In order to improve security, a new DCS and camera LAN will be installed alongside the existing eCorp LAN. The new networks will be accessible to eCorp users via a remote desktop gateway. Various devices on the new DCS and camera networks will use DHCP addressing in VLANs separate from the existing eCorp VLANs. This will eliminate unauthorized "rogue" 192.x.x.x devices while allowing remote access and monitoring from the eCorp network.

1. VLAN x1
VLAN x2
VLAN x1
VLAN x2
Plan for
Confidential Site
Scope – Synopsis:
In order to eliminate
“Rogue” 192.x.x.x
network, install new
DCS & Camera LAN
alongside existing
eCorp LAN & make
accessible to eCorp
via a Remote Desktop
Gateway.
CameraDVR2
10.xx.xxx.xxx
Bldg 3
“New”
[xxxxx1]
DHCP
“New”
[xxxxx2]
DHCP
Dell Switch
192.x.x.x
Linksys unmanaged
Switch 192.x.x.x
Bldg 1
xxxxxxx
10.x.x.xx
xxxxx1
10.1.2.21
VLAN x1
VLAN x2
CameraDVR1
10.x.x.xx
xxxxxxx
10.x.x.xx
Bldg 2
CameraDVR1
10.xx.xxx.xxx
xxxxxxx
10.1.2.22
VLAN x1
VLAN x2
“Rogue”
Time Warner
Internet
Remote
Desktop
Gateway
xxxxxxx
DCS
Firewall
Dell Switch
192.x.x.x
VLAN x1VLAN x1
eCORP
10.xx.xxx.x/xx
Symantec Endpoint
Protection Manager
WSUS Replica
Reporting Node
RD Terminal
Server
Machine Network
Domain Controller
DMZ
VLAN x2 vlan xx tbd-?
vlan 71 tbd-?
vlan 71 tbd-?
Cisco 3650
xxxxxxx
10.xx.xxx.xx
LH-30
xxxxxx
10.40.208.6
CATBRIDGE
xxxxxx
10.40.208.7
LH-48
xxxxx
10.xx.xxx.x
DEACRO
deacro
10.40.208.8
Cisco 3650
xxxxxxx3
10.xx.xxx.xx
Cisco 3650
xxxxxxx
10.xx.xxx.xx
VLAN x1
xxxxxxx
10.x.x.xx
VLAN x1
“New” DCS Members
to be added xx-xx-xxxx
“Rogue” devices to be
eliminated
eCORP LAN