IT Infrastructure Design: Alexander Industries

IT Infrastructure Design: Alexander IndustriesKEVIN NORTH, FRANK MACK, KYLE HARDY, ADRIAN NORRIS, CURTIS HOLTON

GROUP 2

CNT 4931 CAPSTONE

JOHN VAIL

Overview

Our Mission To present an innovative, efficient and effective Information

Technology architecture design to Alexander Communications.

The Design will address the new Ponte Vedra branch as well as the Main office in Atlanta.

Overview

Our responsibility to YOU… Present with accuracy

Meet or exceed all expectations

Address all areas of IT

Make IT work for you

Overview

Why our Design? Built from the ground up

Designed one step at a time

Compete Design

Addresses entire IT infrastructure

Custom for Alexander

Technologies built for site/make jobs easier

Overview1. Overview

2. Network Design

1. Topology Overview

2. Equipment

3. Addressing

4. ISPs/WAN

5. Remote Access

6. Wireless

3. Storage, Servers, Virtualization

4. Desktop

1. Desktop Applications

5. Website/Webmail

6. Communication/Collaboration w QOS

7. Security

1. IT

2. Physical

8. 8. DR, Reliability

Network Design

Network Design – Topology Overview

Head Quarters – Atlanta, Georgia

Network Design – Topology Overview

Branch Office – Ponte Vedra, Florida

Network Design - Equipment Routing/Switching

Cisco ASA 5550 (2)

Cisco 2811 Integrated Services Router (4)

Cisco 2960 switch (6)

Cisco Catalyst 3560 Series Switches (4)

EMC VNX5100 SAN Storage (1

Wireless Cisco Meraki MR34 WLAN AP (2)

Work Stations Mac – iMac (16)

Servers HP ProLiant DL585 G7 (16 Cores/4 sockets) (2)

Network Design - Addressing

Atlanta10.0.1.0 /27 Management/Core

10.0.2.0 /24 Server

10.0.3.0 /24 VM

172.16.4.0 /25 PC

172.16.5.0 /25 Phone

172.16.6.0 /25 Exec.

172.16.7.0 /25 Printing/Fax

Ponte Vedra10.0.1.32 /27 Management/Core

172.16.4.128 /25 PC

172.16.5.128 /25 Phone

172.16.6.128 /25 Exec.

172.16.7.128 /25 Printing/Fax

Network Design - ISPs/WAN

Atlanta and Ponte Vedra

EarthLink Integrated

Voice, TV & Data T1 lines

Includes static IP addresses

$240/month

Backup ISP

Comcast Business Deluxe

75 Mbps

Extra for static IP addresses

$150/month

Network Design - ISPs/WAN WAN – MPLs

MPLS as primary WAN between sites

Most Widely adopted for site-to-site

Mid-range pricing (vs. Ethernet, or T1)

Any-to-any connect

Comes with SLAs

Network Design - ISPs/WAN WAN – MPLS

FastBlue

Offers Internet, VoIP, DDos mitigation/Protection and cloud services

Why FastBlue MPLS?

Secure/Private networking site-to-site

Fully managed/monitored

Visibility to network health

Network stability

Competitive price approx. $300-400 per/month


Backup WAN – AWS VPC VPN Connection What is AWS VPC/VPN connection?

A virtual private network on the AWS cloud interacting seamlessly with LAN

Site-to-Site connectivity

Constant site-to-site VPN connection to transfers data between your VPC or site to site

Redundant lines


Backup WAN – AWS VPC VPN Connection Simple

Scalable

Host backup EC-2 instance/other service

Redundant

Pay as you go pricing

$0.05 per hour for each VPN connection

total of $0.10 per hour converged

Data Transfer

40 TB/ month $0.09 per/GB

100 TB/month $0.07 per/GB

Network Design- Remote Access

Cisco’s ASA 5550 Module L2TP/IPSec

256-bit encryption; checks data integrity and encapsulates data twice

Granular control

Seamless connectivity

Optimized performance

Consistent security

Management flexibility

Price: $3000(2) = $6000

Network Design – Wireless (WLAN)

Cisco Meraki MR34 (WLAN cloud based service)

Cost $1,300 for 5yr license.

Cloud Management

24/7 support from the Vendor.

Provides secure wireless access for employees and guest.

