coursework (c072047)
[Specification][AutoCAD
drawing]
Wireless Networks Assessment Specification
Details
Module name: Wireless LANs
Module number: CO72047
Session: Semester 1, 2005/2006
Contact: WJ Buchanan, Reader, D31, School of
Computing
The module will be assessed as follows:
• Coursework assessment [50%].
• On-line test [50%]. 10% for passing Cisco
Certification, 40% for Napier Test.
Coursework specification
The coursework will account for 50% of the module.
An outline specification is:
Title: Secure Wireless Network Design
Objective: To design a secure wireless network.
Outline: The objective of this coursework is
to design a secure wireless network which meets
certain objectives, and to implement a prototype
of the system.
Submission: PDF document submitted to Web-CT
by Monday, 16 January 2005, 12pm.
Assessment: A grade will be assigned for the
assessment, which will be returned to the student.
This grade will then be converted to a mark
for the module board.
The key elements of the report should be:
• Introduction. This should define the aims
of the coursework, and provide background material.
[5%]
• Design. This section should present a possible
wireless design for an organisation network
which supports up to 100 simultaneous users.
This design should include encryption, authentication
and the required firewalling/ filtering. Further
details of the security constraints will be
given in the lecture [25%]
• Implementation. This section should provide
a prototype of the proposed wireless system
including sample configurations, and an explanation
of their operation. [35%]
• Conclusions. This should outline the main
conclusions of the report. [15%]
• Presentation/references. This relates to the
layout and format of the report. Any references
should be given using the Harvard referencing
standard. Do not copy any material directly
from a source. [20%]
The report should be up to 15 pages long, and
can include other associated material.
Outline Requirements
The organisation wants to implement a wireless
network for their employees, of which the main
requirements are:
• Three main groups: Sales, Production and
Engineering. Each group has 60 users in each
group.
• The standard network card is a Cisco Aironet
350, and the access point selected is a Cisco
Aironet 1200.
• The physical span of the network is similar
to the size of the Merchiston library.
• The Sales and Production departments should
not be able to access the Web server on any
access points, but Engineering can.
• The Sales department should not be able to
ping any of the network, while the Production
department can ping for the access point, while
the Engineering department can ping any part
of the network.
• The Engineering department should be able
to access SNMP information on the access point
and the router, but no other device. Sales and
Production should not be able to access any
SNMP information.
• The department servers are located at: 10.0.0.1
(for the Sales department); 10.0.0.2 (for the
Production department); and 10.0.0.3 (for the
Engineering department). Access should be barred
to the server which is not defined for the department.
There is also a public access server at 10.0.0.5.
• External WWW access should only be allowed
for the Sales department.
• An email server is located at 10.0.0.4. It
supports most of the commonly used email protocols.
Every user should be able to access it.
• The organisation has external access to a
single router which has an external IP address
of 172.16.1.1/24, and has at least three ports
(but more can be added, as required).
• Users in Engineering should be allowed to
log into any access points, in a secure way.
• Overall, the network should be fairly secure
and robust, in case of failures.
