Background Information for the Campus Network Design Project XUMUC is large online university in the Eastern United States. The university has an enrollment of 90,000 students, mostly online. The students do not live on campus and are scattered around the globe. XUMUC offer courses in the fields of arts and humanities, business, social sciences, mathematics, computer science, the physical sciences, and health sciences. Many of the professors are working professionals with jobs in the business community, and only 5% of the 3000 faculty have offices on main campus. Due to opening of new online universities in the DC metropolitan area, the university has had difficult time attracting new students. The college wishes to attract and retain more students, many of whom leave the state to attend more prestigious colleges. Because of these reasons and others, the State advisory board expanded the Shady Grove campus of XUMUC. Nine states colleges open their branches at Shady Grove location. XUMUC’s management board now wishes to consolidate management functions at its Shady Grove location. The president of XUMUC formed an Advisory Group whose mission was to consolidate IT functions and implement state of the art network to attract prospective students. The Advisory Group was also to determine why prospective students do not select XUMUC. The group determined that many prospective students do not select XUMUC because they perceive the computer facilities at XUMUC to be inadequate. In addition to the computer applications used by the students and professors, the college administration personnel use the College Management System, which is a Novell NetWare client/server application that keeps track of class registrations and student records. The Current Network at Shady Grove Campus: The Shady Grove campus hosts 9 independent universities working independently. The campus has three main buildings and fiber optic cable is used for backbone connections. The campus diagram is shown below. U N I V E R S I T Y Building-2Building-1Building-3 XUMUC Shady Grove Campus Towson UB Bowe UMCP Class Rooms Labs SE UMES UMBC Class Rooms UMUC Library Class Rooms UMB Labs Each building is connected by fiber optic cable. Because most of the students that attend XUMUC do so on a part-time basis, and because much of the faculty have other jobs, the assumption in the past has been that many of the students and professors use computing resources at home or at work and do not depend on the XUMUC network. The current network is shown in Figure -1. Fig:-1 Internet Internet Internet Internet Towson 4WS UB 5WS Bowe 5WS UMCP 8WS Class Rooms and Labs ES 4WS UMES 8WS UMBC 12WS UMUC20WS Library 25 WS Class Rooms UMB 15WS Current Network Topology ShadyGrove All the LANs at this site use 10-Mbps Ethernet although they can be upgraded to 100 Mbps. Every building is equipped with Category-5 cabling and wall plates in the various offices, classrooms, and labs, though the cablin ...

1. Background Information for the Campus Network Design
Project
XUMUC is large online university in the Eastern United States.
The university has an enrollment of 90,000 students, mostly
online. The students do not live on campus and are scattered
around the globe. XUMUC offer courses in the fields of arts and
humanities, business, social sciences, mathematics, computer
science, the physical sciences, and health sciences. Many of the
professors are working professionals with jobs in the business
community, and only 5% of the 3000 faculty have offices on
main campus. Due to opening of new online universities in the
DC metropolitan area, the university has had difficult time
attracting new students. The college wishes to attract and retain
more students, many of whom leave the state to attend more
prestigious colleges. Because of these reasons and others, the
State advisory board expanded the Shady Grove campus of
XUMUC. Nine states colleges open their branches at Shady
Grove location. XUMUC’s management board now wishes to
consolidate management functions at its Shady Grove location.
The president of XUMUC formed an Advisory Group whose
mission was to consolidate IT functions and implement state of
the art network to attract prospective students. The
Advisory Group was also to determine why prospective students
do not select XUMUC. The group determined that many
prospective students do not select XUMUC because they
perceive the computer facilities at XUMUC to be inadequate. In
addition to the computer applications used by the students and
professors, the college administration personnel use the College
Management System, which is a Novell NetWare client/server
application that keeps track of class registrations and student
records.
The Current Network at Shady Grove Campus:

