UMUC Implementing Wireless Networks In Hospital Technology Presentation Hello, Take a look at the posted side show and then add in about 10 slides to t
UMUC Implementing Wireless Networks In Hospital Technology Presentation Hello,
Take a look at the posted side show and then add in about 10 slides to the project, discussing the how the Wireless network is now deployed and operational; after action review/lessons learned; documentation.
I have attached part 1 and part 2 of the slideshow.
Thank You Group5 LLC Metro
Hospital Technology
Refresh
Jay Pederson, Casey Rapnicki, Antoinette Riley
The purpose of this project is to refresh the wireless network
in Metro Hospital, which has been neglected for some time,
to current standards.
The network will have redundancy built in not only for
security, but also for resiliency to downtime.
Introduction
While this projects focus is on the wireless networking,
several other network upgrades may need to happen to
ensure performance and security are maintained.
Access and security are the top priorities in this project. With
attacks on network infrastructures globally happening daily,
securing your patient and staffs PII is a top priority.
Overview
The network will be setup to be highly available (HA),
with redundant systems to allow operation, even if a
piece of equipment fails.
The security approach will use the defense-in-depth
(DiD) strategy. Barnum, Gegick, & Michael (2005)
define DiD as the layering of security defenses which
utilize redundant security systems which requires an
attack to break each layer of defense.
Using a dual firewall approach, attacks will be
required to break another pair firewalls to be able to
access the production network.
Network Firewalls
Juniper SRX4600
? 95 Gbps firewall performance
? 65 Gbps IPS performance
? 55 Gbps VPN performance
? 60 million concurrent sessions
Network Switches
Juniper EX4300
? 320 Gbps Backplane
? 496 Gbps Data Rate
? 369 Mpps (wire speed) Throuhput
Aruba AP-505
? 1 WAP per every 2,500 sq/ft (Cisco, 2015, pg. 18-2).
Wireless Access Points
?
?
?
?
802.11a/b/g/n/ac/ax, Bluetooth 5.0
Bands: 2.4 GHz, 5 GHz
Data Rate: 1.2 Gbps
PoE
Wireless Controller
Aruba 7210 Mobility Controller
? 512 Max Wireless Access Points
? 16,384 maximum concurrent users
VPN Appliance
Pulse Secure PSA3000
? 200 concurrent SSL VPN users
? 1 Gbps throughput
Equipment cost
Name
Quantity
Cost/Unit
Total Cost
Juniper SRX4600
4
$119,000
$476,000
Juniper EX4300
6
$3,040
$18,240
120
$621
$74,520
Aruba 7210 Mobility Controller
1
$29,000
$29,000
Pulse Secure PSA3000
2
$3,900
$7,800
Totals
–
–
$579,460
Aruba AP-505
References
Barnum, S., Gegick, M., & Michael, C. C. (2005, September 13). Defense in Depth. Retrieved from
https://www.us-cert.gov/bsi/articles/knowledge/principles/defense-in-depth
cdw.com. (n.d.). HPE Aruba 7210 (US) – network management device – JW780A – Wireless Controllers. Retrieved
from https://www.cdw.com/product/hpe-aruba-7210-us-network-management-device/4361272
cdw.com. (n.d.). HPE Aruba AP-505 (US) – Campus – wireless access point – R2H29A – Wireless Access Points.
Retrieved from https://www.cdw.com/product/hpe-aruba-ap-505-us-campus-wireless-accesspoint/5795028
cdw.com. (n.d.). Juniper EX4300 24-Port E-Rate Bundle Ethernet Switch with 3-Year Support – B-EX4300-24PEDU – Fixed (Managed) Switches. Retrieved from https://www.cdw.com/product/juniper-ex4300-24-porte-rate-bundle-ethernet-switch-with-3-year-support/5338550
cdw.com. (n.d.). Juniper Networks SRX4600 Services Gateway – security appliance – SRX4600-AC Firewalls/UTMs. Retrieved from https://www.cdw.com/product/juniper-networks-srx4600-servicesgateway-security-appliance/5037092
cdw.com. (n.d.). Pulse Secure Junos PSA3000 – security appliance – PSA3000 – Firewalls/UTMs. Retrieved from
https://www.cdw.com/product/pulse-secure-junos-psa3000-security-appliance/3799893
References
Cisco. (2015, December 17). Capacity Planning and High Density. Retrieved from
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access
/CMX/CMX_CapPlanHiDen.pdf
Group5 LLC Metro
Hospital Technology
Refresh
Jay Pederson, Casey Rapnicki, Antoinette Riley
The purpose of this project is to refresh the wireless network
in Metro Hospital, which has been neglected for some time,
to current standards.
