NETWORK DEVELOPMENT CAPSTONE PROJECT GRADUATE SEPTEMBER 2005 This is the final quarter course of Information Technology – Computer Network Systems program.

NETWORK DEVELOPMENT CAPSTONE NETWORK DEVELOPMENT CAPSTONE PROJECTPROJECT

GRADUATE SEPTEMBER 2005GRADUATE SEPTEMBER 2005

• This is the final quarter course of Information Technology – Computer Network Systems program for Associate of Applied science Degree.

• A mandatory "Capstone" project will allow student to work in teams to provide a business solution to an external organization, which example of is given in Network Development CASE STUDY.

• The capstone project allows students to apply the knowledge and skills acquired in their courses to the work environment.

• This project is completely individualized; students are encouraged to select work-related projects that are of particular interest to them and that will result in professional growth and benefit the organization.

TTI TEXAS TTI TEXAS TECHNOLOGY TECHNOLOGY

INSTITUTEINSTITUTE

Network Upgrade Design PlanNetwork Upgrade Design Plan

Wide Connections, Inc.Wide Connections, Inc.

““We establish We establish world-wide world-wide connections and connections and guide you safely to guide you safely to your destination”your destination”

http://www.acclaimimages.com/terms.html

Company’s prioritiesCompany’s priorities

• Our priority # 1 is customer satisfaction

• We provide outstanding service

• Only high trained people work for the Wide Connections, Inc.

• Our technician’s work provide trust and integrity

• As a professionals we offer excellent customer service

Project Team Members

Project Leader

WAN/LAN Design & Hardware -WAN/LAN Design & Hardware -Joanna Buraczynska

Team members

Domain Structure – Server & Workstations Domain Structure – Server & Workstations -- Jessica Mucia

Network Management and Security Network Management and Security -- Grisel Delgado

Software licensing and Cost Analysis Software licensing and Cost Analysis --Alvaro AraicaAlvaro Araica

Advisor – Ronald O’Connor

WAN/LAN Design & HardwareWAN/LAN Design & Hardware

Joanna BuraczynskaJoanna Buraczynska

Project IdeaProject Idea

• Existing Process versus Future GrowthExisting Process versus Future Growth

• Connectivity Between all LocationsConnectivity Between all Locations

• LAN/WAN Hardware LAN/WAN Hardware

• LAN/WAN Design Goals LAN/WAN Design Goals

• Project Standards and ProceduresProject Standards and Procedures

Life Cycle DiagramLife Cycle Diagram

Analysis,Planning, Implementation,Review.

Existing ProcessExisting Process

• TTI WAN link up all 4 school sites with the Main Campus TTI WAN link up all 4 school sites with the Main Campus for the purpose of delivering and exchanging data, storage for the purpose of delivering and exchanging data, storage plus run applications plus run applications

• Each building provides a MDF room (a central point to Each building provides a MDF room (a central point to which all LAN cabling is terminated) which acts as a POP-which all LAN cabling is terminated) which acts as a POP-point of presence as well to provide an Internet connectionpoint of presence as well to provide an Internet connection

• Star Topology is implementedStar Topology is implemented• Each campus has 4 wired computer labs with 31 student Each campus has 4 wired computer labs with 31 student

workstations and 1 instructor workstation in each labworkstations and 1 instructor workstation in each lab• CAT 5 UTP cable run are tested end-to-end for 100Mbps CAT 5 UTP cable run are tested end-to-end for 100Mbps

capacity for servers and 1Mbps for hostscapacity for servers and 1Mbps for hosts• The LAN is based on Ethernet LAN switchingThe LAN is based on Ethernet LAN switching

WAN Growth RequirementsWAN Growth Requirements

Connection type with other branch officesConnection type with other branch offices

• Frame Relay Network – More cost effective than dedicated leased lines.• All Internet connections will go through HQ• ISDN WILL BE REMOVED

Bandwidth requirementsBandwidth requirements• Hosts-100 Mbps and Servers-1 GB

Cable TypeCable Type• The Backbone would be a combination of fiber –optic and CAT6 for

Gigabit transmission• CAT5e for the most systems to their immediate network junction

FRAME RELAY NETWORK

INTERNET

TTI Dallas, Texas

TTI Houston West, Texas

TTI San Antonio, Texas

TTI Austin,Texas

TTI HQ/Main Campus – Houston South

TTI, Texas Technology Institute - WAN Connectivity

All connections

are T1 to Frame

Cloud

LAN Growth RequirementsLAN Growth Requirements

Quantity of computers for each campusQuantity of computers for each campus• 1 student workstations and in each classroom will be removed• 2 admin workstations will be connected to the network in LRC • One MDF will support WAN connection plus 12 admin

offices, 4 labs, 4 classrooms and LRC.• IDF room in new Houston West campus will also support

