Unit Securing Networks Unit code CSC72005 Assignment 1 Practical network security setup Mode Individual assignment Due Date 06 April XXXXXXXXXX:00 PM Learning Outcomes LO2 Graduate Attributes GA2, GA4...

Unit Securing Networks Unit code CSC72005 Assignment 1 Practical network security setup Mode Individual assignment Due Date 06 April 2020 10:00 PM Learning Outcomes LO2 Graduate Attributes GA2, GA4 Weight 30% of overall unit assessment Suggestion This assignment is developmental and cumulative. You are strongly advised to start doing this assignment from Week-1 in your study. Leaving your starting date to the week before the due date is a very poor strategy for success in the unit. Follow the provided guidelines to help you successfully direct your efforts. Task Description In this assignment, you will perform necessary setup to install, configure and troubleshoot an SME network. You must successfully implement the network on eNSP (or similar) network simulation software and perform important steps to manage the network security configuration. In particular, you will complete the following tasks:  Task 1: Install and connect the devices into a network as shown in the diagram.  Task 2: Set up and test the security  Task 3: Network testing and troubleshooting  Task 4: Network documentation Page 1 of 9 CSC72005 – Securing Networks Assignment 1, 2020 _______________________________________________________________________________________________ Scenario You are a junior network administrator and because of your ongoing experience your manager has assigned you a new client to assist them setup their new network. The design and requirements have been provided to you in a simple diagram and instruction set. You have been advised of the following criteria: 1. Routers and default gateways are always set to the first IP address in the range. 2. Switches will always get the second IP address in the range. 3. End devices (servers and workstations etc.) will get an IP address starting at 20 for the host address. 4. Servers will have their MAC address stored on the switch. The following networks will be set up:  DMZ – Used for placing internet facing devices to be able to be reached from the internet as well as the internal corporate network (CorpNet).  Server Network (ServerNet) – used for storing the internal company data that only the internal corporate users are able to access.  Corporate Network (CorpNet) – used by the normal users of the company in the head office that are able to access the internet, the internal servers network and the DMZ. There are multiple departments in the head office and each should not be able to communicate with computers in other departments.  Remote Network (RemoteNet) – is for a remote office that are able to access the DMZ, the Server Net and the internet. Your task is to configure the network in simulation software so that it can be tested before it is implemented. You must devise any security options you deem appropriate to meet the requirements and configure and document them so they can be used when the network is implemented. Page 2 of 9 CSC72005 – Securing Networks Assignment 1, 2020 _______________________________________________________________________________________________ Page 3 of 9 CSC72005 – Securing Networks Assignment 1, 2020 _______________________________________________________________________________________________ Assignment 1 marking guidelines The following are the major assessment criteria of this assignment. Task 1: Network environment setup  Set up the routers, switches and PC’s with the appropriate connections  Perform basic configuration of the devices  Test connectivity Task 2: Security setup and performance  Add the required security including any of the following: o Switch port security o VLAN’s o ACL’s (most likely basic ACL’s) o static or dynamic routing Task 3: Network testing and troubleshooting  Correctly propose the hypothesis to be tested at each step e.g. connectivity between devices, security is working to stop X from occuring.  Correctly identify the type of information that should be collected at each step  Test the configuration