The network will have redundancy built in not only for
security, but also for resiliency to downtime.
Introduction
While this projects focus is on the wireless networking,
several other network upgrades may need to happen to
ensure performance and security are maintained.
Access and security are the top priorities in this project. With
attacks on network infrastructures globally happening daily,
securing your patient and staffs PII is a top priority.
Logical Topology
The network will be setup to be highly available (HA),
with redundant systems to allow operation, even if a
piece of equipment fails.
The security approach will use the defense-in-depth
(DiD) strategy. Barnum, Gegick, & Michael (2005)
define DiD as the layering of security defenses which
utilize redundant security systems which requires an
attack to break each layer of defense.
Using a dual firewall approach, attacks will be
required to break another pair firewalls to be able to
access the production network.
Physical Topology
Every floor will have a two stacked
48 port 1Gb POE switches in a
secured room, connected via fiber to
the MDF.
The core switching will have two
stacked fiber connections from each
IDF switch, plugging into each fiber
switch in the MDF for a total of four.
The fiber switches will then be
connected to three stacked 1Gb POE
switches in a secured room (MDF).
These switches will connect the IDF
switches to various server devices
and the internet.
Network Firewalls
Juniper SRX4600
? Prevents unauthorized access
? Technical Specification
?
?
?
?
95 Gbps firewall performance
65 Gbps IPS performance
55 Gbps VPN performance
60 million concurrent sessions
Fiber Switch
Juniper EX4600
? Two in core switching (MDF) for redundancy.
? Technical Specifications
? 320 Gbps Backplane
? 496 Gbps Data Rate
? 369 Mpps (wire speed) Throughput
Network Switches
Juniper EX4300
? Two in each network for failure redundancy.
? Technical Specifications
? 320 Gbps Backplane
? 496 Gbps Data Rate
? 369 Mpps (wire speed) Throughput
Switch Fiber SFP+
10 Gigabit SFP+ LC Multimode Transceiver
? Fiber has longer range than Ethernet cable.
? Technical Specifications
? 10 Gbps data rate
? Up to 300m range
Wireless Access Points
Aruba AP-505
? 1 WAP per every 2,500 sq/ft (Cisco, 2015, pg. 18-2).
? Technical Specification
? 802.11a/b/g/n/ac/ax, Bluetooth 5.0
? Bands: 2.4 GHz, 5 GHz
? Data Rate: 1.2 Gbps
? PoE
Wireless Controller
Aruba 7210 Mobility Controller
? Allows for management of all Wireless Access Points (WAPs).
? Technical Specification
? 512 Max Wireless Access Points, allowing for growth.
? 16,384 maximum concurrent users
VPN Appliance
Pulse Secure PSA3000
? Allows administration staff to securely telework
? Technical Specifications
? 200 concurrent SSL VPN users
? 1 Gbps throughput
Equipment cost
Name
Quantity
Cost/Unit
Total Cost
Juniper SRX4600 (cdw.com, n.d.)
4
$119,000
$476,000
Juniper EX4600 (cdw.com, n.d.)
2
$7,303
$14,606
Juniper EX4300 (cdw.com, n.d.)
9
$4,770
$42,930
120
$621
$74,520
Aruba 7210 Mobility Controller (cdw.com, n.d.)
1
$29,000
$29,000
Pulse Secure PSA3000 (cdw.com, n.d.)
2
$3,900
$7,800
100
$185
$18,500
150 Meter 10Gb Fiber (amazon.com, n.d)
24
$130
$3,120
Juniper SFP+ Transceivers (amazon.com, n.d)
24
$25
$600
–
–
$667,076
Aruba AP-505 (cdw.com, n.d.)
