Suppose that you are appointed to lead a project of a computer network design in your organization that contains many sites that need to be integrated into a single corporate private network, what are you going to do? As a team leader, a time-frame project as general needs to be developed first that includes the brainstorming to collect data as much as possible, the blueprint project, budget forecasting, liaising with the third parties and so on. It’s quite difficult to start a project properly without knowing exactly what the strengths and weaknesses of supporting infrastructure which the system will base on. It is therefore, a computer network design should start by brainstorming to collect data as much as possible. Assume this computer network design will involve three sites: one main headquarter office in Sydney, one main office in Jakarta, and one remote site – the gold mine in the middle of the Borneo jungle. The principal of the organization would like to have all the sites linked to a single corporate computer network to allow inter-sites communication including data, voice, or probably video conference and off course to allow easy communication with the whole world. Telecommunication Requirements The first data for your computer network design that needs to be collected is the telecommunication system requirements. The main question is how to link all of the sites to allow system communication to happen. The following questions can be used to collect the data for the telecommunication requirements. 1. How to arrange the Telecommunication service in remote site? We understand that both the main offices in Sydney and Jakarta are located in the area where you can find lots of communication services. What about the remote site – the site in the middle of the jungle? You should liaise with the third party company that can provide WAN services technology – probably uses the satellite link communication. 2. Collect the information what kinds of communication will be allowed for remote site to the Jakarta office: data only, voice, video, or combination of those. This information is important to help you determine how wide the satellite link bandwidth you need. This will relate to the budget since satellite link is expensive. 3. What kind of WAN technology to link data between Jakarta and Sydney, frame relay, ISDN network, VPN connection? Liaising with the third party – the telecommunication company will help. You need to dig and find more data that specific to the project. Telecommunication requirements should be sorted out first before you can proceed to collect other infrastructure requirements in this case. Network Infrastructure Requirements Second requirement for your computer network design is to collect data regarding the network infrastructure requirements. All related data for both logical and physical infrastructure requirements must be collected as much as possible. The following questions can be used to collect the data. 1. How many hosts will be in each site including workstations, servers, switches, routers, wireless access points, and VoIP. This will help in calculating and designing the IP address requirements. 2. Collect the information with the principal management if they need to host public resources either in Sydney or Jakarta sites. If so, where will all the public resources be located, inside the private network or in the DMZ (perimeter network)? This will help in designing the entry-point security. By hosting public resources, domain name must be designed in a secure manner such as separating the domain naming between internal and public usage. 3. Collect the information regarding the security requirements for internal network. Will particular sections or departments need security boundary? This will help in designing your computer network if the network segmentation within the local network is needed. And also helps in designing how the users are grouped and appropriate policies are developed to comply with the security requirements. 4. Collect the information with the principal management to develop service level agreements regarding the availability of the network resources. How critical the network resources will affect the business continuity if they ever fail to function. This will help you design the requirements of the redundant resources such as the need of clustering, load balancing and so on. 5. Collect the information regarding the location in each sites such as how good the power is, how long the distances between each building that will connect to the network, is it feasible to run the network cabling or wireless connection. If the wireless connection is needed, examine how the attenuation factors will affect the wireless performance. 6. Collect the information if the travelling users or tele-workers will be allowed to access the corporate network resources. This will help you design your VPN requirements and the security requirements regarding the authentication and the authorization for remote connection. 7. And still more diggings needed regarding the infrastructure requirements that is specific to the project. By having the brainstorming data regarding the infrastructure requirements you can make the budget regarding the hardware, software, and consultants requirements for the implementation of your computer network design. Disaster Management In your computer network design, the disaster recovery and business continuity planning should be in mind. The what if this fail question should base all the decisions of your design including selecting the location, hardware, software, models, the third party involves and so on. For example in building the server room, it’s a wise decision not to populate all the servers into a single main server room. Another alternate server in different building would be much better to avoid a single point of failure in case of the main server room is totally burned in fire disaster. The draft diagram of the computer network design should be evaluated precisely. Risk security assessment must be performed to help you design the appropriate control to reduce the possible threats to occur and if the threats ever occur, what actions must be taken to allow the business to run at least in the minimum operational level. In your computer network design should also consider the easiness in maintaining the system later by the administrators by providing a comprehensive documentation including the operational manuals and disaster recovery planning. By Ki Grinsing Ki Grinsing was graduated from ITS technical college Surabaya with the addition of MCSE and CCNA certifications, he has long years of working experiences in IT. For complete articles, please visit: Computer network design and VPN connection
