Order your essay today — written by real experts, guaranteed plagiarism-free, and ready to impress your professor!
Assignment 2 – VPN Network Design for SME network and VPN services Setting up a computer network for small enterprises can be one way of increasing competitive advantage [1]. The network can be used to help manage various business operations in ways that may be used to increase the overall business efficiency. A business with a well-established network environment has improved capabilities in areas such as data transfer, communication and storage among others. Many factors must be taken care of in building and designing a functional SME network. Factors such as topology and host placement must often be considered. Other considerations may include the selection of software and hardware technologies as well as the thoughtful configuration of the related components [2]. The essay attempts to design and develop a VPN network for an SME. Some of the factors to be considered here include: Logical design, Physical design, Network topologies, IP addressing, Security features and policies, Redundancy and failover plans, as well as the VPN service implementation
Scopes and limitations
The Virtual Private Network is intended to help provide a secure connection for SMEs. The VPN is also intended to promote a cost-effective way of communicating. This is especially due to the reason that the network does not necessarily require the leased lines and that the costs associated with support are offloaded [3]. The network is intended to promote significant instances of scalability especially if an SME seeks exponential growth or rather transformation from its current state. Note that while VPN networks have significant popularity and performances, they sometimes harbor numerous limitations. One of the shortcomings of this network is that for starters, there is need to accustom oneself with significant network security details [4]. This also includes configuration and installation information.
Requirements
Most of the VPN requirement here will include Network parts and VPN service parts. Some of the concise requirements here include:
- VPN Client
A VPN client includes a computer or even a router and the type of VPN client intended to be used significantly depends on the business needs [5]. Conventionally, any operating system can be configured to function as a VPN provided it supports the L2TP, PPTP or the IPSec protocol.
- VPN server
The VPN server will function as an instance for the connection of the VPN clients. Here, it will be appropriate to use Windows NT Server 4.0, Windows 2000 Server or even the Windows Server 2003 to function as a VPN Server
- Firewall
Firewall is also another requirement. Firewalls will be used to prevent the connection between outside networks. The firewall will also be used to block some of the unused ports in the organization [5].
- Remote access policy
This is important in enforcing the fine-grained policies like encryption, the time of the day and so on. This requirement is quite significant when it comes to the remote access connections policies. The connections can be done locally on RADIUS servers (may be third-party RADIUS server or IAS servers) or even the RRAS servers.
- Filtering
This can be applied to ensure that only VPN traffic to pass through as well as other issues such as the drop test in the public interface as well as the PPP interface. The filtering here is to make sure that the VPN server box and the traffic in the VPN tunnel are shielded.
- IP addressing
Along with the public interface and the private interface, there is a need for IP addresses. There is also a need for IP address pool. The IP address pool will be used in the assignment of the IP addresses to the VPN client especially after the tunnel is operational. (See appendix 1 for further requirements).
Other requirements include tunneling protocols and authentication protocols.
Solution Design
- Logical design
The logical design of the VPN to some degree will be bound by the physical topology but will make significant use of VLANs as well VPNs. The diagram below demonstrates the connection to the internet alongside a f
