How hridoy-851/secure-enterprise-network works
This repository is a Cisco Packet Tracer enterprise-network lab, not an application codebase. Its principal workflow is client traffic through access and distribution switching, then to internal services or through the edge router toward a simulated ISP. The README also documents management, security controls, and troubleshooting/verification capabilities. The Packet Tracer file is the implementation evidence; relationships below are based on README documentation because no source excerpts were available.
Main entry points: secure-enterprise-network..pkt R1 edge router · README.md Troubleshooting scenarios · verification.md Verification guidance
Components 21
Access network
- ASW1 access switch
packet-tracer/secure-enterprise-network..pkt - Department VLANs
packet-tracer/secure-enterprise-network..pkt - Layer 2 controls
packet-tracer/secure-enterprise-network..pkt
Distribution network
- DSW1 L3 switch
packet-tracer/secure-enterprise-network..pkt - Inter-VLAN routing
packet-tracer/secure-enterprise-network..pkt - DHCP relay
packet-tracer/secure-enterprise-network..pkt - SRV1 DHCP and DNS
packet-tracer/secure-enterprise-network..pkt
WAN edge
- Routed DSW1-R1 link
packet-tracer/secure-enterprise-network..pkt - R1 edge router
packet-tracer/secure-enterprise-network..pkt - Static routes
packet-tracer/secure-enterprise-network..pkt - Default route
packet-tracer/secure-enterprise-network..pkt - NAT/PAT
packet-tracer/secure-enterprise-network..pkt
Operations and security
- SSH management
packet-tracer/secure-enterprise-network..pkt - Management ACL
packet-tracer/secure-enterprise-network..pkt - Guest isolation ACL
packet-tracer/secure-enterprise-network..pkt - Addressing plan
documentation/addressing-plan.md - Troubleshooting scenarios
troubleshooting/README.md - Verification guidance
documentation/verification.md
Other components
- Department clients
- Admin operator
- Simulated ISP
Connections 23
- Department clients → ASW1 access switch: send traffic
- ASW1 access switch → Department VLANs: assign access ports
- ASW1 access switch → DSW1 L3 switch: trunk traffic
- ASW1 access switch → Layer 2 controls: enforce controls
- DSW1 L3 switch → Inter-VLAN routing: route VLAN traffic
- DSW1 L3 switch → DHCP relay: relay requests
- DHCP relay → SRV1 DHCP and DNS: forward DHCP
- SRV1 DHCP and DNS → DHCP relay: return leases
- DSW1 L3 switch → Routed DSW1-R1 link: send routed traffic
- Routed DSW1-R1 link → R1 edge router: carry traffic
- R1 edge router → Static routes: use routes
- DSW1 L3 switch → Default route: forward default traffic
- Default route → R1 edge router: select next hop
- R1 edge router → NAT/PAT: translate outbound traffic
- NAT/PAT → Simulated ISP: send WAN traffic
- Simulated ISP → R1 edge router: return traffic
- Admin operator → SSH management: initiate SSH
- SSH management → ASW1 access switch: manage device
- SSH management → DSW1 L3 switch: manage device
- SSH management → R1 edge router: manage device
- Management ACL → SSH management: restrict access
- Guest isolation ACL → R1 edge router: filter guest traffic
- Troubleshooting scenarios → Verification guidance: document checks