COURSE PROJECTS

1. Campus network design

Project Scope
Design a computer network for a college. There are 50 users in the college. 20 users in the
main building, 20 users in the annex campus tech park bldg , and 10 users in annex campus
hospital block. Every building has a lobby which is 200 sqft open space, where wireless
access to the network is required. Only authorized personal should have access to the wireless
network.
The distance between annex campus hospital block and the main building is 300 mtrs. The
distance between annex campus tech park and the main building is 90 mtrs. The distance
between annex campus hospital block and tech park is 70 mtrs. A high speed cable internet
connection is available in the main building which needs to be shared among the users.
The necessary equipments and appropriate topology required for the campus network design
along with the IP address schema, IP address management, secure wireless access, internet
sharing, features and services should be worked out. A bill of material should be included
with products from Microsoft, Cisco, D-LINK or Netgear with appropriate quantity which
can be used for setting up of the campus infrastructure.
Report Contents
1. Project scope
2. Campus diagram
3. Network requirement analysis (Understanding the hardware and quantity required to setup
the network)
4. Network diagram with appropriate components (Includes the make and model number of
required hardware)
5. Network and system integration methodology
6. IP network design guidelines (Guidelines for IP address management and usage on the
network)
7. Features and Services ( The services and features required to be setup and configured on
the identified hardware for the solution to work)
8. Bill of material (Includes equipment, model and quantity)

2. Design a pre-sales proposal for network setup in a university

Abstract A pre-sales design proposal for network setup in a university

The university has the following 7 departments.
1. IT
2. Finance
3. HR
4. Management
5. Faculty
6. Students
7. R&D
The university has an ADSL internet connection which would be used by the departments
except for the R&D department which should not have access to the same. All the
departments should be able to communicate with each other. Each department contains
25-50 users.
Networking Requirement
1. The active network components which are required ( Routers , Switches ).
2. The number of switches , routers which are required for the design.
3. The IP Design schema for the department.
4. Explanation of the details required to be configured on the Switch and how to
create different departments with VLAN.
5. Explanation of how to restrict internet connection for R&D Department and allow
access for the other departments with Access control lists on the Router.
6. Identify the feature on the router which is required for sharing the Internet for the
users.
7. Identify the TCP/IP adapter parameters ( IP address, Subnet mask, Default
Gateway, DNS Server IP address) for the users.
8. Network Design Diagram.
Report Contents
Introduction
Project Scope
Network Design Strategy
VLAN and IP Network Design
Requirement analysis of routers and switches
Proposed routers and switches
University Network Layout
Switch configuration guidelines
VLAN configuration guidelines
Router configuration guidelines
TCP/IP adapter configuration on Users computers
Additional References

3. Hospital Network Design

Project Scope
A network proposal has to be designed for a hospital which has the following. There is a
main block and three wards in the campus. The main block is the administrative block where
registration of new patients takes place. The main block has 3 floors. The hospital has
identified hospital management software, which should be accessible by the employees. The
software is installed on a server at the administrative block. At the ground floor, there are 10
computers at the billing section. At other floors, there is one computer user each. The farthest
distance between the computer on the top most floor and the ground floor is less than 70
meters. The wards have 3 floors each, with 5 computers in the gound floor of each ward. The
distance between the wards and the blocks are less than 80 Meters. The computers in the
wards may be increased based on future expansion plans.
Network requirements
1. Hardware requirement analysis in main block with quantity.
2. Hardware requirements analysis in wards.
3. The employees should receive dynamic IP addressing from a central server.
4. Network should be loop free at Layer 2
5. Every computer should be able to access the hotel management software from each of the
location using a fixed IP address.
6. IP Network design table.
7. Identify configurations on the hardware wherever appropriate.
8. Network topology diagram with necessary equipment’s
Report Contents
1. Project Scope
2. Network requirements
3. Network requirement analysis (Main and wards)
4. Hardware analysis
5. Configuration guidelines
6. IP Network design table.
7. Network topology diagram
8. Network Testing and verification.
9. Hardware list with quantity

4. Small Business Network Design with Secure E-commerce server

Project Title – Small Business Network Design with Secure E-commerce server
Project Scope
A network has to be designed for a small business organization which has 100 users. The
organization hosts an e-commerce application on a server which is accessible to internet users
using https and with a public IP address.
Requirements
1.Identify the appropriate hardware which would be used
2.Users on the internet should be able to access only https on the e-commerce server.
3.Users on the internet should have access only to the public IP address of the server and not
the private IP address.
4.The users in the organization should have full access to the server.
5.TCP/IP Network design with IP addressing
6.Features and configuration required on the hardware with explanation
Report Contents
1. Project Scope
2. Requirements
3. Requirement Analysis
4. Network Diagram
5. TCP/IP Table
6. Router configuration (IP address, NAT, ACL)
7. Solution Explanation
8. Hardware list

