Hot Downloads

Welcome, Guest
Username: Password: Remember me

TOPIC: Choosing the better network Topology

Choosing the better network Topology 4 years 2 months ago #38125

Hi everyone,
Im doing some planning my new SOHO and im having some toughts on what is the better topology.

Basically there are three main devices, a catalyst 2960G 24port switch, a 2901 router and an ASA5510 IPS/IDS.

I was wondering should i connect them like that:

1.
<PC>->(SWITCH)->(ROUTER)->(FIREWALL)->(CABLE MODEM)

or just connect everything to a switch and separate them on different vlans like that:
(SW)V2->ROUTER->V3(SW)V3->FIREWALL->V4(SW)V4->CABLE MODEM

In that way i have a star topology and not a chain line like in exibit 1.

Any toughts on that? Basically i need VPN Tunnels to my worplace, secure access from the internet to my storage server and prevent script kiddies/lamers/crackers (the serious kind) getting into my network.
The administrator has disabled public write access.

Re: Choosing the better network Topology 4 years 2 months ago #38131

  • chrnxR
  • chrnxR's Avatar
  • Offline
  • New Member
  • Posts: 19
  • Thank you received: 6
  • Karma: 3
Hey einklienermench,

could you please show both ways in a graphical representation? It will be easier to argue about both ways later on.

-chrnxR
the dreams of yesterday are the hopes of today and the reality of tomorrow.

-Robert H. Goddard
The administrator has disabled public write access.
The following user(s) said Thank You: einklienermench

Re: Choosing the better network Topology 4 years 2 months ago #38132

Fig1:

Fig2:


What do you think?
My biggest concern are actual penetrations rather than brute force Dos/DDos Botnet attacks.

Any idea guys?
The administrator has disabled public write access.

Re: Choosing the better network Topology 4 years 2 months ago #38133

  • chrnxR
  • chrnxR's Avatar
  • Offline
  • New Member
  • Posts: 19
  • Thank you received: 6
  • Karma: 3
Hey,

First of all... i think your network like you showed it in Fig1 would be fine. Cause i think if youre really setting up your home office then this should do the job. Another reason why i wouldnt go to far with this stuff is because troubleshooting will later become a real pain (in my opinion).

Let's compare the graphics a bit.
In Fig1 you assigned every componnent in Line which costs less installation work, less configuration work,.....small and simple, thats good.

In Fig2 you assigned every componnent in a star topology(physically)...and then you configured it to be in line(logically) like in Fig1 which takes a lot of work.

so basically Fig2 is the same as Fig1 just way more complicated, maybe even more unsafe and causes a slower network.

I think you should go for Fig1 and if you really really really really want to improve you can still use subnetting. Heres something for EXAMPLE:

Attachment topology1.jpg not found



Like in my graphic you can assign adresses 10.98.34.65/30 and 10.98.34.66/30 to subnet 1 and adresses 172.16.43.221/30 and 172.16.43.222/30 to subnet 2
the dreams of yesterday are the hopes of today and the reality of tomorrow.

-Robert H. Goddard
The administrator has disabled public write access.

Re: Choosing the better network Topology 4 years 2 months ago #38136

  • Chris
  • Chris's Avatar
  • Offline
  • Administrator
  • Posts: 1446
  • Thank you received: 13
  • Karma: 8
einklienermench,

chrnxR's suggestion is pretty good. I think it would be more than adequate if you placed only the Firewall in front of your LAN. A properly configured ASA with IPS is more than enough to handle the traffic from your cable modem, terminate VPN sessions on it and create a DMZ zone to offer public services.

A lot of companies tend to use only routers without any firewall and do all the above on a single router, so I guess your in great shape!

If you have a second Internet connection at some point in the future, you can then place the router in front of the Firewall and perform policy based routing, so you can separate the traffic between your two Internet lines, with IP SLA for automatic Backup.

You can read more on IP SLA here:
www.firewall.cx/cisco-technical-knowledg...ter-ipsla-basic.html

And then move to IP SLA with Policy Based Routing:
www.firewall.cx/cisco-technical-knowledg...a-auto-redirect.html

Hope that helps!
Chris Partsenidis.
Founder & Editor-in-Chief
www.Firewall.cx
The administrator has disabled public write access.

Re: Choosing the better network Topology 3 years 8 months ago #38265

Hello Guys according to my thinking before setting up a new network,it is important to have details about the topologies.A Topology is a sensible system framework.Think of a topology as a network's unique form or framework. This form does not actually match to the real framework of the gadgets on the system.There are 5 kinds of topology like bus,ring,star,tree,mesh.Thanks a lot for sharing!!
The administrator has disabled public write access.
Time to create page: 0.085 seconds

CCENT/CCNA

Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V

Linux

  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup