Network planning
During the wait for the T1, Kelly and I came up with a detailed network topology map and decided exactly what hardware and software would be required to put together an inexpensive and upgradable network that could be modified with minimal service interruptions.
* Cisco networking equipment will be used exclusively.
* The DMZ outside the firewall must be switched and SNMP-aware.
* The LAN inside the firewall will eventually be switched and SNMP-aware.
* All software must be 100% open source.
* OpenBSD will be used exclusively outside the firewall.
* Linux will be used exclusively inside the firewall.
* Macintoshes will be used exclusively for project development.
* The internal file server must be AppleTalk or AppleShare capable.
* A secure auditing workstation will sit between the DMZ switch and the DMZ ethernet port on the router.
After taking stock of our current hardware, we then compiled a list of what we owned and what we needed. All of the purchased hardware was chosen because outstanding deals had been found.
Available hardware:
* SPARCstation 2, 64MB RAM, 1.2GB HDD
* SPARCstation 1+, 32MB RAM, 540MB HDD
* AMD K6/233, 96MB RAM, 4.6GB and 5.2GB HDD
* AMD K6/266, 128MB RAM, 7.2GB HDD
* IBM Aptiva P166MMX, 64MB RAM, 3.5GB and 25GB HDD
* Team Internet 486dx2/66, 64MB RAM, 1.2GB HDD
* Apple iMac G3/266, 160MB RAM, 6.2GB HDD
* Apple PowerMacintosh G3/400, 144MB RAM, 9.2GB HDD
* Miscellaneous m68k Macintoshes
* MaxTech 24-port Unmanaged Hub
* 2 Addtron 8-port Unmanaged Hubs
Hardware to purchase:
* Cisco 2611 router
* WIC-1DSU-T1 integrated DSU/CSU
* Kalpana EPS-2015 RS managed switch
* 19" wallmount telco rack
* 8' steel equipment rack
Next, we started distributing the machines. The AMD systems and SPARCstations would become OpenBSD servers in the DMZ and the IBM and Apple systems would become Linux and Mac OS 8.6 production boxes on the internal LAN. Linux was chosen for the IBM Aptiva because we not only needed a file server but also a workstation-style installation with the X-Window System to run X applications such as xload from the servers in the DMZ. The final Team Internet machine became an OpenBSD security and auditing workstation to keep track of traffic and the little gremlins that tend to creep into networks.
پاسخ با نقل قول