WAN connection plus 6 labs, and 6 classrooms.• For Houston West 2nd floor 2 labs and 2 theory rooms will be

placed instead of admin offices, so total will be 6 labs plus 6 theory rooms

Major Pieces of LAN Structure are Broken into Major Pieces of LAN Structure are Broken into Three Unique Categories of the OSI ModelThree Unique Categories of the OSI Model

Layer 1 - Physical LayerLayer 1 - Physical Layer• Includes wire media type such as CAT5 UTP and fiber-optic cable along Includes wire media type such as CAT5 UTP and fiber-optic cable along

with EIA/TIA 568 Standard for layout and connection of wiring schemes.with EIA/TIA 568 Standard for layout and connection of wiring schemes.Design GoalDesign Goal

• Build this layer of the OSI model with speed and expansion capabilities Build this layer of the OSI model with speed and expansion capabilities Layer 2 - Data Link LayerLayer 2 - Data Link Layer

• Includes selection of Layer 2 devices such as bridges or LAN switches Includes selection of Layer 2 devices such as bridges or LAN switches used to interconnect the Layer 1 media to for a LAN segment. Devices at used to interconnect the Layer 1 media to for a LAN segment. Devices at this layer will determine the size of the collision and broadcast domains.this layer will determine the size of the collision and broadcast domains.

Design GoalsDesign Goals• Create a concentration point within the MDFs or IDFs where end host can Create a concentration point within the MDFs or IDFs where end host can

be grouped at Layer 1 to form a physical LAN segment. be grouped at Layer 1 to form a physical LAN segment. • Install LAN switching devices that use micro segmentation in order to Install LAN switching devices that use micro segmentation in order to

reduce the collision domain size. reduce the collision domain size. • Create a point (at Layer 2) of the topology where users can be grouped into Create a point (at Layer 2) of the topology where users can be grouped into

virtual workgroups (VLANs) and unique broadcast domains. virtual workgroups (VLANs) and unique broadcast domains.

Major Pieces of LAN Structure are Broken into Major Pieces of LAN Structure are Broken into Three Unique Categories of the OSI Model –cont.Three Unique Categories of the OSI Model –cont.

Layer 3 - Network LayerLayer 3 - Network Layer• Includes selection of layer 3 devices such as routers which are used to Includes selection of layer 3 devices such as routers which are used to

create unique LAN segments and allow communication between segments create unique LAN segments and allow communication between segments based on layer 3 addressing such as IP addressing.based on layer 3 addressing such as IP addressing.

Design GoalsDesign Goals• Build a path between LAN segments that will filter the flow of data Build a path between LAN segments that will filter the flow of data

packets. packets. • Isolate ARP (Address Resolution Protocol) protocol broadcast Isolate ARP (Address Resolution Protocol) protocol broadcast • Isolation of collisions between segments. Isolation of collisions between segments. • Filtering of Layer 4 services between segments. Filtering of Layer 4 services between segments.

Project Standards and proceduresProject Standards and procedures• The WAN as a whole will be connected with a series of routers that

will replicate all information from server to server• Campuses will be connected by leased T1 lines and will run at a

constant speed of 1.54Mbps• Staff and students will have a 24/7 access to the Virtual Library at

home• The network will run at a constant speed of 100Mbps• The WAN equipment will be provided by Cisco Systems, Inc. • Dell, Inc. will take care of the LAN hardware such as servers and

workstations • All printers will be provided by Hewlett-Packard development

Company, L.P.• TTI will be protected from viruses by top of the line anti-virus

protection by Symantec Norton Anti-Virus and the firewall will block all unauthorized access attempts and redirect them to the TTI website

• Incremental backup will be conducted every night , plus full backup completed once a week on Saturdays

Domain Structure – Server & Domain Structure – Server & WorkstationsWorkstations

Jessica MuciaJessica Mucia

ABOUT ACTIVE DIRECTORY

A network service that identifies all resources on a network

Makes resources accessible by uniquely identifying them Stores information about users and groups, workstations

and servers, policies and scripts, printers and queues, switches and routers, databases, security policies, all in a hierarchical fashion

A directory service is not a general-purpose database - You would not implement a directory service to manage a point-of-sale system in a chain of stores - But you would consider implementing a directory service to manage the salespeople who log on at the point-of-sale terminals