5. Network design proposal for Bank

Abstract
A network proposal has to be developed for a bank. The bank has a main office , which is
located in Chennai, and has 5 branch offices located at Coimbatore, Madurai, Trichy, Salem
and Thirunelveli. The bank has an application server, which is used by it’s customers across
the world for online transactions. All the branches have high speed internet connection. There
are approximately 50 users in each of the branch offices and 100 users in the main office.
Network requirements.
1.Identify the hardware components required to setup the network for the Bank
2.High availability should be available to the application server, which is accessible using
https protocol.
3.The application server should be setup in a secure manner with network and host level
protection.
4.All traffic into the application server should be scanned for security attacks.
5.IP network design for the branch and main offices.
6.IP addressing range for users and hardware components.
7.The users at different locations should be able to access each other, including the
application server.
8.Identify the features and methodology which would be followed to achieve the solution.
9.Network Topology diagram.
Report Contents
Abstract
Network requirements
Network requirement analysis
Hardware and software requirement analysis
Additional requirements
Features and Services (VLAN, ACL, Static NAT, Failover cluster)
Network Topology Diagram
Network Topology Diagram Explanation
IP Network design
IP address design
Network Design and configuration strategy
Hardware inventory list

6.Small Business Network Design with Guest Network

Project Scope
A small business network has to be designed for an organization. The organization has
occasional guest users (Max 10) visiting the office. There are a total of 70 users in the
organization. A FTP server is also available for sharing files.
Network requirement.
1.Separate subnet for guest and LAN network.
2.The guest network should be restricted to access only FTP service on the FTP server and all
other access to the LAN network should be blocked.
3.IP Network Design
4.Identify the hardware – Switches and Routers.
5.Configuration details on hardware
Report Contents
1. Project Title
2. Project Scope
3. Network requirement
4. Network planning
5. IP Network design table
6. Network Topology diagram with IP addresses
7. Network Integration plan
8. Network configuration (Router interface and ACL configuration with explanation)
9. Network Testing and verification procedure
10. Hardware and Software

7. Design Proposal of hotspot set up for Coffee Shop

Abstract
A coffee shop needs to setup with a hotspot, where users can access ADSL internet through
wireless network with a prepaid card.
Network requirements
1.Users should be able to access internet through prepaid card, which can be purchased from
the coffee shop.
2.The employees should be able to access the internet without passwords.
3.A hotspot management system, internet sharing mechanism, access point integration, IP
address management and seamless access to internet for employees needs to be identified.
4.A network topology listing all the components should be included.
5.Networking Components and features with explanation on integration plan.
6.Hardware inventory list.
Report Contents
1. Title
2. Abstract
3. Network requirements
4. Network requirement analysis
5. Features and Services
6. IP Network Design with table for users and components
7. Network configuration tips
8. Network Topology Diagram
9. Network Solution Explanation
10. Hardware inventory

8.Network design proposal for a LAN

Project requirement
A proposal has to be developed for a LAN of an organization. The LAN network has 70
users. There is an ADSL Internet access for all users. The users should belong to one single
domain.
Dynamic IP addresses for all the users should be available. A server should be available for
sharing and storing files along with necessary antivirus solutions
Report Contents –
1. Requirement
2. Network diagram
3. Network Integration plan
4. IP address schema
5. Services and features
6. Software and Hardware

9.Network Design proposal for Internet Cafe

Project Scope
The project is to prepare a network design proposal for an Internet cafe. The following are the
requirements. The cafe is to support 30 users and requires a web filtering device or software
to filter websites based on content.
The users need to share one ADSL internet connection. The cafe has to be managed with a
billing software.
Report Contents
Network Design Requirement
Design Requirement Analysis
Network Diagram
IP address Design
Hardware and Software products.

10.LAN Network design with redundancy

Project Scope
A network which has redundancy in the design to to be setup for an organization. The
organization is currently having an internet connection, which is setup using a Cisco router.
The gateway addresses for users in the LAN is currently provided as an intermediate routers
address, which would then forward all internet bound packets to the internet router. The
network has to be upgraded by having dual intermediate routers which would automatically
failover, and provide high availability access to the internet. HSRP is to be used for the
deployment. The project identifies the configurations required on Cisco routers to achieve the
same.
Networking requirements
1.LAN IP network design.
2.Network Topology diagram.
3.Configurations required on the routers to setup high availability with HSRP.
4.Configurations required on the routers to setup appropriate IP address and internet packet
forwarding on the routers.
5.Configurations required on the LAN PC’s for appropriate gateway parameters.
6.Verification and Testing Procedure
Hardware
1.Cisco routers ( 2 nos)
2.Cisco switches ( 2 nos)
3.Internet router (Internet not mandatory)
4.PC (As per requirement)
5.Network cables.

