VPN - Network Restructuring (Network Design and Equipment)

Author

Network Restructuring (Network Design and Equipment)

hunkgym

2006-05-16, 1:12 pm

Network Restructuring (Network Design and Equipment)

This is the real commercial problem face by my company. Well, the
reason I ask this problem is I salute and respect all of

you as I believe all of you are as good as network solution company out
there, or even better!!

Lets me rephrase the entire problem again.

Company expand so fast that the IT infrastructure is not fast enough to
cater high volume of traffic; the initial design is

not scalable. The number of new branch offices setup caused the company
pay a high price in the leased line communication.
Salesman and management staffs dial into company networks via 56K modem
to access the database server and update the sale

order. All the branch offices access the internet via HQ and download
email via the external POP3 email server.
Plan to revamp their IT infrastructure and reduce the leased line
access cost. Here are some of the feedbacks consolidated

from the various country managers and local salesman.
1) The email downloading and sending is very slow. They receive a lot
of spam email this caused their individual mailbox

quota use up very fast.
2) The sales and marketing departments need to access the internet to
search for latest news and market trends. But the

internet speed is very slow. These people are irritated by spywares and
popup often.
3) The File transfer and Database access is very slow even in the local
area networks.

I decided to put the real network cum equipment diagram of my current
company as I believe this will at least give INSIGHT in

solving the problem.

Please visit the website http://www.hgym.photosite.com
for the diagrams which are network diagram and equipment diagram.

Now I plan to improve the IT infrastructure to cater for future
expansion up to 10 countries. SAP will be implement to

automate the overall company operation. Also expect 3rd party to access
their server to submit and view sale order.

I also plan to redesign the network so that it is high available,
scalable and secure.

Any suggestion and opinion? What is your comment after looking at my
network and its insfrastructure (from the diagrams on

http://www.hgym.photosite.com )
Any improving needed?

My email is hunkgym@yahoo.com Of course you can reply here, preferable
:>

Thanks again for your opinion!! Thank You!!

Howard Johnson

2006-05-16, 1:12 pm

In article <1147786933.795427.286840@i40g2000cwc.googlegroups.com>,
hunkgym <hunkgym@yahoo.com> wrote:

>Company expand so fast that the IT infrastructure is not fast enough to
>cater high volume of traffic; the initial design is
>not scalable. The number of new branch offices setup caused the company
>pay a high price in the leased line communication.

From the diagram you link to, it appears that you have dedicated 56K
ISDN links from your 7 branch offices (6@20 users and 1@30 users) to
your HQ in Stockholm (160 users). I'd expect performance on the order
of DSL (>= 10x existing capacity). Some kind of point-to-point VPN box
for each branch office (and HQ) should be added, eventually replacing
the existing dedicated (ISDN?) links. I would start with your nearest
branch office (Blekinge?) and get that working first. These VPN boxes
(or additional VPN boxes) should also accept inbound VPN sessions from
your mobile staff.

>Salesman and management staffs dial into company networks via 56K modem
>to access the database server and update the sale
>order. All the branch offices access the internet via HQ and download
>email via the external POP3 email server.
>Plan to revamp their IT infrastructure and reduce the leased line
>access cost. Here are some of the feedbacks consolidated
>from the various country managers and local salesman.
>
>1) The email downloading and sending is very slow. They receive a lot
>of spam email this caused their individual mailbox quota use up very fast.

You need to have a better spam filter in front of your email server(s).
There are software solutions and black-box solutions, depending on your
budget and expertise, but you do need something.

>2) The sales and marketing departments need to access the internet to
>search for latest news and market trends. But the internet speed is
>very slow. These people are irritated by spywares and popup often.

Consider allowing branch office routers to direct general internet
traffic directly through their DSL/local internet connections. This
helps scalability and availability, but consider the policies you have
for internet traffic. Some kind of firewall capability is expected
for the number of users you will have. Look for this when you shop
for your VPN solution.

>3) The File transfer and Database access is very slow even in the local
>area networks.

The recommendations shown above should help your situation. Another
possibility is to make your file/database/email servers dual-homed so
your local corpnet is separate from the server network that your VPNs
and ISP connections are attached to.

