62960 – ITNE2005Develop a security Infrastructure for a Medium-Size

SOLUTION AT Australian Expert Writers

Assignment Details:
a security Infrastructure for a -Size NetworkAssignmentObjective(s)This item relates to the unit learning outcomes as in the unit descriptor. This assessment is designed to evaluate student’s ability on working with the routers, firewalls and VPN tunnels and adopting those technologies in enterprise level .The following ULOs are assessed in this assent assessment.LO 1 Explain network security issues and develop a comprehensive network security policy to counter against information securityLO 2 Analyse and configure routers on the network perimeter with router software security featuresLO 3 Evaluate and configure firewall protocols and features to perform basic security operations on a networkLO 4 Critically review the enterprise network requirements and configure site-to-site virtual private networks using standard router software featuresLO 5 Analyse the enterprise security requirements and configure intrusion prevention on network routersLO 6 Monitor network traffic and implement security policies to control access, resist attacks, and protect network devicesINSTRUCTIONSThese instructions apply to AssignmentAssignment (Weightage 20%) – The report should be uploaded on the LMS by Session 12 Demonstration: Due on Lesson 12 in classThis Assignment will focus on student’s ability to work on an enterprise level network and handle network devices. Upon the implementation of the network, student should produce a comprehensive report, which includes screenshots of entering configuration commands and brief explanation of the screenshots. The devices should be named with the respective student IDIf any third-party content is used. The citation of sources is mandatory and should follow IEEE style.What to Submit.Submit your report to the Moodle drop-box for Assignment. Note that incidents of plagiarism will be penalized.Please Note: All work is due by the due date and time. Late submissions will be penalized at the rate of 10% per day including weekends.Assignment :Figure 1: Network TopologyNote: Integrated Services Routers (ISR) have Fast Ethernet interfaces instead of Gigabit Ethernet interfaces.Addressing TableDevice Interface IP Subnet Mask Default Gateway Switch PortR1-S0000 F0/0 209.165.200.225 255.255.255.248 N/A ASA G0/0S0/0 (DCE) 10.1.1.1 255.255.255.252 N/A N/ALoopback 1 172.20.1.1 255.255.255.0 N/A N/AR2-S0000 S0/0 10.1.1.2 255.255.255.252 N/A N/AS0/1 (DCE) 10.2.2.2 255.255.255.252 N/A N/AR3-S0000 F0/1 172.16.3.1 255.255.255.0 N/A S3 G0/0S0/0 10.2.2.1 255.255.255.252 N/A N/AS1-S0000 VLAN 1 192.168.2.11 255.255.255.0 192.168.2.1 N/AS2-S0000 VLAN 1 192.168.1.11 255.255.255.0 192.168.1.1 N/AS3-S0000 VLAN 1 172.16.3.11 255.255.255.0 172.16.3.1 N/AASA VLAN 1 (G0/1) 192.168.1.1 255.255.255.0 N/A S2 G0/0VLAN 2 (G0/0) 209.165.200.226 255.255.255.248 N/A R1 F0/0VLAN 3 (G0/2) 192.168.2.1 255.255.255.0 N/A S1 G0/0PC-A NIC 192.168.2.3 255.255.255.0 192.168.2.1 S1 G0/1PC-B NIC 192.168.1.3 255.255.255.0 192.168.1.1 S2 G0/1PC-C NIC 172.16.3.3 255.255.255.0 172.16.3.1 S3 G0/1In this Assignment you are required to complete all the following parts:Task 1: Configure Basic Device Settings:• Configure host names as shown in the topology plus your student ID.• Configure interface IP addresses as shown in the IP Addressing Table.• Configure static and dynamic routingTask 2: Configure Secure Router Administrative Access• Configure encrypted passwords and a login banner.• Configure the EXEC timeout value on console and VTY lines.• Configure login failure rates and VTY login enhancements.• Configure Secure Shell (SSH) access and disable Telnet.• Configure local authentication, authorization, and accounting (AAA) user authentication.• Secure the router against login attacks and secure the IOS image and the configuration file.• Configure a router NTP server and router NTP clients.• Configure router syslog reporting and a syslog server on a local host.Task 3: Configure a Zone-Based Policy Firewall and Intrusion Prevention System• Configure a Zone-Based Policy Firewall (ZPF) on an R3 using the CLI.• Configure an intrusion prevention system (IPS) on an R3 using the CLI.Task 4: Secure Network Switches• Configure passwords and a login banner.• Configure management VLAN access.• Secure access ports.• Protect against Spanning Tree Protocol (STP) attacks.• Configure port security and disable unused ports.Task 5: Configure ASA Basic Settings and Firewall• Configure basic settings, passwords, date, and time.• Configure the inside and outside VLAN interfaces.• Configure port address translation (PAT) for the inside network.• Configure a Dynamic Host Configuration Protocol (DHCP) server for the inside network.• Configure administrative access via Telnet and SSH.• Configure a static default route for the Adaptive Security Appliance (ASA).• Configure Local AAA user authentication.• Configure a DMZ with a static NAT and ACL.• Verify address translation and firewall functionality.Upon Completion of the above configuration tasks, you have been asked to draft a Policy on using of VPN by telecommuters. The policy should include the following sections:1. Objectives 3. Audience 5. Exceptions2. Purpose 4. Policy 6. ViolationsNOTE: To complete the Assignment, refer to Assignment Supplementary Document.Marking Guide: 100 MarksPlease note that the Assignment will contribute towards 20% of the final grade.Task Description MarksFinal Report 80Report Layout The report style, language and structure should be appropriate. All screenshots and descriptions need to be compiled and in a single final report and any given suggestions need to be incorporated.The report must containi. Cover page with Unit Code, Unit Name and Student IDii. Table of Contentsiii. Introduction iv. Discussionv. Policy Document on using of VPN by telecommutersvi. Critical Analysis vii. Conclusion 5Introduction The introduction should include purpose of the report, sections covered which should convince the reader that the report is worth reading. Word count limit – 125 words 5Technical This section should include the configurations done in the virtualized 50Discussionnetwork environment. You should break down this section into eight tasks and include at least 6 screen shots from each of these tasks and a brief descriptioni. Task 1: Configure Basic Device Settings:10ii. Task 2: Configure Secure Router Administrative Access 10iii. Task 3: Configure a Zone-Based Policy Firewall and Intrusion 10Prevention System iv. Task 4: Secure Network Switches10v. Task 5: Configure ASA Basic Settings and Firewall 10Policy Document on using of VPN bytelecommuters The policy should comprehensively cover all the aspects related to connecting to an enterprise network by a telecommuter 10Critical Analysis The students are required to provide a critical analysis of the deployed network considering:a) Confidentiality 10b) Integrityc) Availabilityd) Performancee) ScalabilityConclusion Summarize your findings. Word count limit – 125 words 4References Should follow IEEE style. 2Demonstration 15In classdemonstration – 10 mins The students are required to demonstrate in class, during Lesson 12

Order from Australian Expert Writers
Best Australian Academic Writers

QUALITY: 100% ORIGINAL PAPERNO PLAGIARISM – CUSTOM PAPER