1000 ft Cat6 STP bulk cable (amazon.com, n.d)
Total
Labor and Deployment
Timeline
Service
(chronological order)
Duration
Cost/tech
Techs
Labor hrs
Labor cost
Wireless Site Survey
1 day
–
–
–
$8,000
Adjust BoM (if needed)
2 days
–
–
–
–
2 weeks
–
–
–
–
Network Cable Install
3 days
$80
2
24
$4,000
Equipment Installation
1 week
$150
2
40
$12,000
Equipment Configuration
3 days
$150
2
24
$3,600
TOTAL
24 days
–
6
88
$27,600
Order equipment
Carol, 2017, Fig. 1
References
Barnum, S., Gegick, M., & Michael, C. C. (2005, September 13). Defense in Depth. Retrieved from https://www.uscert.gov/bsi/articles/knowledge/principles/defense-in-depth
cdw.com. (n.d.). HPE Aruba 7210 (US) – network management device – JW780A – Wireless Controllers. Retrieved from
https://www.cdw.com/product/hpe-aruba-7210-us-network-management-device/4361272
cdw.com. (n.d.). HPE Aruba AP-505 (US) – Campus – wireless access point – R2H29A – Wireless Access Points. Retrieved from
https://www.cdw.com/product/hpe-aruba-ap-505-us-campus-wireless-access-point/5795028
cdw.com. (n.d.). Juniper EX Series EX4600 – switch – 24 ports – managed – rack-mountable – EX4600-40F-AFO – Fixed (Managed)
Switches. Retrieved from https://www.cdw.com/product/juniper-ex-series-ex4600-switch-24-ports-managed-rackmountable/3451230
cdw.com. (n.d.). Juniper EX Series EX4300-48P – switch – 48 ports – managed – rack-mountable. Retrieved from
https://www.cdw.com/product/juniper-ex-series-ex4300-48p-switch-48-ports-managed-rack-mountable/3122418
cdw.com. (n.d.). Juniper Networks SRX4600 Services Gateway – security appliance – SRX4600-AC – Firewalls/UTMs. Retrieved
from https://www.cdw.com/product/juniper-networks-srx4600-services-gateway-security-appliance/5037092
cdw.com. (n.d.). Pulse Secure Junos PSA3000 – security appliance – PSA3000 – Firewalls/UTMs. Retrieved from
https://www.cdw.com/product/pulse-secure-junos-psa3000-security-appliance/3799893
References
Cisco. (2015, December 17). Capacity Planning and High Density. Retrieved from
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access
/CMX/CMX_CapPlanHiDen.pdf
Carol, B. (2017, November 29). Retrieved from https://www.pexels.com/photo/wall-clock-at-5-50707582/
amazon.com. (n.d.). 10 Gigabit SFP LC Multi-mode Transceiver, 10GBASE-SR Module for Juniper QFX-SFP10GE-SR/EX-SFP-10GE-SR (850nm, DDM, 300m) . Retrieved from https://www.amazon.com/10GtekQFX-SFP-10GE-SR-EX-SFP-10GE-SR-Transceiver-10GBASE-SR/dp/B00SXTIEB2
amazon.com. (n.d.). 150 Meter 10Gb OM3 Multimode Duplex Fiber Optic Cable (50/125) – LC to LC – Aqua
. Retrieved from https://www.amazon.com/Meter-Multimode-Duplex-FiberOptic/dp/B006MN8WO0
amazon.com. (n.d.). Elite Cat6 Shielded Riser (CMR), 1000ft, FTP, 23AWG, Solid, Pure Copper, 550MHz, UL
Certified, UL-LP Certification, Bulk Ethernet Cable Reel, Blue . Retrieved from
References
Group5 LLC Metro
Hospital Technology
Refresh
Jay Pederson, Casey Rapnicki, Antoinette Riley
The purpose of this project is to refresh the wireless network
in Metro Hospital, which has been neglected for some time,
to current standards.
The network will have redundancy built in not only for
security, but also for resiliency to downtime.
Introduction
While this projects focus is on the wireless networking,
several other network upgrades may need to happen to
ensure performance and security are maintained.
Access and security are the top priorities in this project. With
attacks on network infrastructures globally happening daily,
securing your patient and staffs PII is a top priority.
Overview
The network will be setup to be highly available (HA),
with redundant systems to allow operation, even if a
piece of equipment fails.
The security approach will use the defense-in-depth
(DiD) strategy. Barnum, Gegick, & Michael (2005)
define DiD as the layering of security defenses which
utilize redundant security systems which requires an
attack to break each layer of defense.
Using a dual firewall approach, attacks will be
required to break another pair firewalls to be able to
access the production network.
Network Firewalls
Juniper SRX4600
? 95 Gbps firewall performance
? 65 Gbps IPS performance
? 55 Gbps VPN performance
? 60 million concurrent sessions
Network Switches
Juniper EX4300
? 320 Gbps Backplane
? 496 Gbps Data Rate
? 369 Mpps (wire speed) Throuhput
Aruba AP-505
? 1 WAP per every 2,500 sq/ft (Cisco, 2015, pg. 18-2).
Wireless Access Points
?
?
?
?