Storage, Servers & Virtualization

Servers Virtualize all servers

Virtual vs Physical

2TB local storage

Multiple processors

Clustered / Failover / Redundancy


Storage Equipment

Backups (Local / Offsite)

SAN Management

Replication


Virtualization Equipment

Software

Benefits

Performance

Cost

Desktop Architecture

iMacs – efficient, small, built with creativity in mind

Price per base unit: $1,099


Why mac? Better Hardware

Bootcamp

Updates are simpler overall

LITTLE need for antivirus

No INCLUDED bloatware

Ease of use


Uptime? Virtual desktops

Windows software updates may be time-consuming

Compatibility concerns

$50/workstation/month = $800 total

Desktop Architecture Desktop Applications

Microsoft Office for MAC

Microsoft Word

Word Processing

Microsoft Excel

Spreadsheets and workbooks

Microsoft PowerPoint

Presentations

Microsoft Outlook

25GB mailbox with anti-virus and anti-spam

Pricing: $150/per 5 machines/per year 3-4 subscriptions

Desktop Architecture Desktop Applications

GanntProject - Assist in developing and fulfilling business plans

Know for simplicity

Can open MS Project files

Create and display, similar to MS Project

Impressive reporting features

Price: FREE and Supports MAC OS’s


Desktop Applications Share Point –

Online SAS: $5 per month/per user (60 per year/per user)

Easily managed

Safeguard data – hosted in geographically distributed datacenters

Interact/access SharePoint anywhere


Desktop Applications 7-Zip – File archiver with a high compression

ratio

Compresses files more efficiently than competition

30-70% better

Uses AES 256 encryption

Complete file manager

FREE and MAC OS compatible

Mikogo – Screen sharing software

Free up to 10 connections

MAC OS compatible


Desktop Applications Skype

VoIP service and instant messaging client

Over a decade of providing customer satisfaction

FREE and MAC OS compatible

GoToMeeting

HD video conferencing

Collaborate in real time

Video conferencing, screen sharing and audio or VoIP

Group or one on one use

Up to 25 attendees: $39.00 Per Month/Per organization $56/month/organizer, 100 attendees


Desktop Applications Antivirus – Symantec Endpoint Protection

Top level enterprise applicable antivirus

Protects across physical and virtual systems

Maximum performance and advanced protection

15 Licenses $812.70 per year, 20 licenses $1083.60


Desktop Applications Admin account

Wireshark - Network protocol analyzer

Examine your network at a microscopic level

In depth analysis of packets across a network

FREE and MAC OS Compatible

MIB Browser - SNMP MIB Browser

Complete tool for monitoring SNMP enabled devices and servers

Allows you to view, configure and parse SNMP traps

FREE and MAC OS Compatible

Website/Webmail

Webhosting – HostGator Includes all needed options for web hosting

Options for unlimited disk space, bandwidth and email for your websites being hosted

Free site building tools and templates

24/7/365 technical support/money back guarantee

Highly regarded

A+ rating from the better business bureau

Customers

Website/Webmail Webhosting – HostGator

CPanel

Easy-to-use control panel

Secure – Linux based platform

Manage servers and websites

Manage webmail and website front/back end

Pricing

Business Linux Shared

$179.40/$143.52 (20% discount) per year

Website/Webmail

Webhosting SSL Certificates - Creates an encrypted connection between your

web server and your visitors' web browser allowing for private information to be transmitted

Prevents eavesdropping, data tampering, or message forgery.

Obtain from HostGator

Free installation

SSL by GeoTrust and RapidSSL

Pricing

1 domain/hostname $39.95 per year

5+ hostnames 1 domain $159 per year

Website/Webmail

Outlook Exchange Server - Exchange Server is an e-mail-based collaborative communications server for businesses Link users together and serve as a gateway in and

out for email.

After creating a domain name and an email address with a corresponding URL an exchange server is needed

Why an Exchange Server? Forward all HostGator hosting addresses to main

email and user accounts for Alexander communications

Website/Webmail

Outlook Exchange Server Hosted by Rackspace

No maintenance/upkeep

Unmatched Network Uptime Guarantee and SLA.

