II

NDP

Acknowledgement
This Part of the assignment is to be done in the group. We are three in the group. The
assignment is to be completed on the given scenario. As per the scenario we are to discuss about
the network design of the Lab of the KLU. For that we have discussed about the different
network design approaches and selected one best fit for it. Furthermore, we have discussed about
the Business and technical goals. To design the network and test the securities we have discussed
about the different network design tools. We are very grateful to our lecturer Mr. Krishna Prasad
Parajuli for providing us proper guidance and lecture throughout the course syllabus so that we
are able to discuss our ideas of the different topics and reach on conclusion to complete this part
of the task.

The members of the groups are:

Ishwor Acharya

Sunlight Sharma Bastakoti

Bimarsa Pakhrin
III
NDP
4
NDP

1. Introduction
As per the scenario KLU is recognized for its commitment to achieving high standards in
scholarship, inquiry, and creating a vibrant community of learners, since it first opened in
Malaysia’s higher education sector in 1990. located on thirty acres in south Kuala Lumpur, the
institution has modern classrooms, laboratories, libraries and other facilities distributed across
nine buildings. Eight of these are earmarked for teaching purposes, with just one being set aside
as a research hub.

A performance review was recently completed by the ICT Team in the research center, which
resulted in findings of pertinent issues with the LAN. This has continued to prevent the faculty
and students from conducting their research activities. The ICT Team, in consultation with the
university senate, academic staff and students resolved to rebuild the research center’s LAN.
This will allow for the reconstruction of a dedicated LAN with high-speed that will provide both
the members of academic staff and students with an appropriate network environment.
5
NDP

2. Objective
This project is primarily aimed at enhancing the general network performance and reliability
at KLU research Centre. The significant efficiency increase of academic staff and student
research work can be reached by building a dedicated high-speed LAN within the institution. It
involves many specific goals:

 Enhance Network Performance: Amplify the speed and the reliability of the LAN of
the center for research.
 Support Research Activities: Building a secure network environment to support
academic and research activity is crucial.
 Ensure Scalability: Make a network which will be able to scale as required.
 Strengthen Security: Secure vital research data by undertaking protective measures.
 Improve User Satisfaction: Enhance the general user experience for teachers and
students.
6
NDP

3. Network Design Approach

3.1 Top-Down Approach

The top-down approach is to design the network beginning from the topmost OSI layer
and requires that you look at not just the application layer but also overall business goals,
including what technology must do in relation to them. For such specifics planning for individual
needs over a more extended period, it will be necessary to define clear goals beforehand: service
level agreement staff budget needs, otherwise long lead times would occur. This technique starts
with understanding the business and technological requirements prior to addressing the physical
design. It is a familiar suggestion in academic and research settings because it ensures that the
network architecture will always meet the user’s specific requirements and goals (McClure,
2024).

Figure 1

Top-Down Approach

3.2 Justification
 Alignment with needs: The top-down approach ensures that the network architecture is
designed according to the specific needs of the research center by first looking at its
business and technological requirements. This results in a network that can successfully
7
NDP

help in performing the special tasks and objectives of the academic environment
(McClure, 2024).
 Flexibility: Starting with general requirements enhances the ability to fine-tune the
network’s physical properties with ease at the end. As a result, comprehensive grasp on
what is needed makes lesser alterations before settling on the hardware specifics. In turn,
this minimizes chances for redo and ensures that the network design is cohesive as well
as effective (McClure, 2024).
 Efficiency: Creating a network from the top down may improve the whole process
efficacy. If the anticipated results and specifications are precise, then it will be possible to
successfully deal with physical designing and implementation stages within shorter
periods. This strategy minimizes mistakes that occur often, ensuring that particular use
cases can be supported by a planned network architecture (McClure, 2024).
 Focus on goals: In other words, the top-down strategy should be consistent with the
organization’s commercial and technological goals. This ensures that the network
architecture is not only operative, but also capable of future modifications or
improvements based on changing requirements. In doing so, the design process will be in
line with the long-term vision and strategic objectives of the research center (McClure,
2024).

