NETW490_IIS Project Proposal Final copy

Spacean Technologies

IIS Project Proposal

Submitted April 16, 2016

Team D

William Hargis, Brandon Bonnette, Christopher Fantroy

Ipnindera Sekhon (Rouble), Clayton Chow


1 | P a g e S p a c e a n T e c h n o l o g y T e c h n i c a l S o l u ti o n P r o p o s a l


Table of ContentsExecutive Summary

Our Company5

1.0 Revision History

2.0 Project Overview2.1 Project Overview

2.2 Project Description

2.3 Chosen Solution

3.0 Solution Strategy03.1 Project Definition and Kick-off0

3.2 Business Needs

3.3 Solution Overview

3.4 Organizational Benefits

4.0 Solution Scope4.1 Solution Details

4.2 Testing before installation

4.3 Installation details

4.4 Post-Installation Testing details

4.5 Network Documentation details

4.6 Training details

5.0 FINANCIALS25.1 Customer Budgetary Guidelines

5.2 Materials

5.3 Summary Project Budget6

6.0 PROJECT CONDITIONS7

7.0 PROJECT CLOSE OUT7



8.0 PROJECT ORGANIZATION

9.0 COMMUNICATION

10.0 APPROVALS49

11.0 APPENDIX0

11.1 Proposed Solution Design– Diagrams0

11.2 Proposed System Internal – Diagrams4

11.3 Project Schedule in Gantt Chart Format

LEGAL0CONCLUSION1REFERENCES2



Executive SummaryIIS has three home offices which are located in Shanghai, London, and Dallas. IIS

headquarters is located in Dallas Texas and consist of many different buildings. For several years

now there has been a need to combine the different buildings in Dallas into one building. Just

recently they have decided to combine the corporate offices, warehouse and our prototype

manufacturing which currently consists of three separate buildings. This new consolidation will

combine the staff, IIS computer and communication center, the manufacturing facility and a

warehouse. The new building consolidation will consist of three floors and be 150,000 square

feet total.

Additionally, the office located in Fairfax deals with Government contracting in which all

work from that location needs be quarantined from the rest of the company’s network. Fairfax

has a staff of 225 sales people and engineers. In Fairfax Virginia, security is a must as many of

the employee’s remote into the server so there is great concern to keep all the top secret

information secured.

IIS has many moving pieces and multiple locations with specific requirements. They

need a system that is secure, functional, expandable, and reliable and will provide employees the

capability of multiple access methods. Since the current IT infrastructure is a hodge-podge of

equipment, they need a complete overhaul of all their locations. The expansion plans have

already been approved for these 3 building to be consolidated into one massive 150,000 square

foot building where network and communications hardware and software will be up to date in

according with the latest technology available. The new site will contain staff for the corporate



communications and also manufacturing center. The corporate offices will also be under the

same roof with the manufacturing and other departments within IIS.

Our Company

For over 30 years Spacean Technologies has been a global leader for IT solution services.

We are a Fortune 500 company with strategic partners all over the world. Our goal is to improve,

design, and assist our client’s productivity by providing new technology solutions to improve

effectiveness in their daily operations. Spacean provides highly-skilled professionals whose

education, skills and experience are matched to your unique solution.

When you succeed we succeed.



The Team

Role Description Name/Title

Project Manager WAN/Remote Access William

Project Manager VoIP/ Project Scope Brandon

Project Manager Security/Cost Benefit Analysis Rouble

Project Manager Building Layout/WAN Chris

Project Manager Operations Clay

1.0 Revision History

Name Date Purpose

William 3/1/16 Document creation

Brandon 3/15/16 Document revision 1

Rouble 3/23/2016 Document revision 2

Chris 3/31/2016 Document revision 3

Clay 4/6/2016 Document revision 4

Brandon 4/15/2016 Document revision 5



2.0 Project Overview for IIS

2.1 Project Overview Description

IIS’s main corporate office is located in Dallas Texas. IIS will consolidate all the separate

offices into one building consisting of three floors. The other offices are located in London,

Shanghai, and Virginia. The current telecommunication equipment and setup is old and outdated

and needs to be rebuilt from the ground up. Dallas, London, Shanghai, and Virginia need to be

able to communicate with each other flawlessly. The new network infrastructure design center

and telecommunications center must be secure, operational and future‐proof to better benefit IIS.

IIS is a widely recognized global company with its corporate headquarters based in

Dallas, Texas. They have their home offices in London and Shanghai as well as a manufacturing

and design centers in Fairfax, Virginia. As of now, Dallas facilities are spread out over 3

buildings and are currently building a single 150,000 square feet new location to house

employees. The building will be also used to support the IIS communications and computer

center, and also a manufacturing facility and a warehouse.

Currently, the network is a mess of T1, leased T1 and some random DSL and Cable

connections. The Fairfax, VA location is the Military defense design division of the company

and security is of the top priority. This location, in particular, is in desperate need of a complete

system and security overhaul.

Having everyone under the same roof in Dallas, Texas will certainly increase security

because they can transfer confidential e-mails over a secure LAN. This will also allow



employees to meet face to face without having to travel. It will also allow the management to

monitor the prototype manufacturing process and keep survey on the warehouse and increase

inventory control standards. They would require a wireless upgrade due to the new wireless

inventory scanners, as well as new tablets and other wireless devices that are unable to be

hardwired. IIS will also have vendors and people in from other departments of the company and

will also provide wireless access to the employees of the company.

All of these changes will increase customer support, reduce transportation cost and let

management have better control over the entire operation for IIS. New software and a new

centralized e-mail will make communication between the locations all around the globe more

effective. Additionally, it will increase security on the network and ensure none of their personal

or project data is compromised.

2.2 Project Description

With the continual growth of IIS over the years, current network has developed a major

roadblock for IIS. This roadblock is producing massive limitations to the corporation’s growth

and their ability to continue to thrive in this cutthroat Information Technology market. This is

why IIS contacted Spacean Technologies to reevaluate, consolidate, and optimize their three

locations in Dallas, Texas. IIS chose a 150,000 square feet for their headquarters and is spread

out over three massive floors. They have assigned areas for their computer and communications

centers, a manufacturing facility, and the warehouse. With this massive corporate consolidation,

we will have to look at upgrading IIS’ complete network infrastructure.