11.Network design proposal for airport

Project Description
The project is to design a proposal for setting up a network in an airport. The airport has three
departments.
1. Airport authority
2. Flight service providers
3. Guests.
The airport authority maintains a server which handles the flight management controls. The
flight service providers should have access only to the specific server in the airport authority
network and not to any other systems. The guest users should have wireless access to a high
speed internet connection, which should be shared among all the users in all the departments.
The wireless access should be using a common password. The guest users should not have
access to the other two departments. The users should obtain IP addresses automatically. The
airport authority has 20 users, the flight service providers have 40 users and the maximum
numbers of guests are estimated to be 100.
Networking Requirement.
1.The active networking components (Routers, switches, wireless access points etc) with
quantity.
2.The IP network design for each department.
3.Creating and mapping IP networks with vlans.
4.Analysis, identification and explanation of methodologies to use for access restriction and
internet sharing.
5.Dynamic IP addressing design for all the networks.
6.Identify the configuration and features, wherever appropriate, which is required on the
active components to setup the network.
7.Network topology diagram.
Report Contents
1. Introduction
2. Networking Requirement
3. Network Design strategy
4. VLAN and IP Network Design
5. Requirement analysis of active networking components (Routers, switches, access points,
DHCP Server)
6. Network implementation plan
7. Network Topology Diagram
8. Network Configuration and guidelines
a. Switch configuration (VLAN, Trunking)
b. Router configuration (VLAN sub interface, Access lists)
c. DHCP configuration (Scope creation with screen shot)
d. Access point, server configuration guidelines.
9. Hardware inventory list.

12. Network Design proposal for 3 star hotel

Abstract A network design proposal for a 3 star hotel with the following infrastructure and
networking requirements.
Hotel Infrastructure
The hotel has 15 floors with 10 rooms in each floor
The hotel has a lobby area.
The hotel has a swimming pool area.
ADSL Internet is available for the hotel.
Networking Requirement
All the rooms should have computers installed.
The computers in all the rooms should have internet connection.
The swimming pool area and lobby should have wireless internet access.
The guests in the rooms should have free internet access.
The computers should have appropriate security software installed.
The hotel management staff and the guests should be on different networks.
There are 15 users in the hotel management who require computers.
A hotel management server needs to be set up for the hotel management staff which should
not be accessible by the guests.
The wireless access in the lobby and swimming pool area should be secure.
Report Contents
Hotel Infrastructure
Networking Requirement
Requirement Analysis
Network Design Strategy
Network Diagram
Network Diagram Explained
Recommended products
How to Setup the Network
References

13. Network design proposal for small office

Project Scope.
A network proposal has to be designed for a small office. The office has 5 users with an
ADSL internet connection and a parallel port printer.
Project Requirements
1.All users should be able to access the internet through the ADSL internet connection.
2.All users should be able to print via the network.
3.All users should have secure wireless access to the network, with the flexibility to connect
via LAN.
4.A file server for sharing files on the network.
5.Hosted Email servers for email access.
6.Administrator should be able to remotely view and control the file server from any location
on the internet.
Report Contents
1.Project Scope
2.Project Requirements
3.Hardware requirement analysis
4.Network Topology Diagram
5.Network Integration analysis (details of the services, features and technologies which are
required for network integration. ).
6.IP Network Design
7.TCP/IP configuration for the clients
8.Requirement analysis and solution explanation
9. Services and Features
10.Software and Hardware

14. Home wireless network design

Project Scope
A wireless network has to be designed at home with remote access from the office. There are
3 users at home. Two users have a desktop and the third user has a laptop. A high speed cable
internet connection is available at home. A serial port printer is available for printing.
Network Requirement
1.All the users should share the internet connection.
2.The laptop should have secure wireless access to the internet
3.The desktop users should be able to access the internet through the LAN.
4.The users should be transparent to the IP addressing system and should not be required to
configure the same manually.
5.One of the desktops at home needs to be accessed from the office.
6.All the users should be able to use the printer.
Report Contents
1. Project Scope
2. Network requirement
3. Hardware requirement analysis
4. Network topology diagram
5. Network Implementation plan (Features and services, IP Network Design, TCP/IP
Configuration on clients)
6. Requirement analysis and solutions (All 6 requirements stated above)
7. Recommended products.

15.Network design for school.

Abstract
A network has to be designed for a school. There are a total of 230 computers in the school
computer lab. The users in the lab should belong to a single domain and receive IP addresses
dynamically from a central server with the ability to share files on a central location. Some of
the users have laptops with wireless cards for which wireless access is required. The total size
of the lab is 1000 sq ft. Identify appropriate solutions with the detailed services, hardware and
software requirements to design the appropriate network for the school.

