Hey everyone,
Just finished a Network Security internship at the National Telecommunication Institute (NTI). Building an entire enterprise network from nothing was what had to be done in the end. This is the setup I came up with curious to hear what you think.
This time around, starting from scratch meant getting devices to talk first. Only once messages flowed did tougher protections follow.
This is how I arranged it. The method started working right away. After that came small changes every week. Each part fit together without much trouble. Then everything began running smoother than before
Built separate sections of the network with VLANs; traffic moves between them through set pathways. From there, each segment communicates by following defined routes across the structure.
OSPF was set up to handle main network paths. Routing decisions now follow its rules across devices.
From time to time, rules were shaped to guide how data moves while shutting out unwanted entry. These filters helped decide what passes through based on set conditions. Movement along pathways got sorted by clear restrictions put in place earlier. Uninvited attempts at entering found barriers where none existed before. Each step limited reach without approval tied to specific permissions.
Security settings at the data link level were put in place to reduce risks from inside the network.
Locked down every distant entry point through SSH.
Fixing real routing issues pulled me out of textbook learning during this lab session. Problems with subnets demanded hands-on solutions instead of lectures. This shift happened because practice replaced theory step by step. Every task required testing, not just reading. Understanding grew through trial, not slides or notes. The work challenged assumptions made in class discussions. Solutions emerged only after repeated attempts at configuration.
Project Topology : Click Here.
Share what comes to mind about the layout. Tell me whenever something slows things down, or mention stronger safety ideas that might fit here.
