Examensarbetet gick ut på att projektera en lösning där biblioteksanvändare vid Umeå kommuns stadsbibliotek ska kunna logga in på det trådlösa nätverket med hjälp av deras lånekort och ett lösenord eller PIN-kod. Lösningen ska även ta hänsyn till gäster som saknar bibliotekskort och erbjuda dem en tillfällig inloggning. Den projekterade lösningen gick ut på att använda befintlig hårdvara vid Umeå kommun samt outnyttjade funktioner i de befintliga servrarna. Den framtagna lösningen har även testats och skulle inom en snar framtid kunna implementeras. / The goal of this project is to present a solution for the wireless network at the city library in Umeå. The new system will allow users to log on to the wireless network using their library card along with a password of some kind. There must also be a way for guests without library cards to be allowed access to the network in some way. The result of this project was based on hardware that Umeå already had access to, and certain functions in that hardware that hasn’t been explored earlier and offered a lot of potential. This solution was tested to some extent and could be implemented in a near future.

A firewall is an essential component to provide network security and traffic control. It is widely used to prevent illegal accesses to private or corporate networks from external unsafe source like Internet. Firewalls are basically classified into two types, hardware firewalls and software firewalls. Hardware-based is a single external hardware to a system, but software-based is installed on a computer inside a system. Two such firewalls, Cisco ASA 5505 and Linux iptables are implemented and practical evaluated theirs performance. The performance test in this paper work primarily focuses on Network layer, and the main parameters include Throughput, Latency, and Concurrent Sessions. Different performance monitoring tools are also introduced in this paper. As a network layer firewall, the most impressive feature is through inspecting the packets to manage the traffic from the higher Layer 4-7 of OSI (Open Systems Interconnection) model, which inevitably has a certain impact on the performance. The bottleneck of the whole network is determined by what extent the impact is. The primary objective of this thesis is through analyzing the test reports to evaluate the two type firewalls’ performance. Thus the results reported in this paper gives some ideas to new firewall customers about what aspects should be considered before selecting a suitable firewall product.

This thesis is trying to appraise benefits of implementation Cisco Wide Area Application Services (WAAS) in the organization. It's a relatively new technology, which seeks to answer the question, how to maintain control over the ever-increasing volume of traffic. This constant increase is mainly due to the use of new applications and business processes. WAAS should transparently improve throughput, speed and ease of use of all applications in the organization. The question is if this technology can reduce costs, improve productivity, simplify data protection, or what manner it is compatible with the corporate infrastructure. If is really consolidating and pooling application infrastructure for remote branch back into the data center best current solution, which facilitates access to remote users, in same way to which they are accustomed from the Local Area Network (LAN). The next one sections of this work will be summarized findings on the principle of Cisco WAAS. How the technology works. What is main optimizing method and how is currently use in the organization. It's weaknesses and strengths against the largest suppliers of similar WAN optimization solutions. The next one section will carry out an analysis, which showed us results to determine which applications are suitable for optimization technology and statements for the policy, which will be applied to the applications. This raises so many questions to be answered. The outcome of this work will be whether this technology is really what the organization needs, and whether this technology is applicable to all or only for certain types of applications or application protocols.

Tématem této diplomové práce (dále jen DP) je návrh rozsáhlých podnikových sítí podle doporučení stanovených společností Cisco. Dále je realizována simulace navržené topologie prostřednictvím programů s otevřeným zdrojovým kódem a dohled nad sítí prostřednictvím programu Nagios. Úvodní část obsahuje stručné seznámení se základním rozdělením sítě do jednotlivých funkčních bloků. Druhá část se zabývá popisem jednotlivých funkčních bloků a jejich rolí v rámci celé síťové topologie. Bloky jsou dále rozděleny na jednotlivá zařízení a jsou popsány služby, které tato zařízení musí poskytovat. Třetí část DP se snaží zmapovat základní požadavky na služby, které jsou kladeny na dnešní síťové infrastruktury. Hlavní důraz je kladen na dostupnost všech nabízených služeb sítě. Jsou vyjmenovány jednotlivé protokoly druhé až třetí vrstvy OSI modelu, které zabezpečují stálou dostupnost sítě v případě selhání aktivních prvků. Čtvrtá část DP se věnuje popisu návrhu síťové topologie WAN. Pátá část obsahuje popis bezpečnostních rizik, která ohrožují dostupnost sítě, tak i popis útoků, které mají za cíl krádež identity uživatele. V šesté části DP jsou popsány programové nástroje pro zprávu sítí (Nagios, Cisco Security Device Manager) a programy, které simulují Cisco přepínače, směrovače (Dynamips & Dynagen, GNS3) a Cisco PIX firewall (PEMU). Sedmá kapitola se zabývá konkrétním návrhem rozsáhlé sítě s použitím principů, které byly zmíněny v předcházejících kapitolách. Navržená infrastruktura je dále realizována pomocí simulačních programů a tato virtuální síť dovoluje demonstrovat nastavení a chování všech popsaných protokolů a zařízení. V závěrečném shrnutí je nejdůležitější poznatek, že návrh a konfigurace rozsáhlé sítě a její realizace ve virtuálním prostředí je funkční a použitelná pro pokusné účely i pro studijní účely.

