Designing Cisco Network Service Architectures - Free Books

Case Study 4: CP Hotels Security and IPsec VPNNetworkThis case study enables you to practice the skills and knowledge learned in the modules up tothis point, especially the “Security Services Design” and the “IPsec and SSL VPN Design”modules.This case study is based on a fictional company, CP Hotels, discussed in a previous case study.You represent a Cisco Partner called in to review the existing CP Hotels addressing and routingdesign, and provide recommendations for improvement.We normally try to use private addressing in case studies. In this case study, we use somefictional public IP address blocks for clarity and a real-world flavor.Activity ObjectiveIn this activity, you will critically review and/or redesign key portions of the CP Hotelsnetwork, using your new Security and IPsec VPN design skills.After completing this activity, you will be able to meet these objectives:• Recommend what type of IPsec VPN CP Hotels should use, and present the pros, cons, andjustification for your recommendation. Determine and present a detailed design for thehotel IPsec VPN, including overall hotel routing with failover, how IPsec reaches the othertunnel endpoint, and detailed IP addressing plan.• Critically review and make recommendations to improve security at CP Hotels, includingspecific items listed below.• Determine and present a design for Network Admission Control (NAC) Appliancedeployment in CP Hotels headquarters (HQ) buildings, including coverage of specific itemslisted below.Visual ObjectiveThere is no visual objective for this case study.Required ResourcesThese are the resources and equipment required to complete this activity:• Case Study guidelines, presented in the Course Introduction• Previous CP Hotels IP Addressing and Routing Case Study Scenario• A workgroup consisting of two to four students• Blank sheets of paper and a pencilCP Hotels Case Study ScenarioSee Case Study 2 for a description of the current CP Hotels network. The diagrams areprovided in this case study for ease of reference.Page 27 Lab Guide © 2007 Cisco Systems, Inc.