2.3 Solution Choice MPLS/DS3



We have examined the existing network and decided to design an entirely new network

that will be reliable, future-proof and highly available. Each branch will connect to the HQ via an

MPLS connection, a very secure efficient method for routing, securing information that is highly

used in today’s networks. Category 6 (CAT-6) connections will run through the new building

that exceeds current needs and will meet the bandwidth needs in the future.

This design brings the network together as a completely interconnected network. All

routing of information is done the same way. This will make the network more manageable,

secure, scalable and reliable. As the company grows, the need to purchase new equipment it will

be easy to expand the network by purchasing the same vendor of hardware.

Having the company house the main Infrastructure at HQ and remote offices connect via

MPLS this allows for the company to cut down cost and have a central location to manage. The

network will also be used to handle all voice traffic using a single voice platform with the same

devices. Office personal will have the same model of the workstation, this will allow for the

process of replacement, repair and expansions more efficient and cost effective. All remote users

will have the same model of laptops for the same benefits and connect via VPN to company

resources. This type of connection is amongst the most secure method for allowing users on the

go to connect. This will allow users that are connecting to public internets such as coffee shops,

wireless access points, and client’s offices a secure way to access the infrastructure.

To provide better management of the network and infrastructure all servers will be

located in the Dallas datacenter. This will allow for us to save money and maintenance can be

carried out by IIS staff. Within the data center, there will be room for either a SAN or storage

area hardware for all of IIS storage needs and will be accessible by all other branch offices. We



will have redundant firewalls at all locations that will help with security for the end users as well

as protect from all breaches and attacks as the HQ office will be the only office directly

connecting.

The offices currently have DSL on the premises. We can go with MPLS over DSL which

will cost significantly less than the bonded T1 lines and the home offices will still have VPN

capabilities ("MPLS over DSL," n.d.). With the use of MPLS, VPN can be integrated into their

design topology.

3.0 Solution Strategy

3.1 Project Definition and Kick Off

IIS has grown and consolidated its offices. These offices are to have new

Telecommunication and Network Infrastructure. With an approved 2-million-dollar budget,

Spacean Technologies will connect their Dallas, London, Shanghai, and Virginia offices along

with their home offices. Spacean Technologies will also provide the services to rewire and install

the new telecommunications and network infrastructure for IIS.

Project Objectives:

New telecommunication and network infrastructure:

Security Functional system Extensible system Future-proof Accommodate security for their military defense division Home offices and travel Corporate wide email Company LAN



Unified communications system Wiring and cabling Equipment

Budget of 2 million dollars that must cover:

Operational maintenance Training And Staff for three years

Measures

Spacean Technologies will have key performance indicators, critical success elements,

and tangible and intangible benefits to assess the progress of this project. In addition, we will be

working with IIS with the project management at set intervals.

IIS will be able to utilize their new telecommunication and network infrastructure that will provide:

Unified communication for their organization:

Email LAN Telecommunications Security Access from home offices and travel

New equipment and wiring:

Future-proof Functional Extensible Secure Training and maintenance for their new systems Certified Trainers Documentation and diagrams



SLA and technical support services Industry standard monitoring software

Spacean will provide IIS new Telecommunications and Network Infrastructure which

will enhance IIS’s network security, functionality, extensibility, and provide future proofing for

their future needs. Our solutions will cover these critical IIS requirements and as a result will

increase productivity and work flow from its new network infrastructure.

Additional benefits:

Better customer and staff satisfaction Increased knowledge of technologies; staff efficiency and work flow Customer satisfaction; operation efficiency Up-to-date technology with room for growth Improved quality of information and decision/support capabilities Regulatory compliance Improved communications for IIS

3.2 Business Needs

Business needs are many and include being able to interconnect the networks between

locations in Dallas, London, Fairfax and Shanghai. We need a secure way to send encrypted

information between our sites. We need high-speed packet switching within our network at

Dallas. We will implement backups for all of our information at each site. The new Dallas

location will contain staff for the corporate communications center, manufacturing center,

warehouse and a call center. The corporate offices, as well as manufacturing and other

departments, will all be sharing the same building and there are three floors in the new site that

will accommodate each department of IIS. IIS has never managed its own IT infrastructure on

its own. Therefore, the new project by Spacean Technologies will give the information



technology department the opportunity to operate its own infrastructure. Along with the

opportunity to operate its own infrastructure, training will be provided to employees that require

the information that’s needed to administer tasks of the company. All of the present facility

operating systems are strictly on-site systems. This new project will allow the employees to

work outside of the local area network by using VPN’s in order to encrypt data across an

unsecured network.

Within the new business sites, we will also be installing a wireless LAN. This will allow

remote access within the building to certain portions of the network while others will only be

available from hard wired locales. Spacean will be installing a new corporate wide e-mail, new

VoIP phones, VLAN’s for each department and new workstations. All of these new features will

add new flexibility within the business as well as increased security throughout many different

layers of our network.

3.2.1 Security requirements

Security

Taking physical security into consideration for IIS is a must. We need to ensure the safety

of the employees as well as IIS as a whole. The grounds of the Dallas facility need to have a full

360 degree view of the surroundings at all times. It is important to let everyone know the

premises are protected by a state of the art security system to avoid any attempt to commit a

crime. With use of the Pelco Optera with Sure Vision 2.0, IIS can rest assure that the

premises will be protected and monitored at all times. The Peloc Optera provides

constant and seamless situational awareness, multiple immersive PTZ views at VMS,

it allows for zoom in for detail live or retrospectively with client-side dewarping at



180°, 270° and 360° and up to 12 Megapixel resolution for better detail at distance. The security

camera also has 12.5 ips at full resolution, SureVision 2.0 for simultaneous wide dynamic range

capabilities and low light performance. The Pelco Optera is ONVIF Profile S which is a

conformant video management systems and devices such as IP cameras or encoders that sends,

configures, requests or controls the streaming of media data over an IP network ("ONVIF

Releases Profile S for Easier," n.d.), and Profile G Conformant which allows the device to record

video data over an IP network or on the device itself (ONVIF Profile G Specifications, n.d.).

