This document summarizes a network design project using Cisco Packet Tracer that incorporates security measures across different layers of the OSI model. The network contains three departments - corporate, finance, and sales. The corporate router uses EIGRP routing, has interfaces for each department and public use, and implements firewall protection through extended access lists. Switches have unused ports shut down, connected ports use port security, and are configured with security logins. The network design applies security at different OSI layers, from shutting down unused ports and router authentication to filtering services with firewalls.

1. Shareeka Corporation
Rami Bahram
Introduction
For this projectI used Cisco Packet Tracer Simulator with my combined
knowledgeof Cisco technologies I had acquired preparing for the CCNA, and
integrated them into designing an overall secured network.
Three Different Departments:
1. Corporate
2. Finance
3. Sales
Corporate Router Features:
1. Legal Unauthorized Warning Message
2. EIGRP Hybrid Routing Protocol
3. Interfaces: Three LANs with One Serial port
 LAN One: For Servers
 LAN Two: For Departments
-with Sub-Interfaces Dot1q Encapsulation for Inter-VLAN Routing
 LAN Three: For Public Use
4. Created Encrypted Logons for Aux, Vty, Console, and Privilege.
5. PPP Encapsulation with CHAP and PAP Fallback
6. Relayed DHCP- Services to Public LAN
7. Firewall Protection:
-Extended Access-List 110

2.  CorporateDep- full access to all 3 Servers.
 Finance Dep- access full access to Department Server.
 Sales Dep- FTP, TFTP, HTTP services via Department Server
 Deny all other access to Corporateand Department Servers
 Access Group was placed on Server LAN and out in order to permit and
deny local and outside traffic
-Extended Access-List 112:
 Permit DNC, DHCP, HTTPS traffic from Public LAN to Public Server
 Filters FTP, TFTP, Telnet, SSH, HTTP, Ping, and all other unspecified
services from going out of interface
 Access Group placed on Public LAN and in to filter traffic going in and
not interrupt department traffic.
Switches:
1. All unconnected ports on Server and Department Switches have been
administratively shutdown.
2. Connected Access Ports configured with PortSecurity.
3. All three switches have Legal Unauthorized Warning Message
4. All Switches are configured with Encrypted Logons for Aux, Vty, Console, and
Privilege.
5. Switches can be remotely accessed
6. Departments set on different VLANs
7. Department Switch Trunk Portspecified to allow VLAN ALL

3. Conclusion
Overall, using Cisco’s IOS Technologies I was able to take a typical network
design and incorporate multiple network services as well as security methods. The
overview for formulating security measures was by viewing the OSI Model
approach. Forexample, Layer One security was applied by shutting down all non-
used ports the switches and routers. All connected switch ports were set with port
security measures. Next for Layer Two, Router’s Serial ports encapsulations were
changed to PPP with CHAP PAP authentication. While the routers sub-interfaces
were given DOT1Q encapsulation for Inter-Vlan routing. Switch access and trunk
ports were given dot1q encapsulation for implementing Vlans. The Network and
TransportLayers were secured by the implementation of Cisco’s Extended Access-
Lists by the filtering of firewalls, portnumbers. Layer Five of the OSI model was
applied by the configuring of remote access of switches and routers. Layer Six, all
known passwordsonall devices were encrypted. Layer Seven, non-used
services/applications were closed on servers and protected by the use of firewalls.
Other technologies and IP services were configured in conjunction with these
security measures in order to ensure company protection of devices and data.