2. The Shady Grove campus hosts 9 independent universities
working independently. The campus has three main buildings
and fiber optic cable is used for backbone connections. The
campus diagram is shown below.
U N I V E R S I T Y
Building-2Building-1Building-3
XUMUC Shady Grove Campus
Towson
UB
Bowe
UMCP
Class Rooms
Labs
SE
UMES
UMBC
Class Rooms
UMUC
Library
Class Rooms
UMB
Labs
Each building is connected by fiber optic cable. Because most
of the students that attend XUMUC do so on a part-time basis,
and because much of the faculty have other jobs, the assumption
in the past has been that many of the students and professors
use computing resources at home or at work and do not depend
on the XUMUC network. The current network is shown in
Figure -1.
Fig:-1

3. Internet
Internet
Internet
Internet
Towson 4WS
UB 5WS
Bowe 5WS
UMCP 8WS
Class Rooms
and Labs
ES 4WS
UMES 8WS
UMBC 12WS
UMUC20WS
Library 25 WS
Class Rooms
UMB 15WS
Current Network Topology ShadyGrove
All the LANs at this site use 10-Mbps Ethernet although they
can be upgraded to 100 Mbps. Every building is equipped with
Category-5 cabling and wall plates in the various offices,
classrooms, and labs, though the cabling and wall-plates are not
used in some of the buildings. To support users in Building-3,
multi-mode fiber-optic cabling was pulled through cabling
conduits to Building-1 and Building-2. At the Shady Grove
campus, XMUC uses the services of 4 ISPs for internet
connections.
The college provides 10 Macintoshes and 25 PCs in the
Computing Center (in Building-1) for student use. A LAN
switch in the Computing Center connects hubs, servers, printers,
and the router that connects to the Internet. Shady Grove
campus does not have its own web server. For security, packet
filtering firewall is used on some routers. The routers have
default routes to the Internet and do not run routing protocols.

4. Based on the advice of the Community Advisory Group, the
president started the “Upgrade XUMUC Project” with the goal
of upgrading the computer and networking facilities. The three
network administrators and the Director of Operations for
XUMUC formed the Project Task Force.
Table:-1 Shady Grove Inventories
Subnets
Devices
Comment
UMUC
20
Work Stations
UMES
8
Work Stations
UMCPTowson
8
Work Stations
Towson
4
Work Stations
UB
5
Work Stations
UMB
15
Work Stations
Eastern Shore
4
Work Stations
UMBC
12
Work Stations
Bowe

5. 5
Work Stations
Class Rooms
150
Work Stations
Shady Grove Administrations
50
Application server, Data server, and SAN
Router
4
2600 series, Slow processing power
Switches
10 switches
All switches are without port security. No technology to reduce
convergence time.
Patch Panel
4
Hubs
5
Printers
5
Commercial Type in Copy Centre
Network Printers and departments Printers
25
Voice Network:
Shady Grove campus has 200 telephones on a separate voice
network. IP telephony is used for internal purpose. PSTN
(Phone Company) network is used to dial out. The logical
diagram is shown below
PBX Switch
200 Capaity
Call ManagerPSTN NetworkInternetIP Data NetworkIP Voice

6. Network
Shady Grove Voice Network
Security:
The site recently experienced an increase in network attacks
(DoS). The network was recently unavailable for a considerable
time because of an attack. IT staff suspects that these attacks
are coming from broad range of spoofed IP addresses, but
unable to prevent these attacks. They have suggested installing
NID so that they can monitor better and stop it while it is
happening. Network availability is crucial for the university,
because their revenue depends on availability of network.
Web server:
The director of the site wants to host a web site to increase
revenue and share resources among all the universities located
at this location. His main concern is that a hacker can access to
internal network thru compromising web server.
RFP
The state government has funded this project on actual cost
basis to upgrade XUMUC’s computer labs and campus network.
Even though the project is funded on actual cost basis the
challenge with the network design is that the school’s budget
does not call for more money to be spent on network
administration as needed, so the new design has to be
manageable and simple.Project task force issued the following
RFP to upgrade the network.
Business and Technical Goals
The University Advisory Group identified the following
business goals for the Project:
· Increase the enrollment from to 400 to 500 students by the

