├── IPSec-VPN ├── IPsec-VPN-project.pkt ├── Images │ ├── Crypto-map-configured-MyCo-router.png │ ├── IP-address-configuration-in-ISP-router.png │ ├── IPsec-VPN-solution.png │ ├── Port-channel-configuration-in-Cisco-router.png │ └── README.md └── README.md ├── Network-Port-Address-Translation ├── Images │ ├── ACL-PAT-RIP_configured.JPG │ ├── DHCP-Verify.JPG │ ├── Port-Address-Translation.JPG │ └── README.md ├── Network-Port-Address-Translation.pkt └── README.md └── README.md /IPSec-VPN/IPsec-VPN-project.pkt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/IPSec-VPN/IPsec-VPN-project.pkt -------------------------------------------------------------------------------- /IPSec-VPN/Images/Crypto-map-configured-MyCo-router.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/IPSec-VPN/Images/Crypto-map-configured-MyCo-router.png -------------------------------------------------------------------------------- /IPSec-VPN/Images/IP-address-configuration-in-ISP-router.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/IPSec-VPN/Images/IP-address-configuration-in-ISP-router.png -------------------------------------------------------------------------------- /IPSec-VPN/Images/IPsec-VPN-solution.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/IPSec-VPN/Images/IPsec-VPN-solution.png -------------------------------------------------------------------------------- /IPSec-VPN/Images/Port-channel-configuration-in-Cisco-router.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/IPSec-VPN/Images/Port-channel-configuration-in-Cisco-router.png -------------------------------------------------------------------------------- /IPSec-VPN/Images/README.md: -------------------------------------------------------------------------------- 1 | # Configuration examples 2 | 3 |

Image 1 : Crypto Map

4 | A Crypto map is used for identifying the crypto peer and where the traffic should flow. 5 | 6 |

Image 2 : Port Channel

7 | Port-Channel will help to support the high availability and speed. It will allow two physical links to work as a single logical link. Hence, if link-1 will have any technical issue than the network will not go down as the Link-2 will be up and running. 8 | 9 |

Image 3 : IP address

10 | IP address works like a street address, so that router will know exactly where the data should be transmitted. This sample shows how two links (primary and back-up) been created with a simple and clear description. This WAN topology is also known as "Double homed-single ISP". 11 | 12 |

Image 4 : IPsec VPN Solution

13 | This indicates the final solution which is based on IPsec VPN. It shows how the devices are connected and the IP address scheme of each network. 14 | -------------------------------------------------------------------------------- /IPSec-VPN/README.md: -------------------------------------------------------------------------------- 1 | # IPsec VPN Project 2 | 3 | Virtual Private Network (VPN) is a secure logical network that a company or user required while confidential data need to be transmitted securely from one device to another over the Internet. 4 | 5 | Internet is loaded with unauthorized users trying to break down your company's security and pushing data over such an unsecured network without a VPN or personal leased line would be questionable once the security threat occurs. VPNs have different flavors available for you, so you can find the best solution and implement it into your network for end-to-end security. 6 | 7 |

Project scenario:

8 | MyCo organisation requires establishing a VPN between a host in its parts division and a host in the manufacturing department of one of their business partners, TheirCo. They only want to create a VPN between System-A and System-C (refer to the figure), so that no other devices from both networks will be connecting except these two.
9 | 10 | 11 | 12 |

Solution:

13 | 14 | 1) IPsec VPN and ISAKMP policies were created between two routers with Pre-shared Key authentication and encryption (AES 256).
15 | 2) Access-list created to filter the traffic, so only System-A and System-C can connect between these two networks.
16 | 3) Port-Channel had been between Router-to-Switch. for high-speed and redundancy.
17 | 4) Two Serial links have been used to connect with ISP. This will allow high-availability and if one goes down them the other link will be up. To enable this feature, the Administrative Distance of the route of the back-up link was increased.
18 | 19 |