802.11a/b/g/n/ac/ax, Bluetooth 5.0
Bands: 2.4 GHz, 5 GHz
Data Rate: 1.2 Gbps
PoE
Wireless Controller
Aruba 7210 Mobility Controller
? 512 Max Wireless Access Points
? 16,384 maximum concurrent users
VPN Appliance
Pulse Secure PSA3000
? 200 concurrent SSL VPN users
? 1 Gbps throughput
Equipment cost
Name
Quantity
Cost/Unit
Total Cost
Juniper SRX4600
4
$119,000
$476,000
Juniper EX4300
6
$3,040
$18,240
120
$621
$74,520
Aruba 7210 Mobility Controller
1
$29,000
$29,000
Pulse Secure PSA3000
2
$3,900
$7,800
Totals
–
–
$579,460
Aruba AP-505
References
Barnum, S., Gegick, M., & Michael, C. C. (2005, September 13). Defense in Depth. Retrieved from
https://www.us-cert.gov/bsi/articles/knowledge/principles/defense-in-depth
cdw.com. (n.d.). HPE Aruba 7210 (US) – network management device – JW780A – Wireless Controllers. Retrieved
from https://www.cdw.com/product/hpe-aruba-7210-us-network-management-device/4361272
cdw.com. (n.d.). HPE Aruba AP-505 (US) – Campus – wireless access point – R2H29A – Wireless Access Points.
Retrieved from https://www.cdw.com/product/hpe-aruba-ap-505-us-campus-wireless-accesspoint/5795028
cdw.com. (n.d.). Juniper EX4300 24-Port E-Rate Bundle Ethernet Switch with 3-Year Support – B-EX4300-24PEDU – Fixed (Managed) Switches. Retrieved from https://www.cdw.com/product/juniper-ex4300-24-porte-rate-bundle-ethernet-switch-with-3-year-support/5338550
cdw.com. (n.d.). Juniper Networks SRX4600 Services Gateway – security appliance – SRX4600-AC Firewalls/UTMs. Retrieved from https://www.cdw.com/product/juniper-networks-srx4600-servicesgateway-security-appliance/5037092
cdw.com. (n.d.). Pulse Secure Junos PSA3000 – security appliance – PSA3000 – Firewalls/UTMs. Retrieved from
https://www.cdw.com/product/pulse-secure-junos-psa3000-security-appliance/3799893
References
Cisco. (2015, December 17). Capacity Planning and High Density. Retrieved from
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Borderless_Networks/Unified_Access
/CMX/CMX_CapPlanHiDen.pdf
Group5 LLC Metro
Hospital Technology
Refresh
Jay Pederson, Casey Rapnicki, Antoinette Riley
The purpose of this project is to refresh the wireless network
in Metro Hospital, which has been neglected for some time,
to current standards.
The network will have redundancy built in not only for
security, but also for resiliency to downtime.
Introduction
While this projects focus is on the wireless networking,
several other network upgrades may need to happen to
ensure performance and security are maintained.
Access and security are the top priorities in this project. With
attacks on network infrastructures globally happening daily,
securing your patient and staffs PII is a top priority.
Logical Topology
The network will be setup to be highly available (HA),
with redundant systems to allow operation, even if a
piece of equipment fails.
The security approach will use the defense-in-depth
(DiD) strategy. Barnum, Gegick, & Michael (2005)
define DiD as the layering of security defenses which
utilize redundant security systems which requires an
attack to break each layer of defense.
Using a dual firewall approach, attacks will be
required to break another pair firewalls to be able to
access the production network.
Physical Topology
Every floor will have a two stacked
48 port 1Gb POE switches in a
secured room, connected via fiber to
the MDF.
The core switching will have two
stacked fiber connections from each
IDF switch, plugging into each fiber
switch in the MDF for a total of four.
The fiber switches will then be
connected to three stacked 1Gb POE
switches in a secured room (MDF).
These switches will connect the IDF
switches to various server devices
and the internet.
Network Firewalls
Juniper SRX4600
? Prevents unauthorized access
? Technical Specification
?
?
?
?
95 Gbps firewall performance
65 Gbps IPS performance
55 Gbps VPN performance
60 million concurrent sessions
Fiber Switch
Juniper EX4600
? Two in core switching (MDF) for redundancy.
? Technical Specifications
? 320 Gbps Backplane
? 496 Gbps Data Rate
? 369 Mpps (wire speed) Throughput
Network Switches
Juniper EX4300
? Two in each network for failure redundancy.