7. year 2011
· Reduce the attrition rate from 30 to 15 percent by the year
2011
· Attract students who leave the state to attend colleges with
more technological advantages
· Provide more and bigger computer labs on campus
· Allow students to attach their notebook computers to the
campus network to reach campus and Internet services
· Reduce telephone cost
· Provide faster services
· Maintain (or reduce if possible) the level of funding spent on
network operations
The Project Task Force added the following technical goals:
· Centralize all services and servers to make the network easier
to manage and more cost-effective. (Distributed servers will be
tolerated but not managed, and traffic to and from these servers
will not be accounted for when planning capacity)
· Centralize the Internet connection and disallow distributed
departmental Internet connections
· Increase the bandwidth of the Internet connection to support
new applications and expanded use of current applications
· Standardize on TCP/IP protocols for the campus network.
Macintoshes will be tolerated but must use TCP/IP protocols or
the Apple Talk Filling Protocol (AFP) running on top of TCP
· Provide extra capacity at switches so users can attach their

8. notebook PCs to the network
· Install DHCP software to support notebook PCs
· Provide security to protect critical servers from the Internet
connection and internal network from intruders. Implement a
technology to stop DoS attack
· Provide a network that can scale to support future expanded
usage of multi-media applications
· Use VPN technology to connect securely Shady Grove site to
the main campus of XUMUC at Adelphi. Assume 2MB
bandwidth available for data network to connect to remote sites
· Provide a network that uses state-of-the art technologies
· Provide wireless network access to network users and guest
users from any point in the buildings. In conference room user
will get a minimum 284 kbps worth of bandwidth. Other areas
such as lobby, cafeteria a minimum bandwidth of 512 kbps
bandwidth is required. (You can assume, that site survey is
done and no sources of interference or RF discovered.
· Provide provisions for video conference and multicast
services.
The network administrators on the Project Task Force have been
criticized in the past by the students and professors, and are
looking forward to proving that they can develop a better
network than the existing network. Getting support for this
Project from the users and professors is not easy, and the
administrators now need to deliver a network that performs well
and has little downtime.
Network applications:
The XUMUC network is currently used for the following
purposes:

9. · Writing papers and doing other homework, including printing
the homework and saving the work on file servers
· Sending and receiving e-mail
· Surfing the Web using Netscape or Microsoft’s Internet
Explorer applications to access information, participate in chat
rooms, play games, and use other typical Web services
· Accessing the library card-catalog
· WebTycho applications accessing class.
Students and professors in the School also use the following
applications:
· Weather modeling. Meteorology students and professors are
participating in a project to model weather patterns in
conjunction with other colleges and universities in the state.
· Telescope monitoring. Astronomy students and professors
have set up a PC to continually download graphical images from
a telescope located at the state university.
Two new applications are planned:
· Graphics upload. The Art Department wishes to upload large
graphics files to an off-campus print shop that can print large
scale images on a high speed laser printer. The print shop prints
artwork that is file transferred to the shop via the Internet.
· Distance learning. The Computer Science department wishes
to participate in a pilot distance-learning project with the state
university. The state university will let WVCC students sign up
to receive streaming video of a computer science lecture course

10. that is offered at the state university. The students can also
participate in a real-time “chat room” while attending the class.
As a consultant to the school you are required to:
1. Propose a campus upgrade design that solves the current
problems, meet business and technical goals
2. Create a scalable network
3. Develop a campus upgrade design based on Enterprise
Campus module. This module should compose of Campus Core
layer, Building distribution layer, and Building access layer.
4. Provide redundancy at campus core layer and building
distribution layer to avoid failure at one point. For Building
Access layer provide redundant uplinks connection to Building
Distribution layer.
5. Select appropriate Cisco switch model for each part of your
enterprise campus model design from the Cisco Products Link,
listed below and use the following assumptions in your
selection process.
Selecting the Access layers switches:
a. Provide one port to each device
b. Make provision for 100% growth
Server farm switches
· Assume 6 NIC cards in each server and one NIC card uses one
port of switch
· Dual processors and dual power supply
http://www.ciscowebtools.com/ProductAdvisor/child/1.0/switch