StudentServer

Admin. Groups

Admin. Users

StudentUsers

LinuxServer

WebServer

Admin. Users

StudentUsers

Student Groups

Student ServerAdmin. Server

Admin. Groups

Admin. Server

FTPServer

Student Groups

Admin. Users

StudentUsers

Student Groups

Student Server

Admin. Groups

Admin. Users

StudentUsers

Student Groups

Student ServerAdmin. Server

Admin. Groups

Admin. Users

StudentUsers

Student Groups

Student Server

Admin. Groups

Houston SouthMain CampusTTI-Tech.edu

ACTIVE DIRECTORY DESIGNHoustonWest.TTI-Tech.edu SanAntonio.TTI-Tech.edu

Dallas.TTI-Tech.edu Austin.TTI-Tech.edu

Admin. Server

Admin. Server

Houston SouthMain Campus

AustinCampusHouston West

Campus

DallasCampus

San AntonioCampus

TTI NETWORK ARCHITECTURE DIAGRAM

StudentServer

AdministrativeServer


StudentServer


StudentServer


StudentServer

LinuxServer

FTPServer


StudentServer

WebServer

T1 To frame relay

network

T1 To frame

relay network

T1 To frame relay

network

T1 To frame

relay network

T1 To frame relay

network

Understanding Active Directory

• A directory service compiles information about objects of interest in the world and dispenses that information when given a request. The Yellow Pages or a library card catalog are examples of a directory

• People like to have their information classified for easy retrieval. For instance, the Yellow Pages has categories like “Theatres or Movies” and “Restaurants - Italian,” and a library card catalog classifies items into “Books – Fiction,” or “Books – Nonfiction,” or “Periodicals.”

WHAT ACTIVE DIRECTORY PROVIDES

• Scalability – Provides an efficient mechanism to store objects and multiple indexes for fast retrieval of information

• Extensibility – Provides object classes for domains, OUs, users, groups, and printers. It is extensible through a schema which allows for information to be easily retrieved

• Interoperability – ADSI (Active Directory Service Interfaces) provides a single, consistent, and open set of interfaces for managing directories

• Replication – Handles queries and updates. Users are able to access information anytime, anywhere from within the domain.

• Locater Services – DNS and global catalog provide an easy method of retrieving information

LOGICAL STRUCTURE

• The basic unit of logical structure in Active Directory is the domain

• All network objects exist within a domain and each domain stores information only about the objects it contains

• An organizational unit, or OU, is a container used to organize objects within a domain

• A tree is created when you add one or more child domains to an existing domain

• Domains within a tree share a contiguous namespace and a hierarchical naming scheme

• A forest is the arrangement of one or more independent domain trees

PHYSICAL STRUCTURE

• A site is a combination of one or more IP (Internet Protocol) subnets connected by a fast and reliable link

• The main purpose of a site is to physically group computers to optimize network traffic

• A single domain can cover one or more geographical sites, and a single site can contain user accounts and computers from multiple domains

• Sites confine authentication and replication only to the devices within a site

• A domain controller is a computer running Windows 2000 Server and stores a replica of the domain directory

• Since a domain can contain one or more domain controllers, each domain controller in a domain has a complete replica of the domain’s portion of the directory

AD DOMAIN DESCRIPTION

• Root domain – TTI-Tech.edu at the main campus

• Each other campus is a child domain of the Main Campus

• Administrative and Student groups and users will be created on each child domain

SERVER ROLES

• ADMINISTRATIVE SERVER – Root Domain, DHCP server, DNS server, Application server

• STUDENT SERVER – DHCP server, DNS server

• LINUX SERVER – Anti-Virus server, Print server, DNS server, RADIUS server

• WEB SERVER – Virtual Library server, E-Mail server

• FTP SERVER

Administrative Server

130.115.0.32

TTI Houston SouthMain Campus

Linux Server

130.115.0.5


130.115.1.32TTI Houston West Campus

Student Server

130.115.1.6


130.115.2.32TTI San Antonio Campus

Student Server

130.115.2.6


130.115.3.32

TTI Dallas CampusStudent Server

130.115.3.6


130.115.4.32

TTI Austin CampusStudent Server

130.115.4.6

Student Server

130.115.0.6

Web Server

130.115.0.31

FTP Server

130.115.0.4

TTI IP ADDRESSING DIAGRAM

SERVER & OS DISTINCTION

• There are a total of 5 servers at the main campus – Administrative, Student, Linux, Web, and FTP server

• Each other campus has 2 servers, one Administrative and one Student

• The operating system for the main campus is Server 2003, San Antonio will be using Linux, and Austin, Dallas, and Houston West will all be running Windows XP

Network Management & SecurityNetwork Management & Security

Grisel DelgadoGrisel Delgado

TTI Campus

Security Plan

Basic principles and concepts

Security Policy

Policy Statement"It shall be the responsibility of the I.T. Services

to provide adequate protection and confidentiality of all corporate data and proprietary software systems, whether held centrally, on local storage media, or remotely, to ensure the continued availability of data and programs to all authorized members of staff/ students, and to ensure the integrity of all data and configuration controls."

