tunnel over
the Internet.
• The central office connects to all other offices and remote employees by means of the internet. Behind the central
office network Cisco Router, you will find a Checkpoint VPN and Firewalled Gateway (one device). On the
network you will find three network segments.
• Network Segment 1: Network Segment 10.0.0.0 hosts the Web Server, FTP Server and the Mail Server in what
is known as the Demilitarized Zone (DMZ). The DMZ Ethernet connects directly to the Firewalled VPN Gateway
on one side, and a Standard Firewall on the other. All IP Addresses in the DMZ are static.
• Network Segment 2: Network Segment 10.1.0.0 hosts the Operations of the organization. This network
accommodates 2 workstations, 2 personal computers and 2 Apple Macs all connected to a centrally located Hub.
All IP Addresses on the Operations’ Ethernet are assigned dynamically.
• Network Segment 3: Network Segment 10.2.0.0 hosts the Executive Management’s Ethernet. All IP Addresses
on the Executive Managements’ Ethernet are assigned dynamically. This Ethernet Segment only accommodates
3 Personal Computer and 3 Apple Macs. Each device is connected to a centrally located Hub.
• Segment 1 connects directly to the Firewalled VPN Gateway. Segment 2 and 3 are connected from their hubs to
a switch that connects to Network segment 1 through a Standard Firewall.

Make use of a simple illustration to indicate the distribution of the devices and connections between the devices in
the aforementioned case study. (Note: Represent all the stipulated devices, segments and where possible, the
assigned IP addresses).

2
 INF 225

Activity 1
Starting with Simple Network Diagrams
(15 marks)

SUGESSTED SOLUTION
The solution makes use of very descriptive images to give your insight into what the distribution looks like. Under
normal circumstance a very simple representation is required making use of simple primitives (lines, blocks, cubes,
triangles etc) where everything is clearly labeled.

???

???

???

Unknown, undefined
or assumed. ???

??? ???

???
???

???
Improved Design – Tutorial [2021/09/06]

VPN 1
Location 1
(Remote Branch) Remote User
Secure Remote
VPN Client (VPN)
Firewall-Gateway
Module

Internet

Location 2
(Remote Branch)
VPN 2
VPN VPN 3
Firewall-Gateway
Module
Router

Location 3
(Remote Branch) - VPN
Firewall-Gateway Module

DMZ [10.0.0.0]

Gateway
Firewall
FTP Server

Mail Server Switch

Web Server
Firewall

Switch

Workstation Workstation
1.1 2.1

Hub 1 Hub 2

Workstation Workstation
1.2 2.2

Personal Personal Personal Personal

Apple Mac 1.5 Apple Mac 1.6 Apple Mac 2.6 Apple Mac 2.5
Computer 1.3 Computer 1.4 Computer 2.4 Computer 2.3

Operational Network Segment [10.1.0.0] Executive Network Segment [10.2.0.0]