Data leakage protection (or data loss prevention) is a process that involves numerous methods that prevent loss of data. A data leakage protection tool can be a hardware or software tool that can protect every type of data that is in use, in rest or in motion, on a computer network. It can also conduct intense content inspection with the help of a centralized management framework. The tool can conduct a contextual security analysis of transaction that includes detecting attributes of: Originator Destination Data object Medium Timing Remember, a leakage prevention tool aims to diagnose and prevent unauthorized access to data. Data Leakage Protection Common Tools Basic tools that are widely used in computer networks for secured data transmission are as follows: Firewall: A security device that acts as a barrier between two networks. It is configured to accept or deny network access requests. It can also encrypt or decrypt network traffic between different security domains. These are widely used in hardware or software, depending upon its type, to protect intranets and internet data from unauthorized access. All the data flowing through the network has to meet specific security criteria to be approved and authenticated by the firewall. Routers: Two or more routers in a computer network can be configured to use session encryption. Many users who have access to resources can see the data flowing on the Internet. Routers promote protected connectivity between two sites, making the routes secured. Virtual Private Networks: It is a computer network that aims to provide secured access to a private network for remote offices or individual users using Internet or other public telecommunication infrastructure. This happens through an additional logical layer that forms on the existing larger network. Network Tap: This enables network administrators to access data that passes through a computer network. Computer networks are based on the technologies including Ethernet, 802.11 and FDDI. It is vital to monitor the data using a third party device, such as a network tap. A network tap features minimum three ports and can be used for: VoIP recording RMON probes network intrusion detection systems packet sniffers network probes A network tap does not affect the flow of data or any other device attached in the network. Network Critical provides network intrusion prevention systems to stop threats on the network. Check out their website at NetworkCritical.com.
It seems that whenever you talk about an upgrade or new installation of a company’s voice/data network these days you hear the buzz word “ethernet” sometime in the conversation. With all the buzz… should you seriously consider ethernet in the mix for your network solution? Now think about that for a moment. Are you just “jumping on the bandwagon”… or is there some truth to all this hullabaloo? To answer that let’s get serious for a moment… no gushing idol worship. Just facts. First …. it’s very clear that today Ethernet has gone from a nice to have option to the preferred choice for WAN (Wide Area Networks) access links. Many companies also use it in their backbone for IP connectivity. So the question often is “why not Ethernet” ….. rather than “should you use it.” For example it is increasing commonplace that in a campus network just about all high bandwidth communications is Ethernet based. Also many things that used to be separate such as voice, CCTV, security/card locks can be migrated. Although you might need something to drive the migration. Can someone say cost savings??? Don’t forget scalability with future technologies and increased performance efficiency too. All three will go over very well with your Big Boss …. and your shareholders. If you need a few bullet points to drive home this message to that audience …. try using these: – You really don’t need a router. It is simply an Ethernet Handoff to your network. – As you increase in bandwidth …. the per meg price goes down much quicker than with DS3 or OC3 bandwidth. – For off-net/on-net sites Ethernet can be much cheaper than standard DS3 or OC3 bandwidth …. because you do not have to deal with loop costs. However, I don’t think Ethernet is really the common denominator, but IP (which tends to use Ethernet in most places). Since that means you don’t need Ethernet everywhere and you can integrate useful technologies you might need – MPLS, VSAT, ADSL, and DS3 for example. Be aware though that some parts of networks are likely to not be Ethernet compatible for a long time. The issue with “everything must be xx” is not whether you can get xx (sic Ethernet) in most places, but how to cope with the last few “hold outs”. A definite pro is that ethernet remains a layer 2 service. Which if you buy from a carrier means that you are in control of the routing. Whereas if you take an IP VPN service this will impact your internal routing configuration. Layer 2, Ethernet based connectivity between sites gives a lot of flexibility and often improved latency/jitter performance. So if you’re using IP today on SDH services then a migration to Ethernet should be a lot simpler. But again this depends on the scenario. Most carriers now use Ethernet as the last mile and also for backbone connectivity. This has provided higher speeds without the capital outlay …. and has the requisite reliability you should expect. I also wouldn’t use Spanning Tree and so would rely on the Network Layer to take the path decisions …. as this is a lot more deterministic and saves having multiple different