Master 's thesis deals about computer networks, which constitutes a global communication structure and play a very important role in today's society. The rapid development of Internet, the emergence of new multimedia applications and their increasing use of calls to the efficient functioning of the creation of such governance mechanisms of transmission, which are able to secure the required parameters. The thesis deals about the issue of quality of service (QoS) in IP networks. It presents the basic characteristics and requirements of these networks for the transmission of sensitive data by the quality of services, deals with the QoS definition, and describes the essential parameters to be followed to achieve the required quality of service in practical deployment. In addition, lists the various principles and options to ensure QoS in computer networks. Generally, it represents the Cisco 1841 router features and options to ensure quality of service in the network based on these routers. Practical thesis part provides two types of model IP networks, which were designed in order to verify the impact of service quality in real practice. Of the known methods to ensure QoS, which include a mechanism of Integrated services, Differentiated services, it focus its content about the Differentiated Services and the implementation of these in proposed network model. The last part of the work presents the results obtained by the impact of quality of service for the applications and their assessment.

This master's work deals with the design of laboratory exercises for Cisco Academy courses. Especially is oriented on Cisco technology. The theoretical part describes various devices used in the laboratory and the issue of functionality of these devices, such as switching, routing and solve any problems with the configurations of these elements. The practical part is directly generated designs laboratory exercises, focusing on specific examples of the problems from the configuration and network management with Cisco. An integral part of work consists of supporting the presentation of individual laboratory tasks, including configuration files, settings of the device. Create labs and verify the functionality of their configuration has been realized in the laboratory Cisco Academy Brno.

This thesis addresses the issues of network topology mapping, where the network consists of multiple Cisco devices. It includes theoretical knowledge in this field and closely describes possible solutions to this problem. It explains the process of design and implementation of this kind of network mapping software by chosen means. Correct function of the created application is tested on a virtual network.

The main goal of this master's thesis is to apprise of principles of Cisco One Platform Kit based on software defined networks and with monitoring techniques in that type of networks. The focus is concentrated on monitoring the quality of Voice over IP communication. Next part of this thesis is a proposal and implementation of the extensible monitoring environment OneMon on the Cisco One Platform Kit. It is possible to extend OneMon environment using specific analyzers to monitor various types of network traffic. The part of this master's thesis is also implementation of VoIP traffic analyzer for SIP and RTP protocols. This analyzer provides information about phone calls and their quality in a monitored segment of a computer network.

This master thesis deals with the implementation of the RIPng routing protocol in the OMNeT++/INET environment. It describes the RIPng protocol and its specifics on the Cisco devices. It clarifies important concepts such as IPv6 and distance-vector routing protocols. The thesis also describes the OMNeT++ environment and the INET Framework, where it focuses on the current status of implementation of the components required for the RIPng protocol integration.

The network simulation allows analysis of the computer networks behavior and configured protocols. This thesis focuses on the EIGRP routing protocol and its integration into the OMNeT++ simulation enviroment. The text includes a detailed description of the protocol and its configuration on Cisco devices. Furthermore, the text focuses on design of extension that supports routing protocol. The following describes implementation of the protocol according to design. Finally, the implemented solution is compared with the output of real devices.