Since the Optera can be mounted in a variety of configuration, we will ensure there is adequate

camera mounted in the employee and guest carpark areas to ensure their safety to discourage any

outside potential security threats as well as to the perimeter of the exterior of the building. We

will use the Optera 12MP with SureVison 2.0 that is a pole mounted camera in the carpark area.

The Optera 12MP will cost $1,493.05 (4) totaling $5,972.20 for 4 cameras covering the carpark

areas. The Optera cameras also come with a 3-year warranty.

For the perimeter of the building we are going with the Pelco Evolution 360° Outdoor

Camera. The cameras have 360° viewing capabilities without the use of moving parts which we

feel prologs the life of an outside operating camera. The Pelco Evolution is ONVIF Profile S

compliant which is a conformant video management systems and devices such as IP cameras or

encoders that sends, configures, requests or controls the streaming of media data over an IP

network ("Evolution 360 Outdoor Camera," n.d.). We are suggesting 8 outside building mounted

360° viewing camera costing $799.99 ea. totaling $6,399.92. The cameras

also come with a 3-year warranty.



Our recommendation for the interior security portion would be the Pelco EVO-12NID

12Mp Indoor 360-Degree Network Indoor Camera. The Evo has a 360° viewing capabilities

without the use of moving parts which we feel prologs the life of camera. The Evo is ONVIF

Profile S compliant which is a conformant video management systems and devices such as IP

cameras or encoders that sends, configures, requests or controls the streaming of media data over

an IP network ("Evolution 360 Outdoor Camera," n.d.). We recommend 14 costing $870.00 ea.

totaling $12,180.00.

The video surveillance system is powered by Power over Ethernet or

PoE which supports the power to the IP surveillance camera system through

DC electrical power which comes from the use of unshielded twisted pair.

With this set up we are maxed out at 100meters (328ft) and no way to increase the distance if we

find that we need to expand the run. We recommend using fiber which will not only give IIS

more bandwidth but allow for longer distance. To allow for starters we will connect a media

converter that will be compatible with IIS’s T1 lines that will be use for

the MPLS. With the use of cat6 cabling and fiber IIS can extend the

diatance of the cabling and provide fiber optic to the system for $832.20

(Estes, 2011).

To occompany the system a Pelco Digital Sentry Software and Hardware Video

Management System (VMS) Pelco DSSRV2-160-US / DSSRV2-160DV-US Digital Sentry

Network Video Recorder 16TB at $6,254.00 that will be integrate into the design. The Sentry is

for the video recording and play back operations. Also included will be a CM6700-MXB



Switcher/Controller at $1,163.96. Pelco PMCL319BL LED Flat Panel, Dual Input Monitors will

be included in the security package in which we will use 4 monitors at $1,904.00.

Below is the price for the Dallas security system insatall.

Camera Type Number of units Price

Optera 12MP 4 $5,972.20

Pelco Evolution 360° Outdoor Camera 8 $6,399.92

Pelco EVO-12NID 12Mp Indoor 360-Degree Network Indoor Camera

14 $12,180.00

Media converter 1 $832.20

CM6700-MXB SWITCHER/CONTROLLER

1 $1,163.96

Digital Sentry Software and Hardware Video Management System (VMS)

1 $6,254.00

Pelco KBD200A Full Functionality Keyboard Controller, Fixed/Variable Speed, PTZ Control

1 $407.50

Pelco PMCL319BL LED Flat Panel, Dual Input Monitors

4 $1,904.00

TOTAL $33,949.82



3.2.2 Design of the Surveillance System

3.2.2.3 Security Camera Design



We have already completed a site survey and have designed the Dallas building with the

following configurations and set up. The first floor will house Surveillance Cameras consisting

of two located in the carpark that will scan 360° viewing the entire area. On the perimeter of the

building there will be two 360° viewing cameras located at the front, two on each side of the

building and two on the rear of the building. This will ensure the building has no blind spots and

that every angle of the building will have 100% coverage. The multiplexer and control of the

surveillance system will be housed in the first floor located in the center of the facility to

maximize cabling and convenience. Inside the facility we have set up 360° viewing cameras with

two in the lobby, two in the middle section and two in the warehouse. This again will provide

100% coverage of the facility floor.



Seen here is the second floor with the four security cameras positioned in each corner of

the floor to provide 100% coverage. The Pelco EVO-12NID 12Mp Indoor 360-Degree Network

Indoor Camera provide the security and peace of mind that IIS requires. The interior walls of the

IT office will be painted with EMF eliminating paint which will block the RF radiation and high

frequency from bleeding through the building and causing interference. On the walls opposite of

the IT office will have RF blocking wall paper to help ensure no RF interference occurs.



Seen here is the third floor with the four security cameras positioned in each corner of the

floor to provide 100% coverage. The Pelco EVO-12NID 12Mp Indoor 360-Degree Network

Indoor Camera provide the security and peace of mind that IIS requires.

3.3 Solution Overview

A Virtual Private Network is a virtual version of a secure, physical network—a web of

computers linked to share files and other resources. VPNs connect to the outside world over the

Internet, and can secure general Internet traffic and corporate assets across encrypted tunnels for

network connections and traffic. A Virtual Private Network (VPN) allows for employees working



from home or remote locations to connect to the public Internet securely to the company network.

This system allows for the user to seamlessly integrate into the company intranet with the same level

of sec LAN Solution

Key-card Authentication

Key card authentication is the first step in a “two-factor” authorization system. Each user will

be issued an identification card with their picture and a unique identification number. When the user

wishes to login to the IIS network they will be required to first swipe their card then enter their

password. This prevents an unauthorized user from accessing the system using just the access card

before a user can report it lost or stolen.

Company Issued Devices

All users who regularly interact with the company network will receive a company issued

laptop preconfigured for optimal interoperability and security with the IIS intranet. New workstations

will also be deployed in areas where multiple users connect to one terminal, such as the warehouse

floor.