? Technical Specifications
? 320 Gbps Backplane
? 496 Gbps Data Rate
? 369 Mpps (wire speed) Throughput
Switch Fiber SFP+
10 Gigabit SFP+ LC Multimode Transceiver
? Fiber has longer range than Ethernet cable.
? Technical Specifications
? 10 Gbps data rate
? Up to 300m range
Wireless Access Points
Aruba AP-505
? 1 WAP per every 2,500 sq/ft (Cisco, 2015, pg. 18-2).
? Technical Specification
? 802.11a/b/g/n/ac/ax, Bluetooth 5.0
? Bands: 2.4 GHz, 5 GHz
? Data Rate: 1.2 Gbps
? PoE
Wireless Controller
Aruba 7210 Mobility Controller
? Allows for management of all Wireless Access Points (WAPs).
? Technical Specification
? 512 Max Wireless Access Points, allowing for growth.
? 16,384 maximum concurrent users
VPN Appliance
Pulse Secure PSA3000
? Allows administration staff to securely telework
? Technical Specifications
? 200 concurrent SSL VPN users
? 1 Gbps throughput
Equipment cost
Name
Quantity
Cost/Unit
Total Cost
Juniper SRX4600 (cdw.com, n.d.)
4
$119,000
$476,000
Juniper EX4600 (cdw.com, n.d.)
2
$7,303
$14,606
Juniper EX4300 (cdw.com, n.d.)
9
$4,770
$42,930
120
$621
$74,520
Aruba 7210 Mobility Controller (cdw.com, n.d.)
1
$29,000
$29,000
Pulse Secure PSA3000 (cdw.com, n.d.)
2
$3,900
$7,800
100
$185
$18,500
150 Meter 10Gb Fiber (amazon.com, n.d)
24
$130
$3,120
Juniper SFP+ Transceivers (amazon.com, n.d)
24
$25
$600
–
–
$667,076
Aruba AP-505 (cdw.com, n.d.)
1000 ft Cat6 STP bulk cable (amazon.com, n.d)
Total
Labor and Deployment
Timeline
Service
(chronological order)
Duration
Cost/tech
Techs
Labor hrs
Labor cost
Wireless Site Survey
1 day
–
–
–
$8,000
Adjust BoM (if needed)
2 days
–
–
–
–
2 weeks
–
–
–
–
Network Cable Install
3 days
$80
2
24
$4,000
Equipment Installation
1 week
$150
2
40
$12,000
Equipment Configuration
3 days
$150
2
24
$3,600
TOTAL
24 days
–
6
88
$27,600
Order equipment
Carol, 2017, Fig. 1
References
Barnum, S., Gegick, M., & Michael, C. C. (2005, September 13). Defense in Depth. Retrieved from https://www.uscert.gov/bsi/articles/knowledge/principles/defense-in-depth
cdw.com. (n.d.). HPE Aruba 7210 (US) – network management device – JW780A – Wireless Controllers. Retrieved from
https://www.cdw.com/product/hpe-aruba-7210-us-network-management-device/4361272
cdw.com. (n.d.). HPE Aruba AP-505 (US) – Campus – wireless access point – R2H29A – Wireless Access Points. Retrieved from
https://www.cdw.com/product/hpe-aruba-ap-505-us-campus-wireless-access-point/5795028
cdw.com. (n.d.). Juniper EX Series EX4600 – switch – 24 ports – managed – rack-mountable – EX4600-40F-AFO – Fixed (Managed)
Switches. Retrieved from https://www.cdw.com/product/juniper-ex-series-ex4600-switch-24-ports-managed-rackmountable/3451230
cdw.com. (n.d.). Juniper EX Series EX4300-48P – switch – 48 ports – managed – rack-mountable. Retrieved from
https://www.cdw.com/product/juniper-ex-series-ex4300-48p-switch-48-ports-managed-rack-mountable/3122418
cdw.com. (n.d.). Juniper Networks SRX4600 Services Gateway – security appliance – SRX4600-AC – Firewalls/UTMs. Retrieved
from https://www.cdw.com/product/juniper-networks-srx4600-services-gateway-security-appliance/5037092
cdw.com. (n.d.). Pulse Secure Junos PSA3000 – security appliance – PSA3000 – Firewalls/UTMs. Retrieved from
https://www.cdw.com/product/pulse-secure-junos-psa3000-security-appliance/3799893
References
Cisco. (2015, December 17). Capacity Planning and High Density. Retrieved from
https://www.cisco.com/c/en/us/td/docs/so…
Purchase answer to see full
attachment