3.3 Implementation Steps

 Requirement Analysis: Perform a detailed study of the business and technological
needs. This involves assessing staff and student demands, research activities, and the
research center's general aims.
 High-Level Design: Prepare a high-level network drawing demonstrating prime
constituents with the associations. This diagram should also encompass the following
aspects; network performance, reliability, security, and scalability.
 Detailed Design: When turning a high-level concept into a physical design, it entails
selecting the correct hardware and software, setting up network architecture and creating
an IP addressing system.
8
NDP

 Implementation Plan: Establish the network by creating a timeline plan in which each
individual step is described in detail. This plan should specify deadlines, resource
distribution and fallback alternatives.
 Testing and Validation: Perform extensive testing so that the network conforms to the
guidelines. This should include performance, security, and user acceptance tests.
 Deployment: To minimize disruptions, it’s best if we carry out this network design in
bits. Make sure every bit is tested satisfactorily before proceeding to another.
 Monitoring and Maintenance: In order to make sure that the network would work well
all the time, please install methods and maintain the system constant supervision. There is
regular feedback on how things are going, how well they are doing, as well as these
reports on whether there is any risk for possible attack.
9
NDP

4. Business and Technical Goals

4.1 Business Goals

Business goals are the high-level objectives required by an organization through its operations
and strategic activities; frequently consistent with the organization’s mission, vision, and overall
strategy aiming at restricting mistakes and ensuring quick and efficient operations. In terms of a
network design project, business goals refer to how the network will support and enhance the
essential operations and the long-range plans of the organization.

4.1.1 Enhance Research Capabilities:

 Objective: Build a trustworthy network for research with high-speed and intensive
operation.
 Explanation: Moving big datasets from one place to another, processing real-time data
and working together with external scholars are activities that are frequently done during
research. So, a fast and reliable web ensures that these tasks are carried out efficiently
without being interrupted thus increasing productivity and quality of research.
 Outcome: Improving productivity and research efficiency to improve the quality and
quantity of fruits that shall be given as a result.
 Ensure scalability
 Objective: Draft the network for accommodating growth in the future and evolving
technologies.
 Explanation: The network has to grow at the same rate as the institution and technology.
A network design that is scalable will allow for other devices, applications or users to be
integrated without the need to undertake massive redesigning. Such a design will protect
the investment made in developing the network infrastructure.
 Outcome: A future-proof, flexible network infrastructure with rising and changing
demands is necessary.
4.1.2 Support collaboration
Objective: Facilitate interaction between instructors and students.
Explanation: Collaboration among academic scholars is vital. Through instructors and
students having a strong network infrastructure, they can easily swap resources, get into
common databases and chat easily so forth and so on. All these facilitate a research
10
NDP

conducive environment that is collaborative hence promoting innovation as well as

teamwork resolution of issues within the organization community.
Outcome: Increased collaboration among researchers has led to research initiatives being
more innovative and thorough.

4.2 Technical Goals

Technical goals are computable objectives set for technical components of any project/effort.
They mainly focus on the function, the performance and the safety of the technological systems
and infrastructure. Technical goals for this network design project relate to the requirements and
specifications necessary for an effectively running, reliable, and secure network that meets user
needs as well as the firm’s business goals.

4.2.1 High Bandwidth and Low Latency:

 Objective: Ensure fast data transfer and minimal delay.
 Explanation: For transmitting large files and also for having real-time applications
which include: video conferencing, live data feeds and others bandwidth should be high.
Low latency ensures that these activities are carried out seamlessly on time especially in
research and communication.
 Outcome: Data transmission between different public sector institutions smoothly and
efficiently such that applications run in real time, thereby increasing the quality of service
to users.
4.2.2 Network Reliability and Redundancy
 Objective: To keep connection unbroken take steps to avoid network failure.
 Explanation: Uninterrupted data access is needed for many studies hence the essentiality
of having a resilient network. In case of hardware problems or any other issues, failover
techniques ensure continuous network availability thereby reducing downtimes.
 Explanation: Consistent network availability, reducing interruptions and maintaining
productivity.
4.2.3 Robust Security Measures:
 Objective: Employ strict security mechanisms in order to guard important research
information.
11
NDP

