In the section we're on talk about how to create an ideal network.
We're going to talk about some best practices about creating an ideal network.
The first we need to keep our network physically safe.
In an ideal network firstly we should keep our network physically safe for this purpose.
We should keep our devices in a secure data center which includes fire suppression professional cooling
subsystems and etc. and we need to monitor our data center using cameras to prevent unauthorized access.
Another important thing we need to focus for physical security should be using separate cable and pads
for electric and data to prevent electromagnetic interference.
And let's take a look to keeping our networks safe on the from this software point of view.
There are lots of network security threats that we can face on the Internet or local area networks.
Come on software treats are virus worm through our Jim malware and at Celera and to mitigate these threats
we need to use software or hardware firewalls and onto viruses and something like that.
So from the password point of free let's say a look how we can keep our networks safe.
Another important thing is to keep our network safe is using strong passwords.
We need to use strong passwords for our enterprises and network devices as well.
And we must anchor up to our passports on network devices by using service password encryption command
and lessons.
Take a look from the access point of few since the SS age anchor drifts through a remote connection
session.
We should use SSA age instead of that we should also used to repel a authentication authorization and
accounting to protect the access to our network devices.
Authentication means users must use username and password before accessing devices.
Authorization means we should authorize users with different levels for example and operator level and
or an admin level or something like that.
And accounting means we need to record you have troops or X accesses for device configuration chains
and and in an ideal network monitoring is a really really important part.
Today we need to monitor the words configuration change the US interruptions and network traffic with
monitoring tools.
And we need to receive emails from network monitoring softwares to be informed quickly
and let's say collude to privatizing critical traffic All traffics in our networks.
Guys don't have the same importance.
We should prioritize critical traffic and if there is a congestion in our traffic our privatized traffic
should use our bandwidth first.
We should also use redundant devices and parts to mitigate the device hardware and the cabling problems.
For example let's say that if this device fails the communication can go ahead.
By using this device or for example if this cable fails no problem again we can go ahead our communication
from this path or by using this path or something like that.
4 is a management to end troubleshooting and efficient use of resources.
We should use hierarchical design on our network.
This design consists of three levels and their access layer distribution layer and the car layer in
access layer.
This is the network of the end the way such as pieces IP phones printers and some layer two suites and
something like that.
Is this the operation is the layer which mandates individual branch of his wider network connections
and the core layer is the layer which provides high speed forwarding services to move packets between
distribution layer devices in different regions of network.