3.4 Organizational Benefits

With a budget of $2 million, this will cover many of the expenses to build a robust,

reliable, secure network of this size. The best design may require additional funding. We have

chosen to work with CDW as they have agreed to volume pricing amongst other deals. With a

higher budget, it enables IIS to build a very robust, secure system that will scale as it needs and

will give a competitive edge over competitors. It will also allow for a data center to build in the



Dallas location that will for IIS to keep all information segregated, secure and accessible for the

team in charge of building the system. Their system will not only meet IIS current needs but will

also give them the ability to grow the system as the company grows over the next several years.

By using a MPLS connection it will cut the cost down for the cost of internet service at each

office location. This will also allow for easier manageability while troubleshooting network

problem as each MPLS connection is traversed back to the Dallas location.

4.0 Solution Scope

Spacean Technologies network solution will be MPLS IP VPN. This solution is a speedy

solution, packet data transport service that uses high-speed switching architecture instead of

using standard routers. This type of network will be a change from a traditional network that will

allow the packet forwarding decisions to be made solely on the contents of the label without

examining the packets of the MPLS. It will also allow individuals to create end-to-end circuits

across any type of transport medium while allowing any protocol usage.

Equipment for installation and tools will also be provided by Altera Network Solutions.

Installation for the new three-story building at Dallas location will take a minimum of 3 weeks

due to the large number of workstations at Dallas. Once the workstations are wired and

configured, Spacean Technologies will install the network server and test the connectivity of the

workstations and the server. A disaster recovery plan will also need to be configured. Altera

Network Solutions will ensure that a backup system is in place and not at the same location.

Spacean Technologies will implement a remote disaster recovery system in London. This will



allow the company to be fully operational within 1 day if a disaster was to happen in Dallas, TX.

For the best cyber protection, Spacean Technologies is going to utilize a multi-step plan.

The first step is to ensure that we have strong passwords and require them to be changed

every 90 days. The second step is to monitor e-mail attachments and files downloaded from the

web. The final step is to install, implement and effectively maintain an anti-virus program. We

will also ensure that all the firewalls are installed and configured correctly to protect both the

network and outside customers. We will also be issuing security clearance badges to all

employees and performance standards of the employees. Internally, Spacean Technologies will

be implementing network security protocols with access controls to the employees which will

limit the access of sensitive and confidential data.

Spacean Technologies will finally establish the physical access controls and

authentication techniques for all computer equipment. This will restrict access to any network

equipment or company servers to authorized personnel only. Users of the network equipment

will be given different authentication levels that will limit their access to the network and

associated resources. Highly sensitive and valuable information will have stronger authentication

technologies than less valuable information. For highly sensitive material we as Spacean

Technologies will introduce Biometrics to verify the identity of the authorized user of the

network. This mitigates the threat of an unauthorized person bypassing the previous security

measures and obtaining the data from the source. We will create and test the backups of all

servers to be stored both locally, for fast recovery, and offsite, to prevent a complete data loss in

the event of a local disaster. All software will be automatically updated to patch any known

security lapses in the network



4.1 Solution Details

Spacean (Team D) will provide all necessary configurations, installation guides along

with all pre and post testing and pre and post training to all IIS at all locations.

4.1.1 Network Details

Spacean has proposed a network that meets all the requirement’s that ISS has brought to

our attention. The network will provide security, reliability, scalability and will be easily

manageable by the IIS information technology team. The design of the network will utilize state

of the art design protocols and concepts to ensure the future proof.

4.1.2 Network Topology

The overall design of the network prosed encompasses proven enterprise network design

concepts. For the HQ located in Dallas (Figure 1A), we used a 3 tier design approach. We also

included a separate but connected datacenter that will have a direct interconnection to the Fairfax

office so we can ensure all data is security transferred between both offices. (Figure 1B). The

aggregation of the WAN will be handled by 2 Cisco ASR (1002) routers and will be protected by

two Cisco firewalls (ASA 5545-X). The HQ will utilize 20G Ethernet throughout the core and

distribution layers in both the enterprise and datacenter networks. The distribution layer will

connect to the access layer via 10G Ethernet and all end devices will connect by1G uplinks.



(Figure 1A)



For all branch office locations, Spacean proposed using cisco collapsed core/distribution.

By using this concept, we were able to reduce the cost at each branch location without losing the

security, reliability and scalability aspect. With the lower number of employees at the branch

locations this design fits perfectly with requirements IIS provided. The WAN aggregation will be

handled by two cisco routers (4451-X) and again be protected by two Cisco firewalls (ASA

5515-X) both networks will utilize Cisco OSPF and HSRP routing protocols and will allow for

easy and seamless scalability by adding additional devices to any layer with little to no down

time.



4.1.3 Networking Protocols

Spacean choose to utilized all standard protocols for the architecture and design of the IIS

network thus allowing for ease of operation and increased uptime. Within the Core and

Distribution of the HQ, Branch locations and the datacenter, a routed design will be

implemented. We also choose to move the demarcation from the distribution layer down to the

access layer, by doing this it allows for faster convergence times and greater availability. We

also choose to utilize (VSS) for the HQ distribution switches, this allows for both the Cisco 4507

switches to act as if there was only one to anything connecting to it thus further increasing the

availability of the network.

OSPF and HSRP are our chosen protocols proposed. OSPF will be used as the routing

protocol within the core, distribution and access demarcation. HSRP will be utilized for

redundancy with multiple links and paths between devices and layers. It should be noted that

even though the access switch connects up to the distribution with a layer 3 protocol, all the end

user devices connecting to it will be connected with the standard layer 2 connections.

4.1.4 Network Addressing

IIS Addressing scheme (From a high-level), each branch location will be allocated a /16

network for all internal addressing. HQ will be hosting the datacenter; it will allocate the block

carefully to avoid assigning multiple subnets to single sections. The HQ block is broken down

into 7 Major blocks. Each of these blocks will be broken down further. This is common practice

with variable length subnet masking, which allows us to break subnets into subnets. Each office

will be given a /20 subnet in their block for allocating IPs to end user's workstations and phones.



This /20, which allows for 4094 IPs, allows for significant growth at each office. This subnet will

be broken down into smaller /24 or /26 networks and assigned to various departments and

groups.

