Essay on DISCUSSION ON THE PROPOSED DESIGN
In this design, quad wan SSL VPN firewall will be used and placed at the main office as a perimeter firewall, the firewall will be connected to two layer 3 switches, which will act as a distribution point of the network, another three layer 2 manageable switches will replace the existing switches as the access layer.
All the servers will be positioned at a single access switch forming the sever-farm, there will be redundant connections linking both the distribution switches and the servers; this option is selected in order to unify the servers’ connectivity, as well as to eliminate the number of hops connecting workstations and servers, while offering redundant route to the servers.
The communication …show more content…
The network is capable to support new services and technologies with minimum configuration changes, though the changes will not affect the network design. The design has take into consideration to make implementation of new equipment, services and application to be incorporated more easily and efficiently into the network.
During the discussion with the company representative the network uptime was a critical point, therefore in order to make the network available with limited downtime, the several redundancy mechanisms where taken introduced into the design. The server switch was connected to both switches in the collapsed core, with the link utilizing link aggregation mechanism to increase the bandwidth. This option will ensure access to the servers will only be affected if both the switches will fail.
Both layer 3 switches at the collapsed core are implementing link aggregation as well as virtual router redundancy protocol (VRRP), this was to ensure that there was load balancing between the two switches which traffic from the different VLANs would be balanced via the switches and the link to the Internet monitored, in case of failure on links, then the other switch was to take over the responsibility.
The workstations, servers and printer network traffic have been routed in such a way that the