Summary of Main Security Polic ies

Confidentiality of all school data is to be maintained through discretionary and mandatory access controls, and wherever possible these access controls should meet with the

class security functionality.

Confidentiality of all school data is to be maintained through discretionary and mandatory access controls, and wherever possible these access controls should meet with the class security functionality.

Access to data on all laptop computers is to be secured through encryption or other means, to provide confidentiality ofschool data in the event of loss or theft of school equipment.

Summary of Main Security Polic ies

Only authorized and licensed software may be installed, and installation

may only be performed by I.T. Services, IT students & staff

The use of unauthorized software is prohibited. In the event of unauthorized software being discovered it will be removed from the workstation immediately.

Data may only be transferred for purposes registered under the School data-protection registration

. All diskette drives and removable media from external sources must be virus checked before they are used within the School

Workstation configurations may only be changed by I.T. Services staff.

Virus Protection

I.T. Services will have available up to date virus scanning software for the scanning and removal of suspected viruses

School file-servers will be protected with virus scanning software.

Workstations used by users who regularly need to bring in data from outside the School will be protected by virus scanning software.

All workstations will be periodically scanned by I.T. Service

Access Control

Users will only be given sufficient rights to all systems to enable them to perform their job function. User rights will be kept to a minimum at all times.

Where possible no one person will have full rights to any system. I.T. Services will control network/server passwords and system passwords will be assigned by the system administrator in the end-user department

Access to the network/servers and systems will be by individual username and password

Physical Lan Security

LAN equipment, hubs, bridges, repeaters, will be kept in secure hub rooms. Hub rooms will be kept locked at all times. Access to hub rooms will be restricted to I.T. Services staff only. Requiring access to hub rooms will notify I.T. Services staff in advance so that the necessary supervision can be arranged.

Users must logout of their workstations when they leave their workstation for any length of time.

All network wiring will be fully documented.

The use of LAN analyzer software is restricted to I.T. Services staff only

Wide Area Security

Wireless LAN's will be of the spread spectrum, frequency-hopping type and will make use of any available encryption facilities.

Users will not use modems without first notifying the I.T. Services section and obtaining their approval.

Modems will run at speeds greater than 2,400 bits/s to prevent the signal from being recorded.

Internet Security

Permanent connections to the Internet will be via the means of a firewall to regulate network traffic.

Permanent connections to other external networks, for offsite processing etc., will be via the means of a firewall to regulatenetwork traffic.

Where firewalls are used, a dual homed firewall (a device with

more than one TCP/IP address) will be the preferred solution.

Security Requirments

Every computer that connects to the Internet in any form must have a personal firewall.

Every computer must have a virus protection and it must be kept current.

Only open email attachments when you are sure the sender is really who it appears to be.

Only browse the Internet with a safe browser or change your browser settings to make it more secure.

Security Requirments

Will operate at least one anti-spy ware/ anti- ad ware program on your system.

Will not be downloading and installing programs on your system beside authorized personal.

Keep e-mail address confidential and never post an email address in an unsecured web page on the Internet. This practice will reduce spam and the chance of getting virus or scam emails. Use a different email address to give to those you are not sure of.

Choosing Passwords

Minimum Length – 8 characters

Maximum Length – 14 characters

Passwords should use three of four of the following four types of characters:

1. Lowercase

2. Uppercase

3. Numbers

4. Special characters such as ! @#$%^&*(){}[]

Choosing Passwords

Do not write your password down.

Do not transmit your network password across the Internet with out it being encrypted.

Do not use the same passwords on your computer at work/ school that you may use to logon to a website.

Do not use the same passwords for all accounts such as additional email accounts or other logins you may have on the Internet.

Security Outline

We will be using a firewall to protect the entire wan from unauthorized access. It is installed as the access point betweenTTI WAN and the ISP. This will direct all outside HTTP traffic to the TTI Website. Email may access any valid email box within the WAN; the all attempts will be lost.

All of the routers have specific access control list. This prevents unauthorized traffic from leaving one campus and accessing another.

Security Outline

All network users must have a unique username. No guest accountsmay be enabled. The users will be grouped in the following order.

1. Admits users – full control access to the network2. Program chairs- full access3. Faculty- read and execute access4. HR- modify access of employee files5. Recruiting- access to data6. Finance- read access to HR7. Faculty- access to student applications and admin applications and able to install programs.8. Student- access to remote storage on the student server, access to student applications. Unable to install programs.

Security Outline

Attacks may be installed unintentionally on a workstation such as Trojans, Worms, and Viruses. Norton Antivirus will detect and destroy the entire viruses that appear on the network. Norton will be installed on the domain controller of every campus. It will be replicating itself to all the workstations when it is being updated. This update will be done via the Internet.

Data Flow

Data flow modeling examines processes (activities that transform data from one form to another), data stores (the holding areas for data), external entities (what sends data into a system or receives data from a system, and data flows (routes by which data can flow).