IP Addressing Scheme

Office Subnet UseDallas HQ 10.10.0.0/16 Main Internal Block

10.10.0.0/24 HSRP Block for Core/Distribution 10.10.1.0/24 HSRP Block for Datacenter Core/Distribution 10.10.2.0/23 Datacenter Management Block 10.10.4.0/23 Virtual Server Block 10.10.6.0/24 vMotion Block 10.10.7.0/24 VMKernel Block 10.10.8.0/20 Main Block for End Users

Fairfax 10.20.0.0/16 Main Internal Block 10.20.0.0/24 HSRP Block for Core/Distribution 10.20.8.0/20 Main Block for End Users

London 10.30.0.0/16 Main Internal Block 10.30.0.0/24 HSRP Block for Core/Distribution 10.30.8.0/20 Main Block for End Users

Shanghai 10.40.0.0/16 Main Internal Block 10.40.0.0/24 HSRP Block for Core/Distribution 10.40.8.0/20 Main Block for End Users

WAN 163.19.4.0/24 Primary External Block



4.1.5 Network Naming Convention

A standardized naming scheme will be required for IIS to reduce the complexity of

operations. The domain held by IIS is iis.com. This will provide the basis for the naming

convention utilized throughout the enterprise. For device naming, each location will be within a

subdomain. The subdomains will be da.iis.com, fa.iis.com, lo.iis.com and sh.iis.com. From there,

each device name will pre-fix each subdomain. Utilizing this consistent naming scheme will

allow for easy identification of each device on the network, an example for each location can be

found in the table below.

Location Device Device Name

Dallas 100 ws100.da.iis.com

London 100 ws100.lo.iis.com

Fairfax 100 ws100.fa.iis.com

Shanghai 100 ws100.sh.iis.com



4.1.6 Security Measures

Security within IIS is extremely important along company information. Each site includes

redundant Cisco ASA firewall devices. These devices will provide firewall services, VPN

services and intrusion detection and prevention (IDS/IPS). Although each site is connect to HQ

through a private MPLS connection, the Cisco ASA devices will provide an encrypted tunnel

between the sites, ensuring all data transmitted within the WAN is protected. The IDS/IPS

portions of the ASA's are updated daily from Cisco, this is to ensure all device are update with

the new threats that are released, these databases contain known signatures of network and

application attacks. The devices will be analyzing all the traffic going between the sites, as well

as going in and out of the HQ internet connection for possible attacks. If an attack is detected, it

will automatically block the connection, and adding the source to the database to block and drop

all future attempts.

Each workstation will also be installed with Malwarebytes. This will provide protection

to the end users, both remote and local. Daily file system scanning and real-time memory

scanning provides a level of security that IIS requires. For data coming from the Fairfax

information will be stored on hardware with build it security and biometrics a long with the use

of proven security concepts.



4.1.7 Management Tools

There are quite a few tools utilized within this network to help manage all aspects of the

datacenter and networks. For overall network monitor will use solar winds suite of tools, This gives

us the ability to get a real live view of whole network and the traffic that is flowing across. We can

also view each branch location separating; this is great in helping solve problems. For IP address

management, IPAM will be utilized. This allows for keeping a database of every IP address used

within the enterprise and helps to avoid IP address conflicts. To manage the virtualization

infrastructure, vCenter will be utilized. This gives a single management console for the entire

virtualization cluster. It allows for easy migration between hosts and the ability to easily provision

virtual machines, physical hosts, and virtual networks.

4.1.8 Equipment and Cable Labelling

IIS has a rare opportunity, in that the entire datacenter will be built form the ground up and all

new (Cat 6) wiring will be ran throughout all locations, with that being said this allows for proper

cabling and labeling techniques to be implemented with ease. All cables and equipment will be

labeled, with a consistent naming scheme. Each rack will have biometrics built in to ensure only

authorized personnel have access. Inside every rack there will be a detail diagram of how the

hardware is laid out within the rack along with how each piece of hardware is wired and how they all

connect. Each cable will have a clearly visible labeled at both ends, providing extremely easy tracing

if required during maintenance periods or if a network problem were to arise.



4.1.9 Disaster Prevention and Recovery

It should be noted that disaster recovery was outside of the scope of this project. But due to the

design of the network, all hardware devices will be provided a dual source of power and every link,

server, router and switch has a redundant power connection and multiple paths to ensure that no single

node failure will cease network operations. Redundant core switching, edge routing and firewall

services provides an extremely resilient network infrastructure.

To implement disaster recovery, additional funding would be required so we could set up

hardware in geography dispersed locations.

4.1.10 Software Details

The following section will detail the different operating systems and application utilized

within the organization.

4.1.11 Network Operating Systems

The primary operating systems utilized in the datacenter include Windows Server 2012

Windows 2012 operating systems will make up all of the primary virtual servers hosting the data and

systems for IIS. This allows for easier patching and management, as well as providing an easier time

for operations. With the standardization of the operating systems, templates can be built, offering

greater agility in deploying production and development systems.

All of these systems will be virtualized. The virtualization platform will be provided by

vSphere 5.5.; vSphere is a suite of software that allows for the virtualization of hardware. Consisting

of ESXi, the hypervisor, and vCenter, the control server, a highly-available and fault tolerant cluster



can be formed utilizing the blades within the datacenter. Virtualizing the infrastructure servers allows

for greater flexibility and ease of management by abstracting the hardware into pools of resources.

4.1.12 Workstation Operating System

Spacean chose Microsoft’s Windows 10 Enterprise as operating system for this deployment

was. Having the enterprise version allows for the additional features that IIS requires. The ability to

join domains, and have network file system access built into the operating system make this the

perfect choice for IIS. With the procurement of Microsoft Exchange server and Office suite, having a

Windows operating system for the workstations was a logical choice. Windows 10 will seamless

integrate with active directory giving us the ability to set policies for both office and remote users.

4.1.13 Application Software

The applications chosen for IIS include the Microsoft Office suite, Microsoft Exchange server

and Microsoft Lync. Having these applications running throughout the network allow for seamless

integration within the proposed Microsoft active directory deployment and will give the user the

ability to communicate on the fly along with document creation.

