# hridoy-851/secure-enterprise-network architecture

> Architecture diagram of the GitHub repository hridoy-851/secure-enterprise-network, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-27). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/hridoy-851/secure-enterprise-network
- Repository: https://github.com/hridoy-851/secure-enterprise-network

## Overview

This repository is a Cisco Packet Tracer enterprise-network lab, not an application codebase. Its principal workflow is client traffic through access and distribution switching, then to internal services or through the edge router toward a simulated ISP. The README also documents management, security controls, and troubleshooting/verification capabilities. The Packet Tracer file is the implementation evidence; relationships below are based on README documentation because no source excerpts were available.

Main entry points: [`packet-tracer/secure-enterprise-network..pkt`](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt) (R1 edge router), [`troubleshooting/README.md`](https://github.com/hridoy-851/secure-enterprise-network/blob/main/troubleshooting/README.md) (Troubleshooting scenarios), [`documentation/verification.md`](https://github.com/hridoy-851/secure-enterprise-network/blob/main/documentation/verification.md) (Verification guidance)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_access["Access network"]
  node_asw["ASW1 access switch"]
  node_vlans["Department VLANs"]
  node_l2security["Layer 2 controls"]
end

subgraph group_distribution["Distribution network"]
  node_dsw["DSW1 L3 switch"]
  node_intervlan["Inter-VLAN routing"]
  node_dhcprelay["DHCP relay"]
  node_dhcpdns[("SRV1 DHCP and DNS")]
end

subgraph group_edge["WAN edge"]
  node_routedlink["Routed DSW1-R1 link"]
  node_r1["R1 edge router"]
  node_staticroutes["Static routes"]
  node_defaultroute["Default route"]
  node_nat["NAT/PAT"]
end

subgraph group_operations["Operations and security"]
  node_mgmt["SSH management"]
  node_mgmtacl["Management ACL"]
  node_guestacl["Guest isolation ACL"]
  node_addressing["Addressing plan<br/>[addressing-plan.md]"]
  node_troubleshooting["Troubleshooting scenarios<br/>[README.md]"]
  node_verification["Verification guidance<br/>[verification.md]"]
end

node_clients(("Department clients"))
node_admin(("Admin operator"))
node_isp["Simulated ISP"]

node_clients -->|"send traffic"| node_asw
node_asw -->|"assign access ports"| node_vlans
node_asw -->|"trunk traffic"| node_dsw
node_asw -->|"enforce controls"| node_l2security
node_dsw -->|"route VLAN traffic"| node_intervlan
node_dsw -->|"relay requests"| node_dhcprelay
node_dhcprelay -->|"forward DHCP"| node_dhcpdns
node_dhcpdns -->|"return leases"| node_dhcprelay
node_dsw -->|"send routed traffic"| node_routedlink
node_routedlink -->|"carry traffic"| node_r1
node_r1 -->|"use routes"| node_staticroutes
node_dsw -->|"forward default traffic"| node_defaultroute
node_defaultroute -->|"select next hop"| node_r1
node_r1 -->|"translate outbound traffic"| node_nat
node_nat -->|"send WAN traffic"| node_isp
node_isp -->|"return traffic"| node_r1
node_admin -->|"initiate SSH"| node_mgmt
node_mgmt -->|"manage device"| node_asw
node_mgmt -->|"manage device"| node_dsw
node_mgmt -->|"manage device"| node_r1
node_mgmtacl -->|"restrict access"| node_mgmt
node_guestacl -->|"filter guest traffic"| node_r1
node_troubleshooting -->|"document checks"| node_verification

click node_asw "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_vlans "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_l2security "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_dsw "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_intervlan "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_dhcprelay "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_dhcpdns "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_routedlink "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_r1 "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_staticroutes "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_defaultroute "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_nat "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_mgmt "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_mgmtacl "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_guestacl "https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt"
click node_addressing "https://github.com/hridoy-851/secure-enterprise-network/blob/main/documentation/addressing-plan.md"
click node_troubleshooting "https://github.com/hridoy-851/secure-enterprise-network/blob/main/troubleshooting/README.md"
click node_verification "https://github.com/hridoy-851/secure-enterprise-network/blob/main/documentation/verification.md"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_asw,node_vlans,node_l2security,node_clients toneBlue
class node_dsw,node_intervlan,node_dhcprelay,node_dhcpdns toneAmber
class node_routedlink,node_r1,node_staticroutes,node_defaultroute,node_nat toneMint
class node_mgmt,node_mgmtacl,node_guestacl,node_addressing,node_troubleshooting,node_verification toneRose
class node_admin,node_isp toneIndigo
```

## Components

### Access network

- [ASW1 access switch](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [Department VLANs](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [Layer 2 controls](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`

### Distribution network

- [DSW1 L3 switch](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [Inter-VLAN routing](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [DHCP relay](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [SRV1 DHCP and DNS](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`

### WAN edge

- [Routed DSW1-R1 link](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [R1 edge router](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [Static routes](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [Default route](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [NAT/PAT](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`

### Operations and security

- [SSH management](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [Management ACL](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [Guest isolation ACL](https://github.com/hridoy-851/secure-enterprise-network/blob/main/packet-tracer/secure-enterprise-network..pkt): `packet-tracer/secure-enterprise-network..pkt`
- [Addressing plan](https://github.com/hridoy-851/secure-enterprise-network/blob/main/documentation/addressing-plan.md): `documentation/addressing-plan.md`
- [Troubleshooting scenarios](https://github.com/hridoy-851/secure-enterprise-network/blob/main/troubleshooting/README.md): `troubleshooting/README.md`
- [Verification guidance](https://github.com/hridoy-851/secure-enterprise-network/blob/main/documentation/verification.md): `documentation/verification.md`

### Other components

- **Department clients**
- **Admin operator**
- **Simulated ISP**

## Connections

- Department clients → ASW1 access switch: send traffic
- ASW1 access switch → Department VLANs: assign access ports
- ASW1 access switch → DSW1 L3 switch: trunk traffic
- ASW1 access switch → Layer 2 controls: enforce controls
- DSW1 L3 switch → Inter-VLAN routing: route VLAN traffic
- DSW1 L3 switch → DHCP relay: relay requests
- DHCP relay → SRV1 DHCP and DNS: forward DHCP
- SRV1 DHCP and DNS → DHCP relay: return leases
- DSW1 L3 switch → Routed DSW1-R1 link: send routed traffic
- Routed DSW1-R1 link → R1 edge router: carry traffic
- R1 edge router → Static routes: use routes
- DSW1 L3 switch → Default route: forward default traffic
- Default route → R1 edge router: select next hop
- R1 edge router → NAT/PAT: translate outbound traffic
- NAT/PAT → Simulated ISP: send WAN traffic
- Simulated ISP → R1 edge router: return traffic
- Admin operator → SSH management: initiate SSH
- SSH management → ASW1 access switch: manage device
- SSH management → DSW1 L3 switch: manage device
- SSH management → R1 edge router: manage device
- Management ACL → SSH management: restrict access
- Guest isolation ACL → R1 edge router: filter guest traffic
- Troubleshooting scenarios → Verification guidance: document checks