[SOLVED] FIT5037 P0 Final Assignment

1 Overview
The learning objective of this assignment is for you to gain a first-hand experience on designing, implementing, testing and ethically using a corporate network.
2 Submission Policy
Create a detailed PDF document with task descriptions and relevant screenshots. Upload the GNS3 configuration file to Google Drive and link it in the PDF. Additionally, embed video links in the PDF document. Your final submission should include a well-organized PDF with project details, screenshots, GNS3 configuration file link, and video references for a comprehensive overview. Name your file in the format: [Your Name]-[Student ID]-FIT5037-Assignment.
If a demonstration video is required, you should record your screen demonstration with your voice explanation and upload the video to your Monash Google Drive. For video demonstration, please keep it to maximum of 20 minutes in total duration; you are required to say your name and student ID at the start of recording, showing face is mandatory. The shared URL of the video should be mentioned in your report wherever required. You can use any tool you would like to record videos, for example panopto (https://monash-panopto.aarnet.edu.au/) and Zoom.
Late submissionAssignment Project Exam Help penalty: 10-point deduction per day. If you require a special consideration, the
https://www.monash.edu/students/academic/policies/academic-integrity.
3 Scenario for the Assignment
This task entails designing and executing a network that spans across the three Monash campuses, utilizing GNS3. The network’s architecture should prioritize security considerations. Your design should establish interconnectivity between the three campuses leveraging the perimeter firewalls or routers present. While an illustrative example of a topology configuration file has been provided, it remains incomplete. You can use your own network toplogy if you would like, Mikrotik documentation can be found here: https://help.mikrotik.com/docs/. Please use the following command to download the example configuration file:
• All campuses must have at least one perimeter firewall/router.
• All campuses must have a Client LAN, each LAN should contain at least one client container.
• The network must have the following servers: DNS, CA (Certificate Authority), FTP, SSH, WEB, MAIL and VPN (this is for external clients connecting to Monash VPN). Servers can be placed in any campus(es). It’s assumed that the network is connected to the internet (can be shown using cloud in GNS3).
• Assign different subnets to campuses and configure perimeter firewalls/routers.
• For the DNS, FTP, SSH, WEB and MAIL servers, any open-source servers can be installed. Using lab material is also fine. CA can just be a normal container. Installation/Configuration of VPN server is not required, a normal container can be used for this as well, you can assume that it’s a SSL VPN (port 443).
• WEB and MAIL servers should use TLS with certificates issued by the CA. Use your student ID as domain name for both WEB and MAIL servers. E.g., for student ID 111222333, use 111222333.com as domain name. MAIL server should have at least two email recipients configured. It’s assumed that the client containers have CA’s certificate installed.
• Perform a ping test from one campus to the other, e.g., ping from the client in the Clayton to the Peninsula, and from Peninsula to the Caulfield campus.
• For FTP, SSH, WEB and MAIL services, connect the service from one of the clients and show the connectivity.
• For TLS connection, show Wireshark capture.Assignment Project Exam Help
• For the DNS server, perform a nslookup to the domain created in above steps from one of the clients.
This is site-to-site VPN, each perimeter router will have two tunnels. For example, Caulfield perimeter router will have a VPN tunnel with Peninsula router and a tunnel with Clayton campus router. The primary goal is to ensure that all inter-campus traffic is securely protected by these VPN tunnels. (Note: this setup is not related withe VPN server which is just a container)
• WEB, MAIL, and VPN servers should be accessible to everyone, including the clients on the internet.
• WEB and VPN servers cannot initiate a connection to the internal network, they can only reply to the connection requests from the clients.
• The DNS server should only be accessible to all internal clients (no external/internet clients)
Additionally, configure the firewall according to one of the options below.
• If studentIDmod4=0:
– Restrict access to the FTP server to clients located exclusively within the Clayton campus.
– Restrict access to the SSH server to clients located exclusively within the Caulfield campus.
– Restrict access to the MAIL server to clients located exclusively within the Peninsula campus.
• If studentIDmod4=1:
– Restrict access to the MAIL server to clients located exclusively within the Clayton campus.
– Restrict access to the SSH server to clients located exclusively within the Caulfield campus.
– Restrict access to the FTP server to clients located exclusively within the Peninsula campus.
• If studentIDmod4=2:
– Restrict access to the MAIL server to clients located exclusively within the Clayton campus.
– Restrict access to the FTP server to clients located exclusively within the Caulfield campus.
– Restrict access to the SSH server to clients located exclusively within the Peninsula campus.
• If studentIDmod4=3:
– Restrict access to the SSH server to clients located exclusively within the Clayton campus.
– Restrict access to the MAIL server to clients located exclusively within the Caulfield campus.
– Restrict access to the FTP server to clients located exclusively within the Peninsula campus.
Record a video proving that the firewall rules work. First try connecting the service from a node where it
was permissible and then from a node where it was not allowed. Provide the firewall rules, from eachAssignment Project Exam Help firewall, in the report.
task. More specifically, discuss the following (no actual configuration is required for these questions, please limit your answer to under 100 words):
Provide the IDS rule configuration in the report. Demonstrate in the video a live exploitation of the vulnerabilities in Metasploitable and the IDS results.
Developing an Ethical Network Usage Policy is essential. Your task is to communicate guidelines to Monash staff and students regarding appropriate network conduct, prohibited activities, and behaviors classified as unethical. List a minimum of five policy directives. Kindly ensure your response falls within the 150 to 500 word limit.