4.1.14 Workstations

For the end-user workstations, Dell was chosen as the hardware manufacture. The Dell

OptiPlex 3020 was the preferred desktop for employees located in the office. The Dell Latitude 3450

was the chosen laptop for all the remote employees. All these workstations in the office are provided

with 24 inch monitors and network printers located throughout each office. With CAT-6 Gigabit

Ethernet to each end user, every employee will have ample bandwidth to complete their tasks.



4.1.15 Servers

The servers utilized within the proposed network will be Cisco UCS B200 M3. These servers

each contain 96GB of RAM and dual Intel Xeon processers. A total of 8 servers, 4 per chassis, will

run all of IIS’s current demands. The B200 M3 is a half-width blade, which means that 8 can be

installed in each chassis. For future computing needs, there is ample space in each chassis to add

additional blades, allowing for seamless scaling. Should a chassis become full, adding an additional

chassis is a simple task.

4.1.16 Network Equipment

The network hardware for the IIS project will consist of only Cisco. Having single vendor

provides ease with the design, management and support.

ENTERPRISE WAN AGGREGATION

Cisco ASR 1002

The ASR 1002 is a 2-rack unit router. It supports 10Gbps embedded services processors and

four built-in gigabit Ethernet ports. The built-in software provides redundancy between the two

routers.

ENTERPRISE FIREWALL

Cisco ASA 5545-X

The ASA 5545-X provides superior network visibility and automation for reducing the threats

from advanced malware. The 5545-X provides 3Gbps of stateful firewall inspection and up to

750,000 concurrent connections.



ENTERPRISE CORE

Cisco Nexus 7700 Series Chassis

The chosen switch for the core in all three areas (Enterprise) is the Nexus 7700. This modular

switch provides the perfect platform for scalability and superior switching throughput. With modules

for 10G all the way to 100G modules, the 7700 chassis is the perfect solution for all three core areas.

ENTERPRISE DISTRIBUTION

Cisco Catalyst 6807-XL Chassis

The distribution switch for the enterprise is the Catalyst 6807-XL. This switch provides

superior performance for distribution and aggregation with up to 11.4 Gbps of switching capacity.

This switch will be utilizing the Virtual Switching System (VSS), which will present the 2 physical

switches as a single switch, providing superior uptime and reliability.

ENTERPRISE ACCESS

Cisco Nexus 3064-32T

The access switch chosen for the datacenter, connecting the servers to the enterprise is the

Nexus 3064-32T. This switch provides 10Gbps and provides cost-effective, power-efficient layer 2

and layer 3 switching for the top-of-rack.

BRANCH WAN AGGREGATION

Cisco 4451-X

The Cisco 4451-X provides superior performance for the branch offices. With 2 of these

routers being utilized at each site, the software provides seamless redundancy. The router also

incorporates a high-speed backplane offering greater performance than competing routers.



Branch Firewall

Cisco 5515-X

Although smaller than the 5555-X utilized at the HQ, the 5515-X provides the right amount of

performance for the smaller branch offices. This router includes all the same features as the 5555-X,

just in a smaller form.

Cisco Nexus 7000 Series Chassis

The chosen switch for the core areas for both (Branch and Datacenter) is the Nexus 7000. This

modular switch provides the perfect platform for scalability and superior switching throughput. With

modules for 1G all the way to 100G modules, the 7000 chassis is the perfect solution for all three core

areas.

ENTERPRISE AND BRANCH ACCESS

Cisco 3850

The Cisco 3850 switches provide enterprise grade stackable switching to the IIS environment.

These switches will provide the Power over Ethernet (PoE) required for the deployment of the IP

phones.

4.1.17 Cabling

The entire enterprise will have new CAT 6 cabling ran. This will allow for Gigabit

Ethernet throughput through the enterprise workstation and end user devices. This will allow for

the expansion and can handle speeds up to 10G or higher.



4.2 Testing Before Installation

Spacean Technologies will conduct online testing, according to the following schedule, after

installing the system.

Test Detail Proposed DateNetwork proof of Concepts 26 December 2016

Server Proof of Concepts 28 December 2016

4.3 Installation Details



Installation Detail Proposed DateCat 6 cables 30 May 2016Network Installation 14 June 2016Server Installation 20 July 2016Storage Installation 24 August 2016Spacean Technologies will need to run all the required cabling to its designated locations.

30 May 2016

Servers will need to be set up and properly configured for various required operations.

28 September 2016

Spacean Technologies will need to ensure complete implementation of network infrastructure

11 November 2016

Spacean Technologies will conduct testing of the network and training

12 December 2016

Spacean Technologies will conduct the completed launch of new network system Dallas

6 January 2017



4.4 Post-Installation



Test Detail Proposed Date

WAN Testing 12 December 2016

Network Crash and Burn Testing 19 December 2016

Hardware Crash and Burn Testing 22 December 2016

4.5 Network Documentation details

Spacean Technologies will provide IIS personnel with the following network

documentation upon completion of this project.

Up to Date Physical Network Diagram

Up to Data Logical Network Diagram

Network User Manual

Support Contacts

Admins Guide

IP Address Listings

Inventory of Hardware

4.6 Training details

Spacean Technologies will train ISS personnel on maintenance, troubleshooting, and

configuration. Training will be scheduled to meet both the teams and clients scheduling limitations.

The following training documents will be provided:



Custom Training Manual

On-Site training for IT personnel

On-Site training for office personnel

Teleconference with all IT personnel from all sites regarding S

The proposed training plan is:

Topic Customer Date Time Location

Training for Dallas personnel IIS 12/5/16-12/30/16

0900-1700 Dallas Site

Training for Shanghai personnel IIS 12/5/16-12/30/16

0900-1700 Shanghai Site

Training for London personnel IIS 12/5/16-12/30/16

0900-1700 London Site

Training for Fairfax personnel IIS 12/5/16-12/30/16

0900-1700 Fairfax Site

Network Security training-all sites IIS 1/2/17 0900-1700 T Teleconference-All Sites

5.0 Financial41 | P a g e S p a c e a n T e c h n o l o g y T e c h n i c a l S o l u ti o n P r o p o s a l


5.1 Customer Budgetary Guidelines

Spacean initial budget was $2 million to design, configure, install and train IIS. We chose

to select equipment that offers superior performance, are highly reliable, easily scalable and

secure, while trying to stay close to the budget. We chose to use CDW as our main vendor and

they have agreed to a 45% discount of all products and service along with a price match for

hardware found cheaper through a different vendor. At list price this project would have cost

well over the initial budget price of $2 million. With CDW’s generous help we were able to

select, build and perfect a network solution that will last for several years and that has the ability

grow as needed. We have worked out a deal with Microsoft and they have agreed to give us a

volume licensing pricing for 5 years at the cost of two. Spacean feels that with these advantages

the system will meet or exceed IIS goals and requirements for the network overhaul project.

