A secure LAN (Local Area Network) infrastructure designed for a small/medium-sized business (SME) using Cisco Packet Tracer. Prepared as part of a Computer Networks course project.
This project presents an end-to-end network design that segments a business's network infrastructure using VLANs, secures it with a firewall and access control lists, and provides core network services (DHCP, DNS, HTTP). All theoretical grounding for the design is based on Kurose & Ross's Computer Networking: A Top-Down Approach (8th ed.).
- Router: Cisco 2911 — router-on-a-stick configuration for inter-VLAN routing
- Firewall: Cisco ASA 5506 — security inspection of network traffic
- VLANs: Department/function-based network segmentation
- Extended ACLs: Security policies restricting access between VLANs and services
- DHCP Relay: IP address distribution to different VLANs from a centralized DHCP server
- DNS/HTTP Services: Basic name resolution and web service within the network
All components have been tested and verified working in the Packet Tracer environment.
| File | Description |
|---|---|
NetworkKobiProject.pkt |
Cisco Packet Tracer project/topology file |
NetworkProjectReport.pdf |
Project report describing the design, configurations, and test results |
PingTest.png |
Screenshot of end-to-end connectivity test |
access-list.png |
Screenshot of Extended ACL configuration |
ip route.png |
Screenshot of the routing table |
trunk interfaces.png |
Screenshot of trunk interface configuration |
- Cisco Packet Tracer must be installed.
- Open
NetworkKobiProject.pktin Packet Tracer. - See
NetworkProjectReport.pdffor detailed configuration steps, commands, and rationale.
Kurose, J. F., & Ross, K. W. Computer Networking: A Top-Down Approach (8th ed.).