16. STP Design and Attacks

Abstract:
The project understands the design and architecture of the spanning tree protocol with a
packet analysis of STP protocol with wireshark. The different types of attacks which are
targeted on a network on which STP is deployed, mitigation techniques and methods to
simulate a STP attack with appropriate code are provided.
Report contents
1. STP Design
2. Understanding layer 2 loops
3. STP Architecture
4. STP Working
5. STP Packet analysis
6. STP Attack methodology
7. STP attack tools
8. STP attack mitigation
9. Lab environment for STP attack demonstration
10. Scapy code for simulating the attack.
11. References.

17. Mac-flooding Attack demonstration

Project Scope
Mac-flooding is an attack by which the attacker attempts to fill the mac-address table of the
switch, by simulating random mac-addresses. The project aims to demonstrate the concept of
mac-flooding by using packet crafting tools like scapy in a test lab.
Hardware and Software:
1.Two PC (Ubuntu and Windows)
2.Scapy and Python (Free download )
3.Cisco Switch ( 1nos) – 2950 is used in the project.
4.Network cables
Report Contents
1. Project Scope
2. Hardware and Software
3. Lab topology with diagram
4. Software installation
5. Steps to Execute with Code / Scripts
6. Verification Procedure

18. Comparative study of Web application and Network Layer Firewalls

Project Scope
The project analyzes and understands the need of network and application layer firewalls.
Analysis of TCP/IP communication, common attacks which occur at the network and
application layers like spoofing, flooding, cookie poisoning, sql injection and the need for
different types of firewalls are analyzed. Different types of deployment scenarios and how
appropriate firewall solutions fit in it are understood.
Report Contents
TCP/IP Communication for Firewalls
Common Network layer attacks
Common Web application attacks
Functionality analysis of network layer firewalls.
Functionality analysis of web application firewalls
Benefits and limitations of network layer firewalls.
Benefits and limitations of web application firewalls
Firewall attack mitigation techniques
Security requirements with Firewall analysis
Firewall deployment with LAN access control.
Firewall deployment with application level control
Firewall deployment with Comprehensive server security
Benefits of combination

19. Employee Website Monitoring using Packet Analysis

Project Description
This project understands and demonstrates the technique which can be used to monitor the
websites accessed by employees based on IP and mac-address on a LAN network by
analyzing appropriate packets. Wireshark is combined with port mirroring feature on a switch
to achieve the solution.
Project requirements
1. A LAN network with internet connection
2. Cisco switch with port mirroring feature
3. Wireshark.
Report Contents
1. Network Topology
2. Understanding Port Mirroring
3. Wireshark capture with Port mirroring configuration on Cisco switches
4. Wireshark screenshot of websites monitored by employees on the LAN network
5. Wireshark screenshot of websites monitored by employees on the LAN network based on
IP address.
6. Wireshark screenshot of websites monitored by employees on the LAN network based on
mac-address.

20. Internet usage control using access control techniques.

Problem
On a network infrastructure, there are 100 users. All the users access internet through a Cisco
router. It was observed that the internet usage was very high which created problems like
slow internet, expensive internet bills etc. To solve the problem, the network has to be
redesigned which would allow only browsing traffic and all other traffic bound to the internet
should be blocked.
Report Contents
1. Problem
2. Network Topology Diagram
3. TCP/IP addressing
4. Network Design strategy
5. Router Configuration
6. Router Configuration explained.

21. Brute force attack detection using wireshark

Project Scope
Brute force attacks are used for detecting login credentials using random combinations of
username and passwords. The project demonstrates a technique by which brute force attacks
on FTP servers can be detected using Wireshark Analysis.
Hardware and Software
1. Ubuntu or Windows (2 nos)
2. Switch
3. Wireshark.
Report Contents
1. Project Scope
2. Lab components
3. Lab setup
4. FTP Analysis after incorrect password
5. Wireshark Analysis of FTP with incorrect password
6. Brute force detection technique
7. Using wireshark filter for brute force detection

22. Flooding attack detection using anomaly techniques with wireshark

Project Scope
Flooding is a type of attack, in which the attacker sends numerous floods of packets to the
victim or associated service in an attempt to bring down the system. There are different types
of flooding attacks like ping flood, Syn floods, UDP floods etc. The project simulates a ping
flood scenario, by using the ping command on the operating system and wireshark is installed
and setup on the victim, which would be used to analyse the number of ping packets received
during a specified duration with reference to a threshold, based on which a flooding attack is
detected.
Hardware & Software
Operating Systems (2 nos, Windows or Linux, (Windows 7, XP used in lab)
Switch (1 nos)
Wireshark (Free Download)
Report Contents
1. Project Scope
2. Hardware & Software
3. Understanding Flooding attacks
4. Ping flood simulation
5. Anomaly detection
6. Anomaly detection with wireshark
7. Lab Setup and Topology
8. Normal ping traffic generation
9. Ping flood generation
10.Conclusion