 Objective: Research data often contains sensitive and confidential details which need to
be protected from unauthorized persons and cyber-attacks. The use of strong security
procedures like firewalls, encryption or limitations to access ensures that it remains
confidential.
 Explanation: Upgraded data safety so as to protect important data for research from
being leaked and accessed without authorization.
12
NDP

5. Network models and tools

High importance is given by the top-down approach to first understanding and identifying
precise strategies and objectives before moving on to the technical specifics. This will ensure that
the LAN architecture of KLU’s research center aligns with the grander institutional objectives
while providing a stable frame for effective academic and research support (What is the OSI
model? | cloudflare, 2024).

5.1 Chosen Network Models

OSI model that is a conceptual framework for understanding and describing network protocol
and communication system interactions is made up of seven layers; each layer in turn handles a
different function during data transfer. (Debby, 2024)

 Physical Layer: Within the KLU research center LAN, the physical layer contains cables
(potentially fiber-optic for high speed), connections, switches, and routers. The physical
layer ensures that raw data bits are transmitted reliably over the network.
 Data Link Layer: This layer ensures error detection and correction plus ensures data
integrity between directly connected nodes. It also efficiently controls local traffic in each
research center building at KLU.
 Network Layer: It is responsible for determining which route packets will follow over a
LAN and configuring IP addresses. The functions of this stratum revolve around the
support of Internet Protocol (IP) as well as routing protocols like Open Shortest Path First
(OSPF) and Enhanced Interior Gateway Routing Protocol (EIGRP).
 Transport Layer: The transport layer allows for consistent communication across a
network from one end to another. TCP (Transmission Control Protocol) is a protocol that
chunks and sequences the data packets in order for them to reach the destination intact
and in proper order this layer plays a critical role for applications in KLU’s research
center which require consistent data transport like collaborative research platforms and
data-intensive simulations.
 Session Layer: The session layer establishes, manages, and terminates communication
sessions between applications on different devices. This layer supports the development
of applications used in research activities.
13
NDP

 Presentation Layer: The presentation layer takes care of encryption and decryption, as
well as data representation. It is designed to ensure that program shared data are properly
formatted and secure. This layer is very important at KLU as it needs to be protected
from the outside using various encryption algorithms, for example TLS.
 Application Layer: The application layer provides network services directly to end users
and applications. These protocols include HTTP, FTP and SMTP (Simple Mail Transfer
Protocol). KLU’s application layer supports research-related applications and services
such as online library access, research databases, and collaboration tools.

Figure 2

OSI Model
14
NDP

5.2 Integration of OSI Model

Physical and Data Link Layers: Establishing good data transfer with fiber optic cables and
Ethernet switches at the physical layer is dependable. Ethernet switches at the data-link layer
manage local traffic effectively (Debby, 2024).

Network and Transport Layers: Ensure effective data transport by arranging IP addresses and
routing protocols. The presence of TCP protocol ensures that communication in devices is
reliable (Debby, 2024).

Session, Presentation, and Application Layers: Through secure communication sessions at the
session layer, via encryption at the presentation layer, access to research applications safely and
smoothly is ensured at the application layer (Debby, 2024).

To provide its research Centre an organized, efficient, and secure LAN infrastructure, KLU
merges the OSI model’s layered approach with the Hierarchical Network Design Model. In
addition to setting up a stable environment for research, this holistic approach shows that KLU
remains committed to academic excellence, thus providing a solid platform for both academics
and students to conduct their research.