Accessing Internet from the main campus: As the student, they will be able to access the Internet by double clicking on the explorer icon. The application is then sent to the gateway wherethe router sends the request to the isp where the application is filled and then sent back to the original applicant.

Data Flow Diagram

Application ServerRequests

Application Workstation

Completes Request

Student

CreateFile

Save File

Requestfile

Student Server

HR Workstation

Retrieves Data

2003ServerSaves

Data

InternetRequest

DataRequest

Data

Gateway

Student MainCampus

Student Gateway

DATA FLOW

Maintenance Plan

All Network users should be assigned to a group.

Termination of employment

Should any equipment become unusable or malfunction.

Plan for end of work day.

Steps for shut down procedure.

Software Licensing & Cost AnalysisSoftware Licensing & Cost Analysis

Alvaro AraicaAlvaro Araica

OptiPlex GX280 Small Mini-Tower

OptiPlex GX280 SMT, with Int Broadcom GbNIC

• Intel Pentium 4 Processor 530 (3.00GHz, 1M, 800MHz FSB)

Operating System(s)• Microsoft Windows XP Professional, SP2, with Media• NTFS File System for all Operating SystemsMemory• 512MB DDR2 Non-ECC SDRAM,400MHz, (2DIMM)Monitors• Dell 17 inch M783s flat CRT color monitor (16.0 inch

viewable)Video Card• DVI (Digital) Adapter CardBoot Hard Drive• 80GB SATA, 7200 RPM Hard Drive with 8MG Data Burst

Cache™Floppy• 1.44MB 3.5 Inch Floppy DriveRemovable Media Storage Devices• 16xDVD AND 48X/32X/48X CDRW,with DVD Playback

OptiPlex GX280 Small Mini-Tower- Dell Quote

E-Quote #: E006425148 • Quantity: 987• Unit Price: $1,088.00• Description: 1 OptiPlex GX280 SMT, with Int Broadcom® GbNIC

Intel® Pentium® 4 Processor 530 (3.00GHz, 1M, 800MHz FSB) • Total Price *$1,073,856.00 • Saved By: Alvaro A Araica([email protected]) • Saved On: 7/15/2005 • Expires On: 9/13/2005 • Phone Number: (847) 414-8234• Description: Capstone Project

PowerEdge 2850 • PowerEdge 2850Intel® Xeon™ Processor at

2.8GHz/1MB Cache, 800MHz FSB • Operating System No Factory Installed Operating

System• Memory 1GB DDR2 400MHz (2X512MB), Single

Ranked DIMMs• Primary Hard Drive 73GB2 10K RPM Ultra 320

SCSI Hard Drive• CD/DVD Drive 24X IDE CD-ROM• Hardware Support Services 3Yr BASIC NBD: L1

Hardware Queue, Next Business Day

Power Edge 2850 Intel Xeon – Dell Quote

E-Quote #: E006425148 • Quantity: 13• Unit Price: $4,343.80• Description: PowerEdge 2850 Intel® Xeon™ Processor at

2.8GHz/1MB Cache, 800MHz FSB • Total Price: *$56,469.40• Saved By: Alvaro A

Araica([email protected]) • Saved On: 7/15/2005 • Expires On: 9/13/2005 • Phone Number: (847) 414-8234• Description: Capstone Project

Linksys Etherfast 10/100 Printserver

• The Linksys EtherFast 10/100BASE-TX PrintServer lets you add one printer to your 10BASE-T or 100BASE-TX network.

• Equipped with Direct Memory Access (DMA) technology, a 128KB buffer, and automatic collision control, the PrintServer can handle the most complicated print jobs

• Compatibable with most Laser, Ink Jet, Bubble Jet, Color, and Dot Matrix Parallel Printers

• 128KB RAM Buffer for Faster Graphics Handling

• 256KB Flash Memory for Future Firmware Upgrades

• Free Technical Support & Software Upgrades

• 5 Year Limited Warranty

Quantum Super DLTtape 600 • Quanum Super DLTtape 600 is very

reliable and secure that uses DLTSage, a suite of management tools, it let you manage your data to be safe and available.

• It lets you compress files up 600 GB

Main Features• Tape drive external• Super DLT 300 GB / 600 GB• SCSI

Cisco 2801 Integrated Services Router

Key Features of the Cisco 2801 Integrated Services Router:

• Mid/High-Density, High Performance Services • Security: On-board encryption, up to 800 VPN

tunnels (AIM); IOS FW, NAC, IPS, or Content Security

• Voice: Mid/High-density analog/digital voice with IP Telephony, Voice Mail; CallManager Express or Survivable Remote Site Telephony support for up to 24 IP phones

• High-performance concurrent security, voice and advanced services to multiple T1/E1 WAN rates

• Integrated Dual 10/100 ports • Optional integration of L2 switching with PoE • Enhanced Modularity and Investment Protection • Flexible expansion ( 2 HWIC slots), additional

concurrent services • Scalable services deployment and availability

features

Cisco Catalyst 2950G- 48 port Switch

Cisco Catalyst is an intelligent switch with fixed-configuration, stackable models that provide wire-speed fast Ethernet and gigabit Ethernet connectivity.

