Re: Network Restructuring (Network Design and Equipment)
- From: hjohnson@xxxxxxxxxxxxxxxxxxxxx (Howard Johnson)
- Date: Tue, 16 May 2006 16:46:04 +0000 (UTC)
In article <1147786933.795427.286840@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
hunkgym <hunkgym@xxxxxxxxx> wrote:
Company expand so fast that the IT infrastructure is not fast enough to
cater high volume of traffic; the initial design is
not scalable. The number of new branch offices setup caused the company
pay a high price in the leased line communication.
From the diagram you link to, it appears that you have dedicated 56KISDN links from your 7 branch offices (6@20 users and 1@30 users) to
your HQ in Stockholm (160 users). I'd expect performance on the order
of DSL (>= 10x existing capacity). Some kind of point-to-point VPN box
for each branch office (and HQ) should be added, eventually replacing
the existing dedicated (ISDN?) links. I would start with your nearest
branch office (Blekinge?) and get that working first. These VPN boxes
(or additional VPN boxes) should also accept inbound VPN sessions from
your mobile staff.
Salesman and management staffs dial into company networks via 56K modem
to access the database server and update the sale
order. All the branch offices access the internet via HQ and download
email via the external POP3 email server.
Plan to revamp their IT infrastructure and reduce the leased line
access cost. Here are some of the feedbacks consolidated
from the various country managers and local salesman.
1) The email downloading and sending is very slow. They receive a lot
of spam email this caused their individual mailbox quota use up very fast.
You need to have a better spam filter in front of your email server(s).
There are software solutions and black-box solutions, depending on your
budget and expertise, but you do need something.
2) The sales and marketing departments need to access the internet to
search for latest news and market trends. But the internet speed is
very slow. These people are irritated by spywares and popup often.
Consider allowing branch office routers to direct general internet
traffic directly through their DSL/local internet connections. This
helps scalability and availability, but consider the policies you have
for internet traffic. Some kind of firewall capability is expected
for the number of users you will have. Look for this when you shop
for your VPN solution.
3) The File transfer and Database access is very slow even in the local
area networks.
The recommendations shown above should help your situation. Another
possibility is to make your file/database/email servers dual-homed so
your local corpnet is separate from the server network that your VPNs
and ISP connections are attached to.
Please visit the website http://www.hgym.photosite.com
for the diagrams which are network diagram and equipment diagram.
Now I plan to improve the IT infrastructure to cater for future
expansion up to 10 countries. SAP will be implement to
automate the overall company operation. Also expect 3rd party to access
their server to submit and view sale order.
Allowing inbound VPN connections at your HQ can satisfy the 3rd-party
access requirement, but you may want to limit the servers that these
people have access to.
I also plan to redesign the network so that it is high available,
scalable and secure.
Distributed file servers and replicated databases would come later.
Consider Service-Level Agreements from your ISP venders.
Any suggestion and opinion? What is your comment after looking at my.
network and its insfrastructure (from the diagrams on
http://www.hgym.photosite.com) Any improving needed?
My email is hunkgym@xxxxxxxxx Of course you can reply here, preferable
- Follow-Ups:
- Re: Network Restructuring (Network Design and Equipment)
- From: hunkgym
- Re: Network Restructuring (Network Design and Equipment)
- References:
- Network Restructuring (Network Design and Equipment)
- From: hunkgym
- Network Restructuring (Network Design and Equipment)
- Prev by Date: Network Restructuring (Network Design and Equipment)
- Next by Date: BT voyager 210 and VPN
- Previous by thread: Network Restructuring (Network Design and Equipment)
- Next by thread: Re: Network Restructuring (Network Design and Equipment)
- Index(es):
Relevant Pages
|
Loading