Requirements to run the project:

20 | Before you download the "IPsec-VPN-project.pkt" file, you will require to have Cisco Packet Tracer (Version 7.3 or higher) to run the Project. 21 | 22 | Please note that version lower than 7.3 may not support all the configuration used in this project. 23 | -------------------------------------------------------------------------------- /Network-Port-Address-Translation/Images/ACL-PAT-RIP_configured.JPG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/Network-Port-Address-Translation/Images/ACL-PAT-RIP_configured.JPG -------------------------------------------------------------------------------- /Network-Port-Address-Translation/Images/DHCP-Verify.JPG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/Network-Port-Address-Translation/Images/DHCP-Verify.JPG -------------------------------------------------------------------------------- /Network-Port-Address-Translation/Images/Port-Address-Translation.JPG: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/Network-Port-Address-Translation/Images/Port-Address-Translation.JPG -------------------------------------------------------------------------------- /Network-Port-Address-Translation/Images/README.md: -------------------------------------------------------------------------------- 1 | # Configuration examples 2 | 3 |

Image 1 : Network-Scenario

4 | The PAT is implemented on the Company-A's router. 5 | 6 |

Image 2 : DHCP Verify

7 | DHCP will allow us to automatically assign IP addresses. 8 | 9 |

Image 3 : ACL-PAT-RIP_configuration

10 | RIP is a routing protocol that helps to maintain the routing table, which router uses to navigate the traffic. The ACL will add a layer of security by filtering all the packet and allowing only legitimate data to pass. 11 | -------------------------------------------------------------------------------- /Network-Port-Address-Translation/Network-Port-Address-Translation.pkt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/Nirali4/Networking_Projects/fa0917215cf87fe6b08e9e5583e810006e9305dd/Network-Port-Address-Translation/Network-Port-Address-Translation.pkt -------------------------------------------------------------------------------- /Network-Port-Address-Translation/README.md: -------------------------------------------------------------------------------- 1 | # Port Address Translation 2 | PAT stands for Port Address Translation which is a feature on network devices that allows multiple users to use the same Public IP address from that private network. It is an extended form of Network Address Translation. 3 | 4 | As the numbers of the network device are increasing constantly, the demand for the IP addresses is increased too. Hence, the solution for not running out from IP addresses includes PAT, NAT, and IPv6. Use of PAT in the network reduces the operational cost, as the least or no extra IP addresses will require to lease from Internet Service Provides. 5 | 6 |

Project scenario:

7 | A simple network scenario is created to demonstrate how PAT can be implemented on the network. This project also concentrates on features like Dynamic Host Configuration (DHCP) and Access control Lists (ACLs). The DHCP will allow us to automatically provide the IP addresses to the network devices and ACL will make sure that only authorised network/users are accessing the company's network. Simply, ACLs are a type of filtration occurring whenever any packet leaves/enters the private network. 8 | 9 | 10 | 11 |

Requirements to run the project:

12 | Before you downloading the "Network-Port-Address-Translation.pkt" file, you will require to have Cisco Packet Tracer (Version 7.3 or higher) to run the Project. 13 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # Computer Network Projects 2 | 3 |

Project 1 - IPsec VPN

4 | Created an IPSec based Virtual Private Network (VPN) for a company to connect with its partner's network securely. The data transmitted is authenticated and encrypted over the Internet so Confidentiality, Integrity, and Availability can be achieved. 5 | 6 |

Configuration includes:

7 | 14 | 15 |

Project 2 - Port Address Translation

16 | Implemented a simple network scenario of Port Address Translation (PAT) with Access-List (ACL) which will allow us to translate the private IP address into a public IP address (vice versa. It uses different port numbers instead of a specific IP address. This will help the company to save money as the least or no extra IP addresses needed to be leased from Internet Service Provides. 17 | 18 |

Configuration includes:

19 | 26 | --------------------------------------------------------------------------------