It provides services, such as advance quality of service, rate-limiting, security filters and multicast management.

Features

• The Catalyst 2950T-48 switch is a component of the Cisco Gigabit Ethernet over copper solution, offering 10/100/1000BASE-T uplinks

• Flexible Gigabit-uplink options, including GBIC-based or 1000BASE-T, are available to meet individual network needs

• Superior control is achieved through advanced intelligent services such as quality of service based on Layer 2 through Layer 4 parameters

• Security features based on Layer 2 through Layer 4 Access Control Parameters alleviate internal and external security concerns

• Cisco Cluster Management Suite (CMS) Software offers superior manageability, ease-of-use and ease-of-deployment

• Backward compatible within the Catalyst 2950 Series and compatible with all other Cisco Catalyst switches-enhancing the long-term value of your strategic investment

Cisco FastHub400The Cisco FastHub400 is a 24 port hub that provides

high-performance, flexibility and low cost connectivity and has the ability of auto-sensing desktop connectivity where bandwidth is not required

Features: • 24-port 10/100 Fast Ethernet • 100BaseFX Support • Autosensing on all Ports • Integrated stacking connectors • Class II repeater design • Built-in HTTP Server

Specifications: • 24 workstation connectors: RJ-45 MDI-X shielded

connectors • Media supported: Category 5 UTP or Category 3

UTP (10BaseT only)

Firewall LB2N• The LB-2 VPN is a firewall and router with 2 WAN

ports that combines high bandwidth sharing, network security, load balance and redundancy.

• It also provides network management features that are essential for an efficient and safe security policy.

• The LB-2 VPN features packet inspection, IPSec VPN, NAT, intruder detection, URL filter, control and blocking access features and distinct user policies.

• The LB-2 VPN supports most of the popular high bandwidth connections including cable, DSL, static and dynamic IP and PPPoE. It's a 4-port switch and DHCP server/client that allows for safe internet connection sharing.

PacketSeeker 1550PacketSeeker 1550 is an application-intelligent traffic

monitoring device that provides visibility into network utilization and application performance. Integrating transparently into your network, PacketSeeker identifies how WAN and the Internet resources are consumed, what causes performance problems, and provides a path to fix those problems.

Featured Highlights Include:• Automatically discover traffic by leveraging Layer-7

classification and quickly identify the true nature of network traffic.

• Analyze traffic impacts and performance issues with link-bases statistics and 60+ metrics per application. Include peak utilization and efficiency measurements that are key indicators of performance issues.

• Benchmark and track application performance with Response Time Management (RTM) and TCP Health statistics. Pinpoint performance issues by evaluating network, client, and server behavior trends to pinpoint performance issues.

• Proactively monitor service levels based on network or application statistics. Configure PacketSeeker to notify you when performance falls below configured thresholds, with 'rearm' levels to avoid alarm overload.

• Report throughout your organization with on-board reporting, centralized reporting with ReportCenter, or integration via SNMP and XML APIs into your management applications.

HP LaserJet 4200

The HP Laserjet 4200 is provides a versatile, high performance and a easy-to use feature that makes this a great product.

FeaturesVersatile

Flexible paper handling reduces user intervention—customizable options allow up to a 2,600- sheet input capacity, a duplexer for two-sided printing, or a 500-sheet stacker or stapler/stacker as your paper-handling needs grow.

• Powerful workgroup solution - share fast, reliable printing with the available HP jetdirect 615n Fast Ethernet internal EIO print server, with 4.5 MB/sec network throughput and best-in-class security features; the optional EIO interface can also be used with many partner solutions within virtually all network environments

Performance• Fast printing increases office productivity -

maximize efficiency with ultra-fast printing of 35 ppm for letter-sized documents

• Get quick return to application and fast printing of complex documents - powerful printing with no slowdowns using the 300 MHz processor and 48 MB RAM (64 MB RAM in bundles)

• Printing delivered when you need it - no warm up time with an instant-on fuser that prints first page out in less than 9 seconds

HP Color LaserJet 2600N The HP Color LaserJet 2600N lets print high color

professional documents and is a network affordable printer.