5.2 Materials

5.2 MaterialsItem – Manufacturer, Model, and Specs.

Quantity Required

Donation / Inventory / Purchase

Value / Expected Cost

Edge routers 4451-X 6 6/price per unit: $6,000

$36,000.00

Firewalls ASA 5515 X 6 6/price per unit: $3,000.00

$18,000.00

Enterprise Core Nexus 7000 (4-slot) 6 6/price per $21,000.00



unit: $3,500

Datacenter Top of Rack Nexus 3064-32T 2 2/price per unit: $8,500

$17,000.00

Blade Server Chassis UCS 2 2/price per unit: $ 2,900.00

$5,800.00

Fabric Switches MDS 9250i 2 2/price per unit: $7,000.00

$14,000.00

Netapp Storage Array 6 6/per price unit: $20,000.00

$120,000.00

Back Up Power Supply APC Symmetra PX 100kW UPS

1 1/per price unit: $60,805.76

$60,805.76

Raised Floor Installation/1500 sq. ft. (including install)

1 1/price per unit: $26,500.00

$26,500.00

Cisco B200 M3 Blades (4 per chassis)/ Cisco B200 M3 Blades (4 per chassis)

8 8/price per unit: $1,415.99

$11,327.92

Edge Routers ASR-1002 2 2/price per unit: $15,000

$30,000.00

Firewalls ASA 5545-X 2 2/price per unit: $13,728.99

$27,457.98

Enterprise Core Nexus 7700 10-slot 2 2/price per unit: $22,50.00

$45,000.00



Enterprise Distribution Catalyst 6807-XL 2 2/price per unit: $4,858.00

$9,716.00

Enterprise Access Switches WS-C3850-48F-L

69 38/price per unit: $3,000

$207,000.00

Workstations Dell Optiplex 3020 2257 2257/price per unit: $150.00

$338,550.00

Monitors 2257 2257/price per unit: $50

$112,850.00

Printers 140 140/price per unit: $150.00

$21,000.00

Phones CP-7940G 2334 2334/price per unit: $55.00

$128,370.00

Laptops Dell 3470 Latitude 77 77/price per unit: $395.00

$30,415.00

Cable Drops (CAT-6) 2334 2334/price per unit: $150.00

$350,100.00

MPLS London 36 36/price per unit: $1,200.00

$43,200.00

MPLS Fairfax 36 36/price per unit: $1,200.00

$43,200.00

MPLS Shanghai 36 36/price per unit: $1,200.00

$43,200.00



High Bandwidth Internet to HQ 36 36/price per unit: $3,000

$108,000.00

Cisco MDS 9250i 20 port UPG license 1 1/price per unit: $11,956.99

$11,596.99

ASA Licenses (single license for all devices)

1 1/price per unit: $5,000

$5,000.00

VMWare Licenses per VM (50) 50 50/price per unit: $4,078.00

$203,900.00

Installation 1 1/price per unit: $3,069.37

$3,069.37

Training 1 1/price per unit: $125,000.00

$125,000.00

Travel Expenses (Dallas, Fairfax, London, Shanghai.)

5 /price per unit: $6,500.00

$32,500.00

Malwarebytes ($11/3 year license) 2334 2269/price per unit: $9

$21,006.00

Microsoft Office (Volume License) 1 1/Price per unit: 154,000.00

$154,000.00

Configuration/Project Coordination by Team B

5 5/Price per Unit: $50,000

$250,000.00



5.3 Summary Project Budget

[Must include the following as a summary, but a complete budget with justification of each cost is

necessary in the Attachments.]

TOTAL COST COST TO

CLIENT

Hardware ............................................................................................................. $1,630,892.66 $ 1,630,892.66

Software............................................................................................................... $ 395,502.99 $

395,502.99

Installation labor………………………........................................................... $ 200,000.00 $ 125,000.00

Configuration labor............................................................................................. $ 250,000.00 $ 150,000.00

Training labor………………………............................................................... $ 125,000.00 $ 100,000.00

Estimated travel expense.................................................................................... $ 32,500.00 $ 32,500.00

Connections......................................................................................................... $237.600.00 $ 120,000.00

Total ..................................................................................................................... $2,871,795.98 $ 2,553,895.65

Total Savings .......................................................................................................$ 317,900.33

6.0 Budget Conditions

EXCLUSIONS / CLARIFICATIONS / ASSUMPTIONS



1. The DeVry Senior Project Team, Spacean Technologies, is responsible for completion of this

project as detailed in this agreement. All team members listed in section 9.0 share this responsibility

regardless of their standing as students.

2. The project must be completed no later than April 24th, 2016 for Sr. Project credit, although all

students in Spacean Technologies accept the individual responsibility of completing all project details

if they remain at that time. Failure to complete the project in a timely manner or to adhere to the

original scope of the project may subject the students to failure of the Senior Project course.

7.0 Project Close Out

An internal post project review will be held to determine what areas of improvement have

been identified during the project and make sure that positives will be repeated in future projects.

A customer post project review will be held on 12/18/2016 at the Dallas office to discuss aspects of

our performance and provide Spacean Technologies an opportunity to get customer feedback for areas

of improvement.



8.0 Project Organization

9.0 Communication

1. Weekly Status Reports will be issued to cover outstanding issues and the status of the

project.

2. Spacean Technologies suggests all communication relating to this project be conveyed via

email, team meetings, and team discussion. This ensures that everyone involved is working with

the most current information.