protocols performing on the fly updates. Any IP application including voice and video should run just the same as over SDH …. but Ethernet would give you the options of putting Voice into it’s own VLAN. Controlling bandwidth in this manner …. incorporating Ethernet …. should be so much cheaper. You could over engineer the backbone and keep things simple. There are no real drawbacks using Ethernet in my mind …. and I personally believe that this would give you more flexibility than either a traditional SDH structure or an IP VPN based network. The only Cons I can think of relate to the maintenance and troubleshooting of the network. Depending on your architecture and design, it may be a nightmare to maintain the network. For example, point-to-point is simple, but rings and mesh is challenging and will require clever and flawless design. You really need to design and test the network carefully. You need to be aware of the type of services you will be running. Such as constant traffic, bursty traffic, low-latency traffic etc… as all of that will impact on your network and will require careful configurations. You need to have your QoS (Quality of Service) planned accurately if working with VLAN’s or different types/classes of traffic. Designed correctly, Ethernet models work well, but poorly implemented ones often have challenges. Its important for you to understand that Ethernet based WAN is not simply “plug-n-play”. It requires additional planning and setup. Overall I think there are many more pros than cons for choosing ethernet for your voice/data network . We are seeing lots of improvements to Ethernet these days via various industry working groups ….. as well as evolving packet transport technologies such as MPLS-TP and PBB-TE. So the future of etherent looks even brighter. To get right to the point ….. I would not hesitate to recommend Ethernet as a viable solution. It is a cheap and scalable solution. Michael is the owner of FreedomFire Communications….including Business-VoIP-Solution.com. Michael also authors Broadband Nation where you’re always welcome to drop in and catch up on the latest BroadBand news, tips, insights, and ramblings for the masses.
Author: China Cable television Network Company Peng Jin [Abstract] protocol-based IP network will be able to provide amphibious operations (Triple-Play) as the representative of integrated services, represent the future direction of network convergence technology, has huge development potential and market prospects. This combination of state Broadcasting TV Cable Backbone network integrated service delivery platform a project Planning Construction experience to explore the course of data network planning and construction of radio and television, should focus on a number of issues to consider. [Key words] data network, IP 20 since the 90′s, TCP / IP protocol has become the leading selection of data networks, IP-based network protocol will be able to provide amphibious operations (Triple-Play), represented by the integrated services, represent the future of network convergence technologies direction, with great development potential and market prospects. Accordingly, the original Film and Television Bureau in “during the” formulation of a national cable television transmission network planning, the country’s cable television network operations in accordance with the different hosts, into the broadcast TV service transport platform (hereinafter referred to as A platform ) and integrated service delivery platform (hereinafter referred to as B platform), where A platform to undertake the transmission of radio and television programming task, B platform will have radio and television transmission characteristics of multi-functional operations and data and voice services. After 8 years of effort, the state radio and television cable backbone network (hereinafter referred to as the country dry network) now has nearly 40,000 km cable line, accessible in 31 provinces. According to the plan, the national network using SDH and DW dry DM A platform technology development, and on this basis, building up to the B platform, IP network technology first phase. It is currently connected to the country’s 14 provinces, to the core / backbone hierarchy, with the Chinese in Beijing Telecommunications And China Netcom Internet, to carry out value-added services for system-wide support. In this paper, dry country B platform, a project network planning and construction experience, focused on the planning and construction of data networks, radio and television during a number of issues should be considered. 1, business planning Data network can carry out major operations, including Internet access, data center, VPN, IP telephony and multimedia services bearing such as conducting business planning process, in conjunction with their own radio and television industry, users and network characteristics different types of data services on a breakdown, and as far as possible to make traffic distribution and development is expected to guide the network’s pre-construction planning and follow-up. Internet access Users who do not have direct access to the network’s main network operators and direct ownership of the user’s local network operators, the former mainly for its partners to provide access or through service, in fact, is the bandwidth wholesale, after who is the family or directly to users Office Access services. Data Center (IDC) IDC operations, including Server Hosting, web hosting, virtual storage, for radio and television network operators, the objective production of film and television industry can rely on the contents of the advantages of combining the local network needs to carry out the actual content to audio and video content-based hosting business. Virtual Private Network (VPN) IP-VPN present mainly based on IPSec VPN and MPLS VPN and other types, which MPLSVPN flexibility, safety and efficiency advantages gradually widely accepted by the market and become the major data network operators one business. The exchange of digital television programs and e-government radio and television networks such as VPN services can be a