Rediseño de la infraestructura de red para la unidad educativa salesiana Domingo Comín aplicando una topología jerárquica redundante con políticas de seguridad perimetral en la red Lan.

Abstract

A hierarchical topology was implemented with convergent connections, scalable network addressing, creation of virtual LANs (VLANs) for each area of the institution, quality of service (QoS) in the delay sensitive traffic, and perimeter security in the LAN network; in such a way that its execution is clear and understandable for future implementations. In this way the development was mainly based on a hierarchical design, which I attribute with a correct distribution of the network layers, obtaining in this way a hierarchy in the network and achieving better performance, greater scalability and providing better management over the same for the infrastructure personnel. Likewise, together with convergent connections in the hierarchical layers, the redundancy protocol STP (Spanning Tree Protocol) was used to avoid loops in the network due to the convergent connections. A demilitarized zone (DMZ) was implemented for the servers that the school currently has, allowing servers to be outsourced, vulnerable to attacks, providing security while protecting users of the internal network. We created virtual LANs (VLANs) with the purpose of segmenting traffic and avoiding unwanted traffic over certain areas of the network. In the same way, a UTM device was configured which is capable of detecting, analyzing and protecting the data against any type of risk and vulnerability that represents a threat to the network. A RADIUS server was installed so that access to the wireless network is by user and not by IP, so that users must authenticate to enter the network. Finally, a monitoring and threat reporting control system was implemented, so network personnel can verify the status and future needs of the network.