3. William Hargis and Brandon Bonnette will serve as Spacean Technologies designated

single point of contacts.

10.0 Approvals

This signature below indicates an understanding in the purpose and content of this document

by those signing it. By signing this document, you indicate that you approve of the proposed

project outlined in this proposal in accordance with the details outlined herein.

Approver Name Title Signature Date

Daniel Munger Client’s Representative



11.0 Appendix

11.1 Proposed Solution Design-Diagrams



11.2 Proposed Internal Design-Diagrams

Seen here is the cable drops for the 1st floor regarding the cameras, call center, AP’s, and security

office.



Seen here is the cable drops for the 2nd floor regarding the cameras, AP’s, IT office, and

all the management personnel. Cat 6 cabling has been running from the IT office located in the

center of the building to be stream line and provide a more proficient flow of the cabling and

services. We chose to centrally locate the IT office on the second floor to protect the equipment

from any natural disasters and also to ensure the design of the infrastructure was balanced for the

work load that would be required. The walls of the IT are painted with RF shielding paint to

eliminate any bleed over or and to prevent frequency issues.



Seen here is the cable drops for the 3rd floor regarding the cameras, AP’s, manufacturing,

sales, customer service, and all the design teams. Ca6 cabling has been ran from the IT office

located in the center of the 2nd floor to be stream line and provide a more proficient flow of the

cabling and services throughout the building.



Dallas security camera pricing:

Camera Type Number of units

Price

Optera 12MP 4 $5,972.20

Pelco Evolution 360° Outdoor Camera

8 $6,399.92

Pelco EVO-12NID 12Mp Indoor 360-Degree Network Indoor Camera

14 $12,180.00

Media converter 1 $832.20

CM6700-MXB SWITCHER/CONTROLLER

1 $1,163.96

Digital Sentry Software and Hardware Video Management System (VMS)

1 $6,254.00

Pelco KBD200A Full Functionality Keyboard Controller, Fixed/Variable Speed, PTZ Control

1 $407.50

Pelco PMCL319BL LED Flat Panel, Dual Input Monitors

4 $1,904.00

TOTAL $33,949.82



11.3 Project Schedule in Gantt Chart Format



Legal



Conclusion

Throughout this proposal, Spacean Technologies has delivered a breakdown as to why

we believe IIS would benefit well from our custom solution. Staying on top with technology is

an overwhelming task that is full of risks and rewards. In this vast industry it is hard to know

who you can count on and depend on to keep up with the changing horizons. We present this

solution to you not only one of the most reputable company in the business, but as a team of

veteran IT professionals who have been in this industry for over 30 years and is a well-

established leader of the industry. We present the details of this proposal with confidence that

our solution and services will keep IIS ahead of its competition. With your approval, we would

like to help you reach your goals and fulfill the needs of your company both now and in the

future.

Title Printed Name Signature Date



References

Confidentiality Agreement. (n.d.). Retrieved March 22, 2016, from BitLaw website:

http://www.bitlaw.com/forms/nda.html

Estes, T. (2011, March 8). Overcoming network distance limitations to PoE cameras. Retrieved

March 29, 2016, from Security Info Watch website:

http://www.securityinfowatch.com/article/10487622/overcoming-network-distance-

limitations-to-poe-cameras

Evolution 360 outdoor camera. (n.d.). Retrieved March 29, 2016, from Pelco website:

https://www.pelco.com/panoramic-ip-cameras/evolution-360-outdoor-dome-camera-

wide-dynamic-range-wdr-low-light#tab/documents

Modular Media Converter Modules. (n.d.). Retrieved March 29, 2016, from Blackbox website:

https://www.blackbox.com/store/us/Detail.aspx/Modular-Media-Converter-Chassis-12-

Slot-1U-High-120--240-VAC-Power-Supply/LE7412A

ONVIF Profile G Specifications. (n.d.). Retrieved March 29, 2016, from ONVIF website:

http://www.onvif.org/portals/0/documents/specs/ONVIF_Profile_G_Specification_v1-

0.pdf

ONVIF releases Profile S for easier management of interoperable devices. (n.d.). Retrieved

March 29, 2016, from ONVIF website: http://www.onvif.org/Default.aspx?

Contenttype=ArticleDet&tabID=113&moduleId=487&Aid=42&PR=PR

Pelco CM6700-MXB4. (n.d.). Retrieved April 7, 2016, from JMAC suooly website:

https://www.jmac.com/Pelco_CM6700_MXB4_p/PELCO-CM6700-MXB4.htm?



gclid=Cj0KEQjwipi4BRD7t6zGl6m75IgBEiQAn7CfF_hJ4V7Ruw7FgMeAoKs5lsPIi3e

u7bzv_UqzRm7mmbUaAuSa8P8HAQ

Pelco EVO-05NMD 5MP Evolution 360° Outdoor Dome Camera, IP66-Rated, Client-Side

Dewarping, WDR, Low-Light. (n.d.). Retrieved March 29, 2016, from Surveliance-Video

website: https://www.surveillance-video.com/camera-evo-05nmd.html/

Pelco EVO-12NID 12 Megapixel Indoor 360-Degree Network Camera Surface Mount, White.

(n.d.). Retrieved March 29, 2016, from Surveillance-Video website:

https://www.surveillance-video.com/camera-evo-12nid.html/?gclid=Cj0KEQjwz-

i3BRDtn53Z5Z7t4PUBEiQA23q2AFJyTED4kCGweaipA08F7V00ylxeK4O3nUe7AlX

UlaEaAqaz8P8HAQ

Pelco KBD200A Full Functionality Keyboard Controller, Fixed/Variable Speed, PTZ Control.

(n.d.). Retrieved April 7, 2016, from B&H photo-video-audio website:

http://www.bhphotovideo.com/c/product/421572-REG/Pelco_KBD200A_KBD200A_Ful

l_Functionality_Keyboard.html

Planning and Design. (n.d.). Retrieved March 30, 2016, from Cisco website:

http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Video/IPVS/IPVS_DG/IPVS-

DesignGuide/IPVSchap4.html


NETW490_IIS Project Proposal Final copy

Documents

Transcript of NETW490_IIS Project Proposal Final copy