Computer Networks (CMP172)

Final Project

Designing and Simulating a Secure Company Network

CONTENT
Section 1: Overview of Assessment
Section 2: Task Specification
Section 3: Deliverables
Section 4: Marking Criteria

Section 1: Overview of Assessment

Submission deadline: Before 23:59 on Friday 04th April 2025
This assignment assesses the following module learning outcomes:
1. Apply core concepts of computer networking such as protocols, topologies, and IP
addressing.
2. Design and simulate a small to medium-sized network with appropriate
configuration and security.
3. Analyze and troubleshoot network performance and security issues.

This assessment requires students to apply their understanding of computer networking

concepts by designing, configuring, and simulating a secure network for a hypothetical
mid-sized organization. The project aims to reflect real-world scenarios, where students
take on the role of a junior network engineer responsible for planning and deploying a
functional network infrastructure.
Students will use the simulation tool Cisco Packet Tracer to implement their network
designs, ensuring appropriate use of IP addressing, routing protocols, LANs, and essential
network services such as DHCP, DNS, and FTP. Additionally, students will incorporate
basic security features to protect the network from common threats, demonstrating their
understanding of firewalls, access control lists (ACLs), and other security
countermeasures.
To deepen their learning, students will also research and explain key networking topics,
including the differences between routing protocols, the purpose of NAT, the function of
Layer 2 vs. Layer 3 devices, and the role of network monitoring tools.
The final submission will include a working simulation file and a comprehensive report
with design justifications and configuration details.
This project is designed to assess both theoretical understanding and practical skills in
computer networking and to prepare students for real-world challenges in IT and network
administration roles.

Section 2: Task Specification

You have just been hired as a network engineer to design and implement the internal
network infrastructure for a growing mid-sized company of your choice. The company
must have at least five departments (e.g., HR, Finance, IT, Sales, and R&D).
Your task is to design and simulate a reliable and secure network that:
• Connects all departments efficiently
• Supports essential services such as web hosting and file sharing
• Implements basic security features to protect against common threats
You are expected to select a realistic company scenario and justify your design decisions
based on its specific needs.
You’ll use the tool Cisco Packet Tracer to build and test your network. The final result
should be a working simulation with documentation that explains how and why you built
it the way you did.

What You Need to Do

1. Plan the Network
• Create a clear network diagram showing:
o Different departments (at least 3: e.g., HR, IT, and Sales)
 o Routers, switches, and computers
o How everything connects (with IP addressing and subnetting)
• Apply proper subnetting and IP address planning using CIDR notation
• Use private IP ranges and explain your IP address allocation choices

2. Configure the Devices

• Set up routers and switches with proper routing (static or dynamic like OSPF/RIP)
• Create LANs to separate departments and limit broadcast domains
• Configure DHCP and DNS servers
• Ensure inter-LAN routing if needed

3. Set Up Network Services

• Deploy at least two basic services:
o A web server that client PCs can access
o A file transfer service (e.g., FTP or SFTP)
• Add optional services such as email or VoIP (extra credit)

4. Add Security Features

• Use Access Control Lists (ACLs) to filter traffic
• Implement a basic firewall policy (explain rules)
• Simulate one or two common network threats (e.g., DoS, spoofing) and explain your
countermeasures
• Optional: Set up VPN or secure remote access

5. Research-Based Requirements
• You must include brief explanations in your report (1–2 paragraphs each) for the
following:
o What is the difference between Layer 2 and Layer 3 switches, and when would
you use each?
o Compare RIP vs. OSPF routing protocols—why did you choose one over the
other?
 o Explain what a DMZ (Demilitarized Zone) is and when it should be used
o Discuss the role of network monitoring tools (e.g., Wireshark, SNMP, or
NetFlow)
o Explain how NAT (Network Address Translation) works and why it is commonly
used in enterprise networks

6. Document Everything
• The final report should include:
o Network topology diagram (with labels)
o IP address/subnet table
o Configuration summaries or screenshots
o Answers to research questions

Section 3: Deliverables
Students are required to submit the following:
• A simulation file in .pkt format (created using Cisco Packet Tracer)
• A final report in PDF or Word format
All files must be compressed into a single ZIP file.
Filename format: studentname_id.zip
(Example: PhanTanHoa_ 2280601004_NguyeHoangHuy_ 2280601179.zip)
Submission Instructions:
Submit the ZIP file to both of the following:
1. Google Classroom (under the assigned project submission)
2. Email to: [email protected]

Section 4: Marking Criteria (Total: 100 points)

Criteria Score Range Description
Network Design (20 pts) 17–20 Comprehensive and
realistic design; correct IP
 planning with subnetting
and CIDR
13–16 Mostly correct design with
minor issues
9–12 Design lacks clarity or has
several errors
0–8 Incomplete or incorrect
network design
Device Configuration (25 20–25 All devices configured
pts) correctly; effective routing
and LAN setup
15–19 Most configurations are
functional with few issues
10–14 Multiple configuration
issues but network is
partially functional
0–9 Major errors or missing
configuration
Network Services (15 pts) 12–15 All services implemented
correctly and accessible
8–11 Some services not
functioning as expected
4–7 Services implemented but
not working correctly
0–3 Services missing or non-
functional
Security Features (15 pts) 12–15 Strong security measures
applied; threat mitigation
demonstrated
8–11 Basic security applied with
 some limitations
4–7 Security features minimal
or misconfigured
0–3 No security features
included
Research Explanations 12–15 All topics clearly explained
(15 pts) with technical accuracy
and relevance
8–11 Most topics explained with
minor issues
4–7 Incomplete or unclear
explanations
0–3 Little to no effort in
research or explanation
Report Quality (10 pts) 9–10 Professional, clear, and
well-organized report with
all required elements
6–8 Generally clear with minor
formatting or content
issues
3–5 Poorly organized or
missing several key
elements
0–2 Incomplete or missing
report

Notes
• You may work individually or in pairs.
• Pick any realistic organization (e.g., clinic, school, online shop).
• Creativity and effort in both design and research will be rewarded.