Unit: Networking Infrastructure Unit Level: HND Unit Code: NWI Student Name: Date of Issue: 03/02/2017 03 Date of Submission: /04/2017 Coursework Regulations 1 All coursework must be submitted via http://technology.stpmoodle.net/ 2 Please check the submission date and time and ensure that coursework is submitted on time. 3 Requests for an extension must be in accordance with the guidelines set out in the college regulations, with the necessary documentary evidence to support your request. Refer to The Student Handbook. 4 General guidelines for submission of coursework: a) All work must be word-processed and must be of a "good" standard. b) Document margins should not be more than 2.5cm or less than 1.5cm. c) Font size in the range of 11 to 14 points distributed to including headings and body text. Preferred typeface to be of a common standard such as Arial, Calibri or Times New Roman for the main text. c) All work completed including any software constructed may not be used for any purpose other than the purpose of intended study without prior written permission from St Patrick's College. Remember to keep evidence of your submitted coursework.   Assignment front sheet Qualification Unit number and title Pearson BTEC HND Diploma in Network Engineering and Telecommunications Systems Custom Unit: Networking Infrastructure Student name Assessor name Amjad Alam Date issued Completion date Submitted on Assignment title Assignment: Networking Infrastructure LO Learning outcome (LO) AC In this assessment you will have the opportunity to present evidence that shows you are able to: Task no. Evidence (Page no) LO 1 Implement name resolution services 1.1 Design an automatic IP address assignment plan to accommodate a routed network environment – install and authorise a DHCP server – create and configure appropriate scopes and scope options – create and test client reservations – install DHCP relay agents or enable BootP forwarders 1 1.2 Design a domain naming strategy – install the DNS service – create forward and reverse lookup zones – delegate authority for a zone – enable dynamic updates – add appropriate resource records 1 1.3 Design a NetBIOS name resolution strategy – install WINS – add static WINS records for non-WINS clients – configure push/pull replication partners 1 1.4 Evaluate the alternative strategies for automatic IP addressing in a routed network and alternative name resolution techniques 1 LO 3 Configure and troubleshoot network connectivity 2.1 Produce a troubleshooting strategy for a routed environment to include: IP addressing problems – name resolution problems – automatic IP addressing problems – a backup strategy for DNS, WINS and DHCP 2 2.2 Capture and analyse network data using network monitoring tools 2 2.3 Provide connectivity solutions for a multi-vendor networking environment 2 2.4 The report should include an outline of the type of network connectivity issues that could be encountered in a large multi-vendor networking environment and propose solutions using available utilities and services. Some evidence should be presented of learner's attempt at solving connectivity problems 2 LO 3 Configure and support routing, remote access and security 3.1 Configure inbound and outbound VPN connections and describe the benefits to an organisation of using a VPN as a viable alternative to a dedicated line and research the practical applications of remote access 3 3.2 Configure remote access policies to control the access of various groups via RRAS 3 3.3 Outline the security threats faced by modern computer networks 3 3.4 Produce a security strategy for issuing certificates in a large organisation using an Enterprise certificate authority hierarchy and configure IPSec policies for data encryption. 3 Learner declaration I certify that the work submitted for this assignment is my own and research sources are fully acknowledged. Student signature: Date: In addition to the above PASS criteria, this assignment gives you the opportunity to submit evidence in order to achieve the following MERIT and DISTINCTION grades Grade Descriptor Indicative characteristic/s Contextualisation M1 Identify and apply strategies to find appropriate solutions Effective judgements have been made An effective approach to study and research has been applied To achieve M1 effective judgements will have to be made in designing IP addressing/ subnets as well as domain name strategy for the company stated as in the case study (whole Task 1) M2 Select/design and apply appropriate methods/techniques • Use a range of methods and techniques to collect, analyse and process information/data • Apply and analyse detailed knowledge and skills, using relevant theories and techniques • Coherently present and communicate work using technical language accurately Learner must design and implementation report to provide connectivity solutions incorporating file server and Windows clients, its fault tolerance techniques along with network monitoring tools and techniques (whole Task 2) M3 Present and communicate appropriate findings Presentation have been used appropriately and technical language has been accurately used To achieve M3 you must produce documentation using Snapshots. (Task 1, 2 & 3) Appropriate technical language has been used throughout the whole Tasks 1 – 3. D1 Use critical reflection to evaluate own work and justify valid conclusions Conclusions have been arrived at through synthesis of ideas and have been justified. To achieve D1 Analysis and evaluation will have been carried out on deriving alternative strategies for automatic IP addressing in a routed network and alternative name resolution techniques (Tasks 1b) D2 Take responsibility for managing and organising activities • Evaluate and synthesise relevant theories and techniques to generate and justify valid conclusions • Adopt and correctly use a recognised referencing scheme e.g. Harvard Referencing Learner need to design report outlining your implementation of the certificate services and justify the need of implementing IPSec to encrypt data while communicating internally and externally. (Task 3c) And Appropriate references/ sources need to be provided. D3 Demonstrate convergent/lateral/ creative thinking • Alternative and innovative approaches have been considered To achieve D3 constructive criticism the learner should be able to present as a networking design taking into consideration of performance, cost-effectiveness, authentication and authorization mechanism, monitoring by logging, security and access policies (Task 3a) Assignment title Networking Infrastructure Scenario: ZXC Ltd. is a newly established (Imaginary) property leasing and management company based in Paris which was formed by merging three other small companies. They have individual departments to provide Management, Letting, Valuation, Selling, Mortgage and other property related services to their clients. The company is scheduled to start its operation from the first quarter of the next financial year, 2016. Even though they are a new company, altogether they are expecting to have about 500 employees in their Paris (Headquarter), New York and Dubai offices. Each individual department will have its own IT department to manage & support their own requirements. In addition, the company will have a corporate IT division which will formulate the overall IT strategy and support/monitor the IT operations of the individual departments. In line with a new strategy (Recently formulated), the company plans to implement its new network infrastructure using Windows Server network with its own DHCP, DNS, WINS, IIS (for hosting website & web-mail services) and other domain services. Assume that you have been hired as a Network Consultant to design and implement the networking infrastructure proposed for the group. Description of problem to be solved As a consultant and part of your entire work, you are required to produce a design and implementation report to address IP allocation and name resolution services considering the following major issues. Deliverables (AC 1.1, 1.2, 1.3, 1.4, M1, M3 & D1) a) Designing AND implementing an automatic IP addressing mechanism [Assessment Criteria: 1.1, 1.2] b) Designing AND implementing a domain naming strategy [Assessment Criteria: 1.2, 1.3, 1.4, D1] Continuing the above scenario, the strategy document highlighting the budget constraints outlines to utilize the old file servers currently based on the Windows Server 2008 systems in each company. As a consultant considering the above mentioned additional requirements/constraints and part of your entire work, you are required to produce: Deliverables (AC 2.1, 2.2, 2.3, 2.4, M2, M3) a) A troubleshooting, backup and fault tolerance strategy design AND implementation report. [Assessment Criteria: 2.1] b) A guideline for network health monitoring and analysing highlighting the network monitoring tools AND techniques to be used for the smooth operation. [Assessment Criteria: 2.2, 2.3] c) A design and implementation report to provide connectivity solutions incorporating file server and Windows clients. [Assessment Criteria: 2.4] Additionally, the strategy document describes about linking the regional offices to the Headquarter. Moreover, the employees working in headquarter of ZXC Ltd. need to access their mails from home and the network administrator & board of directors of the company need the access to the network from anywhere using internet. Furthermore, the strategy document also describes about implementing a web based application in ZXC Ltd. which allows its customers to place orders for Quotation of the Properties that contains financial figures and other very important and confidential information. Ensuring such a confidential information gathering from a web application is a great challenge so the strategy document outlines implementing certificate services in the server giving peace of mind for its customers. As a consultant considering the above mentioned additional requirements/constraints and part of your entire work, you are required to produce: Deliverables (AC 3.1, 3.2, 3.3, 3.4, M3, D2 & D3) a) A networking design and implementation report to connect headquarters and regional offices as wells as providing access from home and outside taking into consideration of performance, cost-effectiveness, authentication and authorization mechanism, monitoring by logging, security and access policies. [Assessment Criteria: 3.1, 3.2, D3] b) A report outlining security threats to the modern networking solutions AND justify what counteractive approaches to protect the network have been undertaken while designing and implementing the entire network meeting all the requirements mentioned above. [Assessment Criteria: 3.3] c) A design report outlining your implementation of the certificate services to address above requirements AND also justify the need of implementing IPSec to encrypt data while communicating internally and externally. [Assessment Criteria: 3.4, D2] When a Unit has been assessed Grades are reported on the Online E - Learning System. Students can obtain the grade awarded by viewing the Submission Inbox. 50% indicates Pass 65% indicates Merit 75% indicates Distinction 35% indicates Referred 10% indicates Withheld 15% indicates Unreasonable Submission Achievement Summary Qualification Pearson BTEC HND Diploma in Network Engineering and Telecommunications Systems Assessor name Amjad Alam Unit Number and title Custom Unit: Networking Infrastructure Student name LO Learning outcome (LO) AC In this assessment you will have the opportunity to present evidence that shows you are able to: Task no. Achieved (yes/ no) LO 1 Implement name resolution services 1.1 Design an automatic IP address assignment plan to accommodate a routed network environment – install and authorise a DHCP server – create and configure appropriate scopes and scope options – create and test client reservations – install DHCP relay agents or enable BootP forwarders 1 1.2 Design a domain naming strategy – install the DNS service – create forward and reverse lookup zones – delegate authority for a zone – enable dynamic updates – add appropriate resource records 1 1.3 Design a NetBIOS name resolution strategy – install WINS – add static WINS records for non-WINS clients – configure push/pull replication partners 1 1.4 Evaluate the alternative strategies for automatic IP addressing in a routed network and alternative name resolution techniques 1 LO 3 Configure and troubleshoot network connectivity 2.1 Produce a troubleshooting strategy for a routed environment to include: IP addressing problems – name resolution problems – automatic IP addressing problems – a backup strategy for DNS, WINS and DHCP 2 2.2 Capture and analyse network data using network monitoring tools 2 2.3 Provide connectivity solutions for a multi-vendor networking environment 2 2.4 The report should include an outline of the type of network connectivity issues that could be encountered in a large multi-vendor networking environment and propose solutions using available utilities and services. Some evidence should be presented of learner's attempt at solving connectivity problems 2 LO 3 Configure and support routing, remote access and security 3.1 Configure inbound and outbound VPN connections and describe the benefits to an organisation of using a VPN as a viable alternative to a dedicated line and research the practical applications of remote access 3 3.2 Configure remote access policies to control the access of various groups via RRAS 3 3.3 Outline the security threats faced by modern computer networks 3 3.4 Produce a security strategy for issuing certificates in a large organisation using an Enterprise certificate authority hierarchy and configure IPSec policies for data encryption. 3 Higher Grade Achievements Grade descriptor Achieved Grade descriptor Achieved M1: Identify and apply strategies to find appropriate solutions D1: Use critical reflection to evaluate own work and justify valid conclusions M2: Select / design and apply appropriate methods / techniques D2: Take responsibility for managing and organising activities M3: Present and communicate appropriate findings D3: Demonstrate convergent /lateral /creative thinking