11. es.asp
6. Propose an IP addressing redesign that optimizes IP
addressing and IP routing (including the use of route
summarization). Provide migration provision to IPv6 protocol in
future.
7. Propose a security plans to secure key applications and
servers but encryption of all application is not acceptable.
Firewalls can be used as necessary. Develop security policy to
stop sniffing and man-in-the-middle attack. Your security plan
must base on current industry standard Multilayer security or
defense-in-depth.
8. Integrate voice and data network to reduce cost. Propose and
develop a plan for migration to voice network with in XUMUC
sites as shown below. For dialing outside the XUMUC, propose
a plan for 100% connectivity with minimum number of outside
lines.
9. Create a wireless network for students and Faculty and staff.
The building2 and building3 have two conference rooms of
seating capacity of 200 each and approximate size 40 feet by 60
feet. Building 3 has a cafeteria of approximate size of 60x60
square foot and a survey report indicated that not any time more
than 20 guest use network services. Your task is to determine
number of WLC and AP placements and how many of them to
use and which model to use. For your ready reference, Cisco
equipment guide is attached. In Reference Section, you will find
a placement template and product ordering table for your
guidance in selecting equipment.
Link for Cisco Web Site Product selection
http://cisco.com/en/US/prod/collateral/wireless/ps5679/ps6548/
prod_brochure0900aecd80565e00_ps2706_Products_Brochure.h

12. tml)
10. Assume any information (with proper justification) which
you think is missing and critical to the development of the
design.
U N I V E R S I T YU N I V E R S I T Y
Shady Grove CampusBaltmore CampusEurope CampusXUMUC
Adelphi Main Campus
Adelphi Campus 1000 Phones
Shady Grove Campus 200 Phones
Baltimore Campus 100 Phones
Europe Campus 20 Phones
XUMUC Phones RequirementsHigh Level PSTN Diagram
Reference:
WLC and AP ordering Guide
Table 4. Ordering Information for Cisco Wireless LAN
Controllers
Product
Features
Customer Requirements
Part Number
Wireless LAN Controllers
Cisco 4400 Series Wireless LAN Controller
• Modular support of 12, 25, 50, or 100 Cisco Aironet access
points
• The Cisco 4402 with 2 Gigabit Ethernet ports supports
configurations for 12, 25, and 50 access points
• The Cisco 4404 with 4 Gigabit Ethernet ports supports
configurations for 100 access points

13. • IEEE 802.1D Spanning Tree Protocol for higher availability
• IPSec encryption
• Industrial-grade resistance to electromagnetic interferences
(EMI)
• For midsize to large deployments
• High availability
• AIR-WLC4402-12-K9
• AIR-WLC4402-25-K9
• AIR-WLC4402-50-K9
• AIR-WLC4404-100-K9
See the Cisco Wireless LAN Controllers Data Sheet for more
information.
Cisco 2100 Series Wireless LAN Controller
• Supports up to 6, 12 or 25 Cisco Aironet access points
• Eight Ethernet ports, two of which can provide power directly
to Cisco APs
• Desk mountable
• For retail, enterprise branch offices, or SMB deployments
• AIR-WLC2106-K9
• AIR-WLC2112-K9
• AIR-WLC2125-K9
See the Cisco 2106 Wireless LAN Controller Data Sheet for
more information.