>Please visit the website http://www.hgym.photosite.com
>for the diagrams which are network diagram and equipment diagram.
>
>Now I plan to improve the IT infrastructure to cater for future
>expansion up to 10 countries. SAP will be implement to
>automate the overall company operation. Also expect 3rd party to access
>their server to submit and view sale order.

Allowing inbound VPN connections at your HQ can satisfy the 3rd-party
access requirement, but you may want to limit the servers that these
people have access to.

>I also plan to redesign the network so that it is high available,
>scalable and secure.

Distributed file servers and replicated databases would come later.
Consider Service-Level Agreements from your ISP venders.

>Any suggestion and opinion? What is your comment after looking at my
>network and its insfrastructure (from the diagrams on
>http://www.hgym.photosite.com) Any improving needed?
>
>My email is hunkgym@yahoo.com Of course you can reply here, preferable

William Alcantara

2006-05-18, 1:13 am

I think you need an SSL VPN solution that does not require any leased
lines. You will only need an internet connection for each of your remote
offices.

Check this company out, they provide managed SSL service.

http://www.netifice.com aka MegaPath Inc.

Hey dont forget to buy something from my store too. Thanks.
http://www.bluedtm.com

hunkgym wrote:
> Network Restructuring (Network Design and Equipment)
>
>
>
>
> This is the real commercial problem face by my company. Well, the
> reason I ask this problem is I salute and respect all of
>
> you as I believe all of you are as good as network solution company out
> there, or even better!!
>
> Lets me rephrase the entire problem again.
>
> Company expand so fast that the IT infrastructure is not fast enough to
> cater high volume of traffic; the initial design is
>
> not scalable. The number of new branch offices setup caused the company
> pay a high price in the leased line communication.
> Salesman and management staffs dial into company networks via 56K modem
> to access the database server and update the sale
>
> order. All the branch offices access the internet via HQ and download
> email via the external POP3 email server.
> Plan to revamp their IT infrastructure and reduce the leased line
> access cost. Here are some of the feedbacks consolidated
>
> from the various country managers and local salesman.
> 1) The email downloading and sending is very slow. They receive a lot
> of spam email this caused their individual mailbox
>
> quota use up very fast.
> 2) The sales and marketing departments need to access the internet to
> search for latest news and market trends. But the
>
> internet speed is very slow. These people are irritated by spywares and
> popup often.
> 3) The File transfer and Database access is very slow even in the local
> area networks.
>
> I decided to put the real network cum equipment diagram of my current
> company as I believe this will at least give INSIGHT in
>
> solving the problem.
>
> Please visit the website http://www.hgym.photosite.com
> for the diagrams which are network diagram and equipment diagram.
>
> Now I plan to improve the IT infrastructure to cater for future
> expansion up to 10 countries. SAP will be implement to
>
> automate the overall company operation. Also expect 3rd party to access
> their server to submit and view sale order.
>
> I also plan to redesign the network so that it is high available,
> scalable and secure.
>
> Any suggestion and opinion? What is your comment after looking at my
> network and its insfrastructure (from the diagrams on
>
> http://www.hgym.photosite.com )
> Any improving needed?
>
> My email is hunkgym@yahoo.com Of course you can reply here, preferable
> :>
>
> Thanks again for your opinion!! Thank You!!
>
>

William Alcantara

2006-05-18, 1:13 am

hunkgym

2006-05-18, 1:12 pm

Thanks!

hunkgym

2006-05-18, 1:12 pm

Anyway just wanna say THANK YOU for sharing ur opinion on VPN. So the
satellite office no longer access through the router in
HQ?

Can you roughly sketch out what is in your mind ( which include
network design diagram and Equipment Diagram) as A PICTURE WORTH A
THOUSAND WORD!

Thanks again for sharing!! Thanks!!

William Alcantara

2006-05-19, 1:13 am

Hello Hunkgym

I cant really create one right now. But I bet you if you try to contact
those folks at Netifice / Megapath, they will be able to provide the
answers you would need. I can only tell you that a handful of the global
500 uses their service. It wouldnt hurt to get a demo from them.

hunkgym wrote:
> Anyway just wanna say THANK YOU for sharing ur opinion on VPN. So the
> satellite office no longer access through the router in
> HQ?
>
> Can you roughly sketch out what is in your mind ( which include
> network design diagram and Equipment Diagram) as A PICTURE WORTH A
> THOUSAND WORD!
>
>
> Thanks again for sharing!! Thanks!!
>
>