This project is a high-availability enterprise network simulation designed in GNS3 Project Overview This repository contains the configuration and architecture for a simulated Enterprise Network. The infrastructure is designed to provide seamless connectivity between a Customer Office and a DataCenter while maintaining strict security protocols and high availability.
Network Architecture The topology is organized into four functional layers:
Access Layer: Consists of SW6 and SW7, providing connectivity for end-user devices across VLANs 10, 20, 30, and 40.
Distribution and Core Layer: Features multi-layer switches (SW4, SW5, Core-SW1, Core-SW2) handling inter-VLAN routing and DHCP services.
ISP Layer: Two providers (ISP1, ISP2) facilitate communication between the office and the data center using the RIPv2 routing protocol.
DataCenter Layer: Houses critical infrastructure including AAA, DNS, HTTP, and TFTP servers on dedicated segments.
Security Implementation
Dynamic ARP Inspection (DAI): Validates ARP packets against the DHCP snooping database to prevent ARP poisoning attacks.
DHCP Snooping: Filters untrusted DHCP messages and builds the binding database required for DAI.
Port-Security: Restricts interface access to specific MAC addresses using the sticky method to prevent unauthorized hardware connections.
AAA (Authentication, Authorization, and Accounting): Centralized management of equipment access via a TACACS+ server named AAA.
Infrastructure Hardening: All unused physical interfaces on routers and switches are administratively disabled to eliminate physical entry points.
Redundancy and High Availability
HSRP (Hot Standby Router Protocol): Provides gateway redundancy for all VLANs, ensuring that if one router or core switch fails, the standby unit takes over immediately.
EtherChannel: Aggregates multiple physical links into a single logical trunck to increase bandwidth and provide link-level redundancy.
Rapid-PVST+: Ensures a loop-free topology with fast convergence times during network changes.
Technical Specifications Simulated Hardware: Cisco IOSv (L2 and L3 images).
Endpoints: VPCS and Linux-based Docker containers for server roles.
L2 Protocols: VLANs, 802.1Q Trunking, LACP, PVRST+, Port-Security, DHCP Snooping, DAI.
L3 Protocols: HSRP, RIPv2, Static Routing.
Verification
DHCP Assignment: PC1 through PC4 obtain IP addresses from the Core-SW1 DHCP pools .
Security Checks: Use show ip dhcp snooping binding and show ip arp inspection statistics to verify active protection.
Connectivity: Full reachability is confirmed via ICMP pings from the Office VLANs to the DataCenter server IPs (e.g., 172.16.20.10 for HTTP)