Fully managed data centers

Anti-Spam and Anti-Virus scans

SSL encryption for all email transmissions

Designed to work with Outlook

Price

$10 per mailbox/per month

Communication/Collaboration

VoIP Two main options:

Differentiated Services

Integrated Services

Soft Phones - Cisco IP Communicator

Communication/Collaboration

Teleconferencing Multiple ideas (Facetime, Skype)

Ultimate decision – GoToMeeting and Skype mentioned is desktop applications section

Pricing $56/month/organizer, 100 attendees

$39/month/organizer, 25 attendees

Skype - Free

Security

Physical

Security guards on-site.

I.D Badge access for employees.

24/7 Monitoring

Train employees about social engineering attacks.

Security

Network Security

Cisco ASA 5550 module

Anti-virus program on servers & workstations.

User passwords will be changed every 90 days.

Network equipment will be locked in a rack.

Security

Facility Security

Security Camera’s

ADT Alarm system

Maintenance on-site

Backup Generators

Fire drills

Disaster Recovery Plan

Disaster Recovery Virtualization Benefits

Relocation if necessary at alternate site

Backups, Backups and more Backups

SpiderOak off-site data backup “Zero-Knowledge Privacy Promise”

Deduplication

LDAP/Active Directory

Unlimited data storage per user

Reliability

Goals 99.999% Uptime

5.5 minutes of unscheduled downtime a year

Prevent having to resort to disaster recovery plan

Studies show that every $1 spent on hazard prevention could save up to $4 in response and recovery costs

Total redundancy

Equipment, ISP, Networking Links, Data, etc.

Reliability

Network Room Environment Safe and Secure Room

Power Protection (UPS)

APC Power-Saving Back-UPS Pro 1500, 230V

Networking Cabinet

Black Box Products Elite Data Cabinet 24U

Climate Controlled

Reliability

Extra networking equipment on site for testing or in case of hardware failure

ScienceLogic EM7 to monitor the network Application and System usage monitoring

Network performance management

Events and alerts

Real-time reporting on device performance and availability

Asset and hardware inventory

Estimated Overall Expenses Network Equipment

Cisco ASA 5550 (2) - $3000 = $6000

Cisco 2811 Integrated Services Router (4) - $1600 = $6400

Cisco 2960 switch (6) -$1700 = $10200

Cisco Catalyst 3560 Series Switches (4) - $2600 = $10400

EMC VNX5100 SAN Storage (1) - $8,846

Servers/ Storage/Virtualization Price $6,592.00 (2)

VMware ESXi Enterprise $2,875.00 (2) Support $604.00 per/year

ISP/WAN ISP – Primary - $240 Backup - $150 (per month)

MPLS - approx. $300-400 per/month

AWS - Only need if Primary WAN goes down. (1 month approx. $432)

Estimated Overall Expenses Wireless

Cisco Meraki MR34

$1,300 for 5yr license

Desktop Architecture Work Stations

iMac - $1,099 (16) - $17584

AWS backups if needed $50/workstation/month = $800 total

Desktop Applications

Office for Mac - $150/per 5 machines/per year

4 subscriptions $600 per month

SharePoint Online - $5 per month/per user (60 per year/per user)

$80 per month

GoToMeeting

$39.00 Per Month/Per organization

Symantec Endpoint Protection

20 licenses $1083.60

Estimated Overall Expenses Web Hosting/Web Mail

HostGator $143.52 (20% discount) per year

SSL (HostGator) 5+ hostnames 1 domain $159 per year

Rackspace Exchange Server $10 per mailbox/per month (170.00 per month)

Communication/Collaboration VoIP – Cisco IP Communicator

$50 per licenses – (20) $1000

GoToMeeting – (Addressed in Applications)

Disaster Recovery/Reliability SpiderOak - $60 per user/year - $1200 per year

Power Protection (UPS) APC Power-Saving Backups Pro 1500, 230V - (8) $300 each - $2400

Networking Cabinet Black Box Products Elite Data Cabinet 24U (2) - $1500 each - $3000

Science Logic $ 12 per node/month -$216 per month/both sites

Estimated Overall Expenses

Estimated Start-up Costs including first month Approx.. $75,100

Monthly Estimated Expenses Approx..$3,250

Total Estimated First Year Expenses Approx.. $110,900

References Cisco 2811 Integrated Services Router. Retrieved from http://www.cisco.com/c/en/us/products/routers/2811-integrated-services-

router-isr/index.html

Cisco 2960 switch. Retrieved from http://www.cisco.com/c/en/us/products/switches/catalyst-2960-series-switches/index.html

