Setting up a computer network for small enterprises

Setting up a computer network for small enterprises can be one way of increasing competitive advantage [1]. The network can be used to help manage various business operations in ways that may be used to increase the overall business efficiency. A business with a well-established network environment has improved capabilities in areas such as data transfer, communication and storage among others. To build and design a functional SME network, many factors must be taken care of. Factors such as topology and host placement must often be considered. Other considerations may include the selection of software and hardware technologies as well as the thoughtful configuration of the related components [2]. To understand the study topic in a better manner, the essay attempts to design and develop a VPN network for an SME.  Some of the factors to be considered here include: Logical design, Physical design, Network topologies, IP addressing, Security features and policies, Redundancy and failover plans, as well as the VPN service implementation

Scopes and limitations

The Virtual Private Network is intended to help provide a secure connection for SMEs. The VPN is also intended to promote a cost-effective way of communicating. This is especially due to the reason that the network does not necessarily require the leased lines and that the costs associated with support are offloaded [3]. The network, in addition, is intended to promote significant instances of scalability especially in the event that an SME seeks exponential growth or rather transformation from its current state.  Note that while VPN networks have significant popularity and performances, they sometimes harbor numerous limitations. One of the shortcomings of this network is that for starters, there is need to accustom oneself with significant network security details [4]. This also includes configuration and installation information.

Requirements

Most of the VPN requirement here will include Network parts and VPN service parts. Some of the concise requirements here include:

• VPN Client

A VPN client includes a computer or even a router and the type of VPN client intended to be used significantly depends on the business needs [5]. Conventionally, any operating system can be configured to function as a VPN provided it supports the L2TP, PPTP or the IPSec protocol.

• VPN server

The VPN server will function as an instance for the connection of the VPN clients. Here, it will be appropriate to use Windows NT Server 4.0, Windows 2000 Server or even the Windows Server 2003 to function as a VPN Server

• Firewall

Firewall is also another requirement. Firewalls will be used to prevent the connection from outside networks. The firewall will also be used to block some of the unused ports in the organization [5].

Other requirements include tunneling protocols and authentication protocols.

Solution Design

1. Logical design

The logical design of the VPN to some degree will be bound by the physical topology but will make significant use of VLANS as well VPNS. The diagram below demonstrates the  connection to the internet alongside a firewall, router as well as extranet servers

Figure 1. Illustration: Logical network design

1. Physical design

The physical design in this case will make use of the bust topology. The design functions quite the same way as the ring topology. The main difference however, is that, in bus topology data moves up and down in the connection so that it copies itself along its path. The physical design works perfectly well in smaller networks [6]. The physical design is also quite scalable and, therefore, quite important when an SME is intending to expand.

Figure 2. Illustration: physical network design

1. c) Network topologies

The network topologies in this case will take the form of the Hub-and spoke VPN topology. This topology works perfectly well within an intranet with main and branch offices. This topology can be used to provide employees with full access to the firm’s network. In this type of topology, spokes (multiple remote devices) communicates with the help of a central hub [7].

Figure 3: illustration; network topologies

1. IP Addressing

To set-up IP address pools to be used in Remote access tunnels, it will be important to make use of the ip local pool which is found in the global configuration mode

1. Security features and policies

The VPN, in this case, will make use of data encryption as the security feature. This includes the tunnelling approaches which works by encapsulating encrypted data across communication channel

1. Redundancy and failover plans

Here, redundancy and failover will rely on the RAID approach. One of the benefits of this approach is that disk mirror one another so that in the event of a failover, one disk is available to write and read data. Another thing about the approach is that it incorporates quite a significant instance of speed. This is due to the reason that the system can read from any data location.

1. VPN service implementation

• Ensure proper subnet and IP address assignment
• Ensure a proper configuration of any third-party firewalls
• Set-up IP address, router and dynamic DNS

 Reference List

[2]R. Mijumbi, S. Joan, G. Juan-Luis, B. Niels, T. Filip De, and B. Raouf, “Network function virtualization: State-of-the-art and research challenges.” IEEE Communications Surveys & Tutorials 18, no. 1, 236-262. 2016.

[3]N. Sultan, “Making use of cloud computing for healthcare provision: Opportunities and challenges”. International Journal of Information Management, 34(2), pp.177-184. 2014

[4]E. Kuada, “Security and Trust in Cloud Computing.” Security Solutions for Hyperconnectivity and the Internet of Things: 184. 2016.

[5]D. Nobori, and Shinjo. Yi, “VPN Gate: A Volunteer-Organized Public VPN Relay System with Blocking Resistance for Bypassing Government Censorship Firewalls.” In NSDI, pp. 229-241. 2014.

[6] J. Fork, Michael, T. Christopher, Gloe, and G. Kevin, Paterson. “Securing applications on public facing systems.” U.S. Patent 9,749,291, issue

[7] A. Kumar, J. Harris, and A. Soni, Citrix Systems, Inc., Methods and systems for routing packets in a VPN-client-to-VPN-client connection via an SSL/VPN network appliance. U.S. Patent 9,246,878. 2016