6. Network Tools
To design a highly reliable and fast local area network (LAN) for the research center of KLU,
many network technologies must be used. There are various tools, which can help design,
simulate, monitor and diagnose any network in order to be certain whether it meets all business
or technical needs. The selected network tools are as follows, with their justification:

a. Cisco packet tracer

A powerful network simulation tool called Cisco Packet Tracer helps users to create
virtual networks, set up devices and observe network interactions under conditions which
they can manage (Cisco packet tracer - networking simulation tool 2024).

Reason behind using Cisco Packet Tracer

 Simulation and Testing: Cisco Packet Tracer enables the simulation of complex
network architectures before they are implemented. Just as important, it helps point out
15
NDP

and solve virtual environment possible pitfalls hence lessening post-deployment issues
creation.
 Educational value: Cisco Packet Tracer, a tool that is commonly used in networking
courses as an instructional device, is meant to be used in academic setups. It promotes
education and exploration which makes it great for students as well as teachers.
 Visualization: The structure of the network, the connections between devices, the flow
of data are well understood because of the visual representation provided by this
application. This is imperative for the effectiveness of any network (Cisco packet tracer -
networking simulation tool 2024).
b. GNS3 (Graphical Network Simulator-3)
GNS3 is an advanced network emulator that allows the creation of complex network
topologies using real network devices and software images (GNS3, 2023).

Reason behind using GNS3

 Advance simulation: GNS3 allows for intricate networks simulations that are based on
actual device images and configurations and provide actual devices’ illustrations thereby
providing a more life-like glimpse of how it would operate in real time situation.
 Flexibility: In a variety of complex network scenarios, this tool can impersonate several
network devices and protocols since it is highly flexible.
 Realistic testing: GNS3 simulates how network setups would actually be tested and
troubleshooted using actual device images to ensure that it is as expected when
deployed.
c. SolarWinds Network Performance Monitor
The SolarWinds Network Performance Monitor is a network monitoring tool that gives
real-time glimpses into network performance, revealing to us what problems exist on our
networks once there are some and how they can be fixed so as to enhance the operation
of our networks (Observability and IT management platform, 2024).

Reason behind using SolarWinds Network Performance Monitor

16
NDP

 Performance Monitoring: SolarWinds offers an excess of performance indicators

including bandwidth utilization, latency and device status in ensuring the best operation
of the network so that response is made promptly in case of any performance issues.
 Proactive Management: Making proactive management possible, this program provides
alarms and data on network health hence ensures that before they begin to degrade
network performance any potential problems are identified and handled.
 Comprehensive Insights: A comprehensive monitoring company like Solar Winds
offers a complete understanding of what happens within networks which makes it easy
for someone who has a problem at hand & also helps them foresee how things might turn
out if they went on as planned.
d. Wireshark
Wireshark, the network protocol analyzer integrated with capability of data packer
collection and real time presentation, gives information on network traffic and protocol
interactions (Wireshark 2024).

Reason behind using Wireshark

 Protocol Analysis: By performing an in-depth examination of the protocols within a

network, Wireshark helps developers get to understand its behavior and locate flaws at
packet levels which are essential in tackling and enhancing network capacities.
 Security Audits: Possibilities for making use of the programme include carrying out
security audits, discovering vulnerabilities and checking whether network protocols are
functioning correctly.
e. Additional tools
 Network Configuration Management (NCM): SolarWinds NCM is a tool that
helps with network setup automation and administration tasks by keeping them
uniform and reducing chances of configuration errors.
 Bandwidth Management Tools: Assuring the proficient use of network
resources, NetFlow Analyzer is an application meant to give support in observing
bandwidth and managing it.
 Network Security Tools: Snort is an open-source intrusion detection system that
detects and blocks potential attacks in real time for enhanced net surfing security.
17
NDP
18
NDP

