Network Security: Unauthorized Network and System Access

As hacking and attack in the personal network connections is increasing day by day, it is needed to adopt a technology that will protect the network and have the facilities to stay connected

Task 2 Problem is network Security .In the company network, I designed the external network and internal network security, In Internal we will use the cisco Layer 3 switch can be divided into different vlan, the departments to separate vlan. For example, accounting department vlan can only account department staff to access the accounting department server files other

Isolate the Wireless LAN on a different VLAN (most commonly used) and place a firewall between this VLAN from the corporate internal network.

To overcome the problems mentioned above we can use the concept of authentication servers. These authentication servers are used to define the VLAN membership with the help of the user id rather than the older methods where MAC addresses or IP addresses are used. This greatly enhances the integration levels with the network operating system and provides more flexibility. The most valued advantage of the authentication servers is that the VLAN which the user uses can be carried anywhere without any respect to the workstation or

Each switch will have an interface Vlan with a special IP subnet so it users won’t be able to ping the specific devices to map the network.

As switches focus is on providing LAN connectivity, the majority of threats come from inside the organisation itself. Layer 2 attacks may also include MAC flooding or ARP poisoning.

The private-public network edge is considered particularly vulnerable to intrusions, because the Internet is a publicly accessible network and falls under the management purview of multiple network operators. For these reasons, the Internet is considered an untrusted network. So are wireless LANs, which-without the proper

Security is almost certainly the most difficult aspect of a network to perfect. It is important to have the correct procedures and components in place to make certain network security is being accounted for and addressed on any given network. The journal, “Future Generation Computer Systems” elaborates on this necessity for an information system. “Future Generation Computer Systems”, this component of a network is discussed thoroughly. “Essentially securing an Information System (IS), involves identifying unique threats and challenges which need to be addressed by implementing the appropriate countermeasures” (Dimitrios Zissis, Dimitrios Lekkas, 2012). This was achieved through configuring access lists as well as CHAP configuration on the routers connecting to the edge

VLANs or Virtual Local Area Networks are logical local area networks that extend beyond the traditional LAN architecture. Because a VLAN is a logical entity, creating and configuring a VLAN is done completely in software. The advantages to using this type of LAN include but are not limited to the ability to conserve the network resources, to bridge geographical drawbacks, and to better manage the movement of personnel and equipment. To understand the need for VLANs you must first understand the Local Area Network (LAN). The definition of a LAN started as a group of computers that were connected in the same area, but today’s LAN is defined as a single broadcast domain. This is explained easily by looking at a large organization where each department would be on a separate LAN found behind a router or switch. With today’s expanding networks it has become important for these

Problem Statement: Implement device passwords on both console port and VTY. All passwords should be encrypted.

Unauthorized access to LAN, LAN server operating systems software and applications vulnerabilities, compromise of confidentiality of data transmission via VLAN connection. Improperly secured wiring closets, data centers and computer rooms, Unauthorized access to systems, applications and data

The network is currently running on Windows NT servers (University of Phoenix, 2006). An upgrade to Windows Server 2003 is suggested because it has better security built in than Windows NT servers. Using Windows Server 2003 the Internet Connection Firewall (ICF) can be enabled. The ICF, when enabled is designed to monitor the destination and source of IP addresses that come and go through the Internet. The ICF also discourages port scanning through the internet connection (Palmer, 2003).

The new WLAN network will be protected by multiple firewalls, IPS, IDS, and a file integrity system.

Network security has changed significantly over the past years. There is more and more data to monitor and analyze in order to detect the activity of your data and systems. Securing a network has many variables. Password authentication, network access, patches, anti-virus protection, intrusion detection, firewall and network monitoring tools are just a few of the things you can do to protect yourself.

I choose the devices needed for the new implementation: Cisco Catalyst 6500 router and 2800 series four switches will be utilized. Here is the cost of effective access switches that are capable of VLAN, DTP, DHCP, RSTP, PoE, and furthermore, price can range from $1,400-$3,500 dollars each. These switches offer integrated security including network control and quality service, they also offer redundancy to provide and deliver intelligent services for a networking edge. Therefore, they include flexibility in the routing series as increased port density which could induce a rapid growth in networks without any additional cost at any time. However, the more capacity a device may have the more beneficial it will be to the administrator user, when setting up any secure measures throughout the configuration process of vlans and networks. The network accessibility will be ensured throughout the provision of redundancy of routers throughout the xACME network on each site or trade school. Although, optic fiber cables will be used to connect all layer 2 and 3 switches and servers, spanning tree protocol will be set on switched to address to eliminate any bridging loops from entering into any