14. Cisco Catalyst® 6500 Series /7600 Series Wireless Services
Module (WiSM)
• Wireless LAN Controller for Cisco Catalyst 6500 or Cisco
7600 Series Router
• Supports 300 Cisco Aironet access points
• IPSec encryption
• Industrial-grade resistance to electromagnetic interferences
(EMI)
• Intrachassis and interchassis failover
• Interoperable with Cisco Catalyst 6500 Series Firewall and
IDS services modules
• Embedded system for the Cisco Catalyst 6500 Series and
Cisco 7600 Series Router infrastructure
• For large-scale deployments
• High availability
• WS-SVC-WISM-1-K9
• WS-SVC-WISM-1-K9= (spare)
See the Cisco Catalyst Wireless Services Module Data Sheet for
more information.
Cisco Catalyst 3750G Integrated WLAN Controller
• Cisco Catalyst 3750G Series Switch with wireless LAN
controller capabilities
• Modular support of 25 or 50 Cisco Aironet access points per
switch (and up to 200 access points per stack*)
• IPSec encryption

15. • Industrial-grade resistance to electromagnetic interferences
(EMI)
• For midsize to large deployments
• High availability
• WS-C3750G-24WS-S25
• WS-C3750G-24WS-S50
See the Cisco Catalyst 3750G Integrated Wireless LAN
Controller Data Sheet for more information.
Cisco Wireless LAN Controller Module for Cisco Integrated
Services Routers
• Wireless LAN controller integrated into Cisco integrated
services routers
• Supports 6, 8, 12, or 25 Cisco Aironet access points
• Embedded system for Cisco 2800/3800 Series and Cisco 3700
Series routers
• For retail, small to medium-sized deployments or branch
offices
• NME-AIR-WLC6-K9
• NME-AIR-WLC6-K9= (spare)
• NME-AIR-WLC8-K9
• NME-AIR-WLC8-K9= (spare)
• NME-AIR-WLC12-K9
• NME-AIR-WLC12-K9= (spare)
• NME-AIR-WLC25-K9

16. • NME-AIR-WLC25-K9= (spare)
See the Cisco WLAN Controller Modules Data Sheet for more
information.
Please refer to the Cisco Wireless LAN Controller Ordering
Guide supplement to learn when to add the following SKUs to
track the deployment of voice and context-aware mobility
applications.
Table 2. Cisco Aironet Indoor Rugged, Indoor, Wireless Mesh,
and Outdoor Rugged Access Points
Product
Features
Customer Requirements
Part Number
Indoor Rugged Access Points
Cisco Aironet 1250 Series
• Industry's first business-class access point based on the IEEE
802.11n draft 2.0 standard
• Provides reliable and predictable WLAN coverage to improve
the end-user experience for both existing 802.11a/b/g clients
and new 802.11n clients
• Offers combined data rates of up to 600 Mbps to meet the
most rigorous bandwidth requirements
• Designed for both office and challenging RF environments
• Especially beneficial for environments with the following
characteristics:
• Challenging RF environments (for example, manufacturing
plants, warehouses, clinical environments)

17. • Bandwidth-intensive applications (for example, digital
imaging, file transfers, network backup)
• Real-time, latency-sensitive applications such as voice and
video
• Need to support existing 802.11a/b/g and new 802.11n
wireless clients
Access point platform with pre-installed radio modules:
• AIR-AP1252AG-x-K9: 802.11a/g/n-draft 2.0 2.4/5-GHz
Modular Autonomous Access Point; 6 RP-TNC
• AIR-AP1252G-x-K9: 802.11g/n-draft 2.0 2.4-GHz Modular
Autonomous Access Point; 3 RP-TNC
• AIR-LAP1252AG-x-K9: 802.11a/g/n-draft 2.0 2.4/5-GHz
Modular Unified Access Point; 6 RP-TNC
• AIR-LAP1252G-x-K9: 802.11g/n-draft 2.0 2.4-GHz Modular
Unified Access Point; 3 RP-TNC
See the Cisco Aironet 1250 Series Ordering Guide for more
information.
Cisco Aironet 1240AG Series
• Second-generation 802.11a/g dual-band indoor rugged access
point
• 2.4-GHz and 5-GHz antenna connectors for greater range or
coverage versatility and more flexible installation options using
the broad selection of Cisco antennas available
• Ideal for challenging indoor RF environments
• Recommended for offices and similar environments
• Ideal for deployments above suspended ceilings