Cisco Catalyst 3560 Series Switches. Retrieved from http://www.cisco.com/c/en/us/products/switches/catalyst-3560-series-switches/index.html

cPanel Web hosting. Retrieved from http://cpanel.net/

Amazon Web Services. Retrieved from http://aws.amazon.com/about-aws/

Office for MAC. Retrieved from https://support.office.com/en-US/Article/Install-Office-on-your-PC-or-Mac-with-Office-365-for-business-72977511-dfd1-4d8b-856f-405cfb76839c?ui=en-US&rs=en-US&ad=US

GanttProject. Retrieved from http://www.ganttproject.biz/download

Share Point Online. Retrieved from http://office.microsoft.com/en-us/sharepoint/microsoft-sharepoint-online-collaboration-and-management-software-FX103789366.aspx

Mikogo. Retrieved from http://mikogo.en.softonic.com/mac

7-Zip. Retrieved from http://www.7-zip.org/

GoToMeeting. Retrieved from http://www.gotomeeting.com/online/collaboration/

GoToMetting Pricing. Retrieved from http://www.gotomeeting.com/online/collaboration/meeting/pricing

References Symantec Endpoint Protection. Retrieved from http://www.symantec.com/endpoint-protection

SNMP MIB Browser. Retrieved from http://www.manageengine.com/products/mibbrowser-free-tool/

WireShark. Retrieved from https://www.wireshark.org/about.htm

HostGator. Retrieved from http://www.hostgator.com/

HostGator Pricing. Retrieved from http://support.hostgator.com/articles/pre-sales-policies/payment-fees/hosting-price-chart#shared

HostGator SSL. Retrieved from https://www.hostgator.com/ssl

Outlook Exchange Server. Retrieved from http://office.microsoft.com/en-us/outlook-help/what-is-an-exchange-server-e-mail-account-HA001095504.aspx

Rackspace Exchange Server. Retrieved from http://www.rackspace.com/email-hosting/hosted-exchange/?cm_mmc=other_email-hex-_-PPC_NAM-_-exchange-server_nb-_-exchange%20server&gclid=CJCWvbXn8cACFWho7AodllEANg

Fast Blue MPLS. Retrieved from http://fastblue.com/products-services/data-services/mpls-wan/

AWs VPC VPN. Retrieved from http://aws.amazon.com/vpc/

VoIP Mechanic. Retrieved from http://www.voipmechanic.com/setting-qos-voip-linksys.htm

Meraki Wireless. Retrieved from https://meraki.cisco.com/products/wireless/mr34

EMC VNX5100 SAN Storage. Retrieved from https://store.emc.com/us/Product-Family/VNX-AND-VNXe-PRODUCTS/VNX5100/p/VNX-5100-STOR-001-1Q13-0021

References Promise Technology VTrak E830fS. Retrieved from http://www.cdw.com/shop/products/Promise-VTrak-E830fS-hard-drive-

array/2462515.aspx

SpiderOak. Retrieved from https://spideroak.com

APC Power-Saving Backups Pro 1500, 230V. Retrieved from https://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=BR1500G

Black Box Products Elite Data Cabinet 24U. Retrieved from http://www.blackbox.com/Store/Detail.aspx/Elite-Data-Cabinet-48-H-24U-x-30-W-x-32-D/EC24U3032KIT

Science Logic. Retrieved from http://www.sciencelogic.com/

Cisco IP Communicator. Retrieved from http://www.cisco.com/c/en/us/products/collaboration-endpoints/ip-communicator/index.html

Cisco ASA 5550. Retrieved from http://www.cisco.com/c/en/us/support/security/asa-5550-adaptive-security-appliance/model.html

VMware ESXi Enterprise. Retrieved from www.vmware.com/products/esxi-and-esx/overview

iMac. Retrieved from https://www.apple.com/imac/

Group Symbaloos: http://www.symbaloo.com/mix/homecnt4931

https://www.symbaloo.com/home/mix/13eOcLOhML

http://www.symbaloo.com/mix/online48

http://www.symbaloo.com/shared/AAAAAS4P9U8AA41-4R42WA==

http://www.symbaloo.com/mix/capstone2014

Any Questions???

Documents

IT Infrastructure Design: Alexander Industries