7. Implementation Plan
1. Planning
 Perform detailed planning which includes conducting site surveys and
requirements analysis.
 Make sure you include schedules and milestones in your comprehensive project
plan.
2. Procurement
 Ensure that you have the necessary hardware and software components to ensure
both compatibility and future scalability.
3. Installation
 First, install the core network components, then the distribution and access layer
devices.
4. Configuration
 Set up network equipment such as switches, routers, firewalls, and access points
according to established design criteria
 Implement the IP addressing scheme and security measures.
5. Testing
 Carry out exhaustive tests at every stage of deployment to ensure that network
components act as they are supposed to.
 Test connectivity, performance, and security features.
6. Optimization
 Fine tuning parameters, and fixing detected network faults will improve
performance.
 Ensure that the load balancing and redundancy measures are working.
7. Documentation
 Be sure to document the whole process of deployment, including settings,
networking diagrams, etc., for future referencing as well as maintenance.
19
NDP

8. Security plan
To protect KLU's research center network, a thorough security strategy will be established,
with numerous levels of security.

1. Firewalls:
 Function: Protect the network perimeter and internal segments by controlling
incoming and outgoing traffic based on security policies.
 Plan: Deploy enterprise-grade firewalls at the core and distribution layers.
2. Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS):
 Function: Monitor network traffic for suspicious activity and potential threats,
providing real-time alerts and automated responses.
 Plan: Implement IDS/IPS at strategic points within the network.
3. Encryption:
 Function: Secure data transmissions to protect sensitive research data.
 Plan: Use SSL/TLS for secure web communications and VPNs for remote access.
4. Access Controls:
 Function: Ensure that only authorized users can access network resources.
 Plan:
i. Implement role-based access control (RBAC) to restrict access based on
user roles.
ii. Deploy multi-factor authentication (MFA) for critical systems.
5. Regular Security Audits:
 Function: Identify and address vulnerabilities through regular security
assessments.
 Plan: Conduct periodic security audits and vulnerability assessments.
20
NDP

9. Testing and Validation Plan

1. Performance testing:
 Ensure that the network satisfies performance standards by measuring how fast it
is, how quickly messages travel through it, and how much data it can upload and
download.
 Tools: Use the services of SolarWinds Network Performance Monitor and similar
programs that test performance.
2. Security Testing:
 Assess vulnerabilities and test your systems for weaknesses to uncover potential
security gaps.
 Tools: Use Wireshark, Snort, and other security tools.
3. Reliability Testing:
 Try out different procedures for maintaining network redundancy and failover
schemes that would guarantee the provision of services in the event hardware fails
or disturbances occur.
 Tasks: Attempts to experience a malfunction and consequently checks if failover
procedures are automated to perform as they should.
4. User Acceptance Testing (UAT):
 In order to ensure that the requirements and expectations laid down are satisfied
by the network, engage both educators and learners in its testing.
 Get the remarks and alter them according to the comments of Get the remarks and
alter them according to the comments of the audience.
21
NDP

10. Conclusion
Taking a top-down approach and using OSI and Hierarchical network design models, the
network design for KLU’s research Centre will cater for the particular business and technical
goals necessary for boosting research capabilities, fostering collaboration, guaranteeing
scalability as well as enhancing security. They allow more effective network design, modelling,
and administration using advanced stuff like Cisco Packet Tracer, SolarWinds, Wireshark and
GNS3. The university's academic and research initiatives will have a strong, efficient, and secure
network environment, with extensive implementation, testing plans, and seamless deployment
planned for optimal performance.
22
NDP

References
Cisco packet tracer - networking simulation tool. Networking Academy. (2024, June 5).
[Link]

Debby. (2024). The Open Systems Integration (OSI) reference model. Networking for Beginners
with Debby. [Link]
integration-osi-reference-model

GNS3 network simulator. NS3 Simulator. (2023, January 13). [Link]

network-simulator/

McClure, M. (2024). Top-down vs. bottom-up network design. CBT Nuggets.

[Link]
network-design

Observability and IT management platform. SolarWinds. (2023). [Link]

What is the OSI model? | cloudflare. What is the OSI Model? (2024).
[Link]
osi/

Wireshark. Chapter 1. introduction. (2024).

[Link]