major area of development. IP Phone And Internet access services similar to users who do not have direct access to the network’s main network operators, mainly for the local launch IP telephone services to provide hosted services to network operators. Carried out in the local network to Broadband Phone As the representative voice access services despite the tremendous market potential, but there are policies, funding and Competition Risks involved in radio and television network operators to deploy when the need for careful careful. audio and video services Broadband access network technology with the development of the original text-and image-based Internet applications, gradually began to transition to audio and video-based multimedia applications, bearing in IPTV Audio and video services as represented by the major carriers are currently an important development direction of the data network, data network radio and television certainly is an important direction of the business. 2, network technology choices Data can be divided into long-distance trunk network, and Metro Link network types, in the long-distance trunk data network construction, no doubt will require high-speed, high capacity, long-distance transmission technology do support the current model of choice mainly the following. IP over ATM The basic principle is to encapsulate IP packets ATM cell, the ATM layer for transmission channel, the main advantage of this approach can provide good bandwidth management system, effectively reuse a variety of different types of business , with flow control balancing and fault recovery. A few years ago in a period of low user bandwidth requirements, this approach has a certain rationality. But the drawback is too much protocol level, the cell tax led to lower transmission efficiency, while managing high complexity, the complexity of equipment and higher. IP over SDH This way IP packets by link layer protocol (eg PPP) package directly to the SDH frames, and to cut the ATM layer, eliminating the cell tax overhead, and thereby improve the transmission efficiency; In addition it provides a variety of protection mechanisms to provide routing in the transport layer security protection, effectively improve network security, is to build long-distance high-speed backbone network of the main technologies. Currently on the market more mature products business transfer rate of 2.5Gbps SDH and 10Gbps, 40Gbps of SDH products though have been commercial, but the relatively high cost. IP over DWDM Basic principle of this approach is to route an IP corresponding to a wavelength of light is the protocol level at least, the most efficient mode of transmission, although it is not the same as SDH protection mechanisms, but by the data Network equipment Independently routing security features, but it can greatly improve the fiber optic cable transmission capacity and reduce maintenance complexity, is to build long-distance high-speed backbone network of the main technologies. Currently on the market more mature products business DWDM transmission capacity I am a professional writer from Cheap On Sales, which contains a great deal of information about rca 52 rear projection , mitsubishi rear projection televisions, welcome to visit!
In this age of electronic communication, having a sound cabling and networking substructure is vital for a company’s growth. There are several firms offering structured cabling services Calgary Canada nowadays, which execute the projects with utmost proficiency. The services are rendered in the most professional manner by such firms, and their personnel hold expertise in installing the most sophisticated structured cables in the clients’ premises. Likewise, the well qualified staff of these firms specializes in setting up data network Calgary Canada that assists in keeping the client well connected within its facility as well as outside it. The structured cabling services Calgary Canada provided by reputed firms in the city are executed keeping in mind the specific requirements of the firms. The cabling services most opted for by the companies in the city include the following: Cat 3 Cabling Cat 5 Cabling Cat 5e Cabling Cat 6 Cabling Cat 6e Cabling Fiber Optics Cabling Coax Cabling Owing to the fact that fiber optics cabling Calgary Canada holds the advantage of carrying various independent channels, it is preferred by a large number of companies. The effective functionality, long service life and reliability of optical fibers also contribute to the immense popularity of this type of cable. A company that is looking for firms that install data network Calgary Canada expertly carries out routing, switching VPN and security jobs. Such firms set up LAN (Local Area Network) and WAN (Wide Area Network) systems. LAN is used for communicating efficiently within the premises of the organization, whilst WAN helps in streamlining the electronic communication with the people based outside the premises. The networks can be set up in wired as well as wireless forms, as per the requirements of the clients and their business. High quality data network is essential for each & every organization, since it is the most prominent communication tool, inside and outside the facility. If a firm is looking at cabling and networking services, then the jobs being commissioned would remain incomplete until the appropriate telephony systems are installed. Telephones are the backbone of a company’s communication infrastructure, since people can use them at all times, irrespective of the presence or absence of the internet. But, internet has also become integral to the business world, and firms always have the high speed net connections. This has led to the advent of VOIP phone systems Calgary Canada, which use technology that allows the users to make phone calls using internet – based calling services. Apart from installing phone systems, reputed companies also execute projects pertaining to SIP trunking and hosted PBX options. By availing any of these options, a company can easily make static-free, free or low cost internet based calls, with all the features VOIP offers. Keeping much