18. • Recommended for outdoors when deployed in a weatherproof
NEMA-rated enclosure
• AIR-AP1242AG-x-K9: 802.11a/g Nonmodular Cisco IOS
Software- Based Access Point; RP-TNC
• AIR-LAP1242AG-x-K9: 802.11a/g Nonmodular LWAPP
Access Point; RP-TNC
See the Cisco Aironet 1240AG Series 802.11a/b/g Data Sheet
for more information.
Indoor Access Points
Cisco Aironet 1130AG Series
Low-profile, enterprise-class 802.11a/g access point with
integrated antennas for easy deployment in offices and similar
RF environments
Ideal for offices and similar environments
• AIR-AP1131AG-*X-K9
See the Cisco Aironet 1130AG Series Ordering Guide for more
information.
Wireless Mesh Access Points
Cisco Aironet 1520 Series
• Next-generation outdoor wireless mesh access point
• Integrated dual band 802.11 a/b/g radios, Ethernet, fiber and
cable modem interface
• Provides easy and flexible deployments for outdoor wireless
network
• Available in a lightweight version only
• Ideal for outdoors
• Recommended for industrial deployments and local
government, public safety, and transit agencies

19. • AIR-LAP1522AG-X*-K9:
See the Cisco Aironet 1520 Series Lightweight Outdoor Mesh
Access Point Ordering Guide for more information.
Cisco Aironet 1500 Series
• Mesh access point that enables cost-effective, scalable
deployment of secure outdoor wireless LANs for metropolitan
networks or enterprise campuses
• Available in a lightweight version only
• Ideal for outdoors
• Recommended for providing wireless services and applications
to local government, public safety, and transit agencies
• AIR-LAP1510AG-*X-K9:
• Cisco Aironet 1510AG Lightweight Outdoor Mesh Access
Point, FCC configuration
See the Cisco Aironet 1500 Series Ordering Guide for more
information.
Outdoor Rugged Access Points
Cisco Aironet 1400 Series
• High-speed, high-performance outdoor bridging solution for
line-of-sight applications
• Offers affordable alternative to leased-line services
• Available in a standalone version only
• High-speed building-to-building or campus connectivity
• Share LAN/Internet access between two or more sites
• Fast installation
• AIR-BR1410A-*X-K9: With integrated antenna

20. • AIR-BR1410A-A-K9-N: With N-Type connector for use with
external antennas
See the Cisco Aironet 1400 Series Bridge Data Sheet for more
information.
Cisco Aironet 1300 Series
Outdoor access point/bridge offers high-speed and cost-
effective wireless connectivity between multiple fixed or mobile
networks and clients
Ideal for outdoor areas, network connections within a campus
area, temporary networks for portable or military operations, or
outdoor infrastructure for mobile networks
● AIR-BR1310G-X-K9: With integrated antenna
● AIR-BR1310G-X-K9-R: With RP-TNC connector for use with
external antennas
● AIR-BR1310G-A-K9-T: For transportation applications
See the Cisco Aironet 1300 Series Ordering Guide for more
information.
*X = regulatory domain
(Source: Curtsy Cisco Web site
http://cisco.com/en/US/prod/collateral/wireless/ps5679/ps6548/
prod_brochure0900aecd80565e00_ps2706_Products_Brochure.h
tml)
WLC and AP Placement Templates
Suggested Placement Table Wireless Network
Building
Access Point
Requirements

21. Wireless LAN Controller
Requirements
Total AP
Total WLC
Building3
Lobby
2
Cafeteria
10
2
Conference room
10
22
Building 2
Cafeteria
Conference Room
15

22. 2
Suggested Product Table (WLC)
WLC
Cisco Part Number
Quantity
Cost
Cisco 2100 Series Wireless LAN Controller
AIR-WLC2106-K9
2
Suggested Product Table (AP)
AP
Cisco Part Number
Quantity
Cost
Cisco Aironet 1250 Series
AIR-AP1252AG-x-K9: 802.11a/g/n-draft 2.0 2.4/5-GHz
Modular Autonomous Access Point; 6 RP-TNC
20

23. _1421613394.bin