CompletedNetwork engineer, solo
MinoXis
Four sites of an AI institute, joined into one secure network.
- Status
- Completed
- Sites
- 4
- Routing protocols
- 4
- Gateway failover
- HSRP
What needed solving.
A data center, an education center, a lab center and a home office each needed their own design, yet every staff device had to reach every other one, get its address from Beijing, and stay safe from the internet.
How I built it.
- 01Spine-leaf in Beijing on RIP, three-tier in Shenzhen on OSPF, and EIGRP in Shanghai, all joined by BGP between the edge routers.
- 02HSRP in every region so a failed gateway does not take the floor offline, and EtherChannel on every multi-cable link.
- 03An ASA firewall with a DMZ that lets the internet reach only Beijing's HTTP and SMTP servers.
- 04Central DHCP, DNS, NTP, Syslog and AAA in Beijing, with SSH, SNMP and VTP on every device.
- 05VLANs per division, Wi-Fi with a WLC, IoT devices and VoIP phones, and an IPSec VPN for the Hangzhou home office.
Stack
Cisco Packet TracerBGPOSPFEIGRPRIPASA