• Spend less time waiting around documents: the first page prints in less than 20 seconds, even when the printer has been in Sleep mode

• Process complex documents that have text, images, and graphics with the powerful 264MHz processor and 16MB memory

• Monitor the print status via the convenient front panel, on-screen LCD display

• Replenish the paper less frequently, with the optional third tray (250 sheets), which brings the capacity to a total of 500 sheets

• Access printing supplies in just one click: sign up at our My Printing Supplies Store and save a list of your printers for hassle-free, toner, and paper reordering

• Stay on top of toner replacement with HP SureSupply: receive alerts when a cartridge is low1, monitor its remaining life, and enjoy easy online ordering or check stock and prices at nearby stores

Software Expense AnalysisProduct License Cost Quantity Total Software Cost

Microsoft Office 2003 Professional

$439.34 987 $433,628.58

Symantec Antivirus Corporate Edition 10.0

$51.60 987 $50,929.20

Microsoft Visio Professional 2003 $439.34 987 $433,628.58

Windows XP Pro $0.00 987 $0.00

Microsoft Windows Server 2003 $697.52 1 $697.52

Red Hat Linux 9.0 $0.00 1 $0.00

Campus Hardware Layout(Houston South)

• Houston South Campus• 4 Labs• 30 Workstations - OptiPlex GX280 SMT• 1 Faculty workstation - OptiPlex GX280 SMT• 1 Black & White Printer in each lab - HP LaserJet

4200• 1 Plotter - HP DesignJet 500 • 1 Student Patch Panel w/48 ports - Tripp Lite Patch

Panel - 48 Ports • 1 Admin Patch Panel w/48 ports - Tripp Lite Patch

Panel - 48 Ports• 1 Computer Cart for each lab - Bretford Plastic AV

Cart• 4 Theory Rooms• 1 Faculty Workstation - GX280 SMT• 1 Projector in for each theory room - Panasonic PT

LB0U• LRC• 12 Workstations - GX280 SMT• 2 Faculty Workstations - GX280 SMT• 1 Black & White Printer - HP LaserJet 4200• 1 Color Printer - HP Color LaserJet 26n• 1 Scanner - HP Scanjett 5550c• 1 Computer Cart - Bretford Plastic AV Cart

• Faculty Offices• 12 offices • 17 Faculty Workstations - GX280 SMT• 1 Black & White printer – HP LaserJet 4200• 1 Color Printer - HP Color LaserJet 26n• Server Room• 5 Servers - PowerEdge 2850 Intel Xeon• 1 Rack Mount - APC NetShelter VX Base

Enclosure• 3 Switches - Cisco Catalyst 2950G w/48 Ports• 1 Hub - Cisco FastHub400• 1 Router - Cisco 2801 Integrated Services Router• 1 Firewall - HotBrick Firewall LB-2 VPN• 1 Sniffer - PacketSeeker 1550• 1 Print Server - Linksys Etherfast 10/100

Printserver• 1 Tape Drive - Quantum Super DL Tape 600• 2 Student Patch Panels w/48 ports - Tripp Lite

Patch Panel - 48 Ports• 1 Admin Patch Panel w/48 ports - Tripp Lite Patch

Panel - 48 Ports• 1 UPS - HP Tower UPS• 1 UPS – HP Tower ( Reserve)

Campus Hardware Layout(Houston West)

Houston West Campus(First Floor)4 Labs• 30 Workstations - OptiPlex GX280 SMT• 1 Faculty workstation - OptiPlex GX280 SMT• 1 Black & White Printer in each lab - HP LaserJet




Cart4 Theory Rooms• 1 Faculty Workstation - GX280 SMT• 1 Projector in for each theory room and lab-

Panasonic PT LB0ULRC• 12 Workstations - GX280 SMT• 2 Faculty Workstations - GX280 SMT• 1 Black & White Printer - HP LaserJet 4200• 1 Color Printer - HP Color LaserJet 26n• 1 Scanner - HP Scanjett 5550c• 1 Computer Cart - Bretford Plastic AV Cart

Faculty Offices• 12 offices • 17 Faculty Workstations - GX280 SMT• 1 Black & White printer – HP LaserJet 4200• 1 Color Printer - HP Color LaserJet 26nServer Room• 2 Servers - PowerEdge 2850 Intel Xeon• 1 Rack Mount - APC NetShelter VX Base





Campus Hardware Layout(Houston West)

Houston West Campus(Second Floor)

6 Labs• 30 Workstations - OptiPlex GX280 SMT• 1 Faculty workstation - OptiPlex GX280 SMT• 1 Black & White Printer in each lab - HP LaserJet 4200• 1 Student Patch Panel w/48 ports - Tripp Lite Patch Panel - 48 Ports • 1 Admin Patch Panel w/48 ports - Tripp Lite Patch Panel - 48 Ports• 1 Computer Cart for each lab - Bretford Plastic AV Cart6 Theory Rooms• 1 Faculty Workstation - GX280 SMT• 1 Projector in for each theory room - Panasonic PT LB0U

Hardware Campus Layout(Dallas, Austin, San Antonio)

4 Labs• 30 Workstations - OptiPlex GX280 SMT• 1 Faculty workstation - OptiPlex GX280 SMT• 1 Black & White Printer in each lab - HP LaserJet




Cart4 Theory Rooms• 1 Faculty Workstation - GX280 SMT• 1 Projector in for each theory room - Panasonic PT

LB0ULRC• 12 Workstations - GX280 SMT• 2 Faculty Workstations - GX280 SMT• 1 Black & White Printer - HP LaserJet 4200• 1 Color Printer - HP Color LaserJet 26n• 1 Scanner - HP Scanjett 5550c• 1 Computer Cart - Bretford Plastic AV Cart

Faculty Offices• 12 offices • 17 Faculty Workstations - GX280 SMT• 1 Black & White printer – HP LaserJet 4200• 1 Color Printer - HP Color LaserJet 26nServer Room• 2 Servers - PowerEdge 2850 Intel Xeon• 1 Rack Mount - APC NetShelter VX Base





Estimated Hardware Cost(Houston South)

TTI HQ Houston South

Item Quantity Hardware Cost

OptiPlex GX280 SMT 159 $172,992.00

PowerEdge 2850 Intel Xeon 5 $21,719.00

Quantum Super DL Tape 600 2 $20,619.00

Linksys Etherfast 10/100 Printserver 1 $99.74

Tripp Lite Patch Panel - 48 Ports 12 $1,090.44

Cisco 2801 Integrated Services Router 1 $1,890.59

Cisco Catalyst 2950G - 48 Ports 1 $8,360.97

Cisco FastHub400 3 $2,517.00

HotBrick Firewall LB-2 VPN 3 $349.00

PacketSeeker 1550 1 $2,024.95

HP LaserJet 4200 1 $892.02

HP Color LaserJet 26n 6 $798.00

Estimated Hardware Cost(Houston South)

TTI HQ Houston South


HP DesignJet 500 1 $2,049.99

HP Scanjett 5550c 1 $299.00

Panasonic PT LB0U 5 $5,196.00

HP Tower UPS 2 $198.00

Quantum Super DL Tape II 2 $75.16

CP Technologies Cat 5E 3ft 1200 $3,588.00


1000' CAT.5E 350 Mhz Solid Bulk Cable 30 $1,498.50

Belkin Multimode Duplex Fiber Plenum 1000' Bulk cable 10 $8,395.70

Belkin CAT5 Wallplate - 4 ports 53 $297.33

Bretford Plastic AV Cart 5 $788.55

APC NetShelter VX Base Enclosure 6 $6,517.80

Total

$262,256.74

Estimated Hardware Cost(Houston West)

TTI Houston West (First Floor)


OptiPlex GX280 SMT 159 $172,992.00








HotBrick Firewall LB-2 VPN 0 $0


HP LaserJet 4200 6 $892.02



TTI Houston West (First Floor)


HP DesignJet 500 1 $2,049.99







1000' CAT.5E 350 MHz Solid Bulk Cable 30 $1,498.50



Bretford Plastic AV Cart 7 $1,103.97



TTI Houston West (Second Floor)

OptiPlex GX280 SMT 192 $208,896.00


HP LaserJet 4200 6 $892.02









Total

$486,081.57

Estimated Hardware Cost(Dallas, Austin and San Antonio)


OptiPlex GX280 SMT 159 $172,992.00








HotBrick Firewall LB-2 VPN 0 $0


HP LaserJet 4200 6 $892.02


Estimated Hardware Cost(Dallas, Austin and San Antonio)


HP DesignJet 500 1 $2,049.99












Total

$238,718.34

Total Hardware Cost

$1,431,166.97

Labor Cost• All Campuses• 5 teams of 5 network engineers per campus • $130 per hour for each network engineer• $650 per hour for 5 network engineers• 40 hours per week for 7 weeks• $26,000 for 1 week• $182,000 for 7 weeks• 3 weeks for wiring instllation• 2 weeks installing software and hardware• One week will be for testing• Last week will be for training• Total Cost For All Campuses = $910,000

Overall Cost

• Total Software Expense$1,377,883.88

• Total Hardware Expense$1,431,166.97

• Total Labor Cost$910,000

Overall Cost

$3,719,050.85

NETWORK DEVELOPMENT CAPSTONE PROJECT GRADUATE SEPTEMBER 2005 This is the final quarter course of Information Technology – Computer Network Systems program.

Documents

NETWORK DEVELOPMENT CAPSTONE PROJECT GRADUATE SEPTEMBER 2005 This is the final quarter course of Information Technology – Computer Network Systems program.