This is what I am trying to do. I think the professor thinks we know more than we do
The Directorate of Diplomatic Officers has recently agreed a new network infrastructure to connect its 3 international offices in Rome, Cambridge and Chicago.
Your task is to complete the design and produce a working prototype configuration to prove the implementation will work. .
The offices in Cambridge, Chicago and Rome will be interconnected via resilient T1 mesh network. The clock rates are provided by Cambridge and Rome.
It is anticipated there are requirements for around 2300 hosts at the Chicago office and a potential 1093 hosts at both the Rome and Cambridge offices.
There will be 12 further offices within Europe in the next 2 years each with a minimum of 550 hosts each.
The Cambridge office is used to host a connection to the Internet via a Managed Ethernet Connection (Fast Ethernet) with an allocated address of 188.8.131.52/30.
As the organisation has not previously been connected to the Internet, they have not been allocated a block of addresses to use other than the dedicated Internet link.
The new network design must use a configuration to reflect this lack of addresses and utilise appropriate addressing through use of RFC1918 addresses
The organisation needs to implement a security policy on a suitable router to
• Ensure that only users from its main 3 offices can attach to the corporate data centre at 184.108.40.206.
• Only Chicago users on the Administration VLAN are able to access the Finance Server hosted at an ASP at address 220.127.116.11, utilising an application on Port 1234 using TCP. • Only Rome and Cambridge users are able to access an EU Research database using http, https and ftp (remember ftp uses two ports) on address 18.104.22.168 • All users need to access an off-site email server running both IMAP/POP3/SMTP in the appropriate directions on address 22.214.171.124. • Block access to a range of file-sharing networks using IRC where demotivated employees are downloading copyrighted material using networks 126.96.36.199, 188.8.131.52, 184.108.40.206, 220.127.116.11 & 18.104.22.168. • only internal initiated connections are permitted to access the Internet.
All security violations must be logged in an appropriate syslog server.
I have the topology set up along with the addressing scheme. The issue I am having is trying to get the vlans to talk to the rest of the networks.
E.G: I have the 10.0.16.254 as the gateway. I have set up the servers on VLAN's using the switch. I have say VLAN 10 as the research db with an IP of 22.214.171.124. I can't get this to get out to any of the other offices as the gateway is on a different network.
I was wondering how I get around this so that it all converges.
Thanks in advance