Designing a network for 5000 users

[Mubeen]

Hi,

I have given a task of designing a network from scratch for approx. 5000 users, about 70% of which will be using VOIP on their laptops.

I do have a general idea but not sure which devices will best meet my requirements. I think 6500 series switch (currently working on which modules should I add) would more than sufficient for my requirements in collapsed core and 2950 / 2960 (yes I know they are EOL/EOS but have limited budget) in access layer. For FW, 5500 series (5585 SSP 10 or SSP 20) would do the job. Not sure about edge router as have to merge 4-5 different ISP's and need to apply QoS for VOIP.

We have two floors of a building so if I go with Ethernet, have to add additional forwarding device therefore I was thinking of going with fiber for uplinks.

[balaji.bandi]

Design this kind of network need more inputs.

1. Need to ask some questions like do you need HA

2. Then plan all 2 devices all the time.

Start with Internet edge

ISR x2

WAN Edge switches x 2 

Campus 

6500 still do your job collapsed Core

3750X  as access layer or 26XX

FW 5585X EOL but still support available

Looks at some Campus Lan CVD should help you.

https://www.cisco.com/c/en/us/solutions/design-zone/networking-design-guides/campus-wired-wireless.html

BB

[Mubeen]

Of-course, I cannot imagine this this big network without HA.

[Mubeen]

@balaji.bandi, For cat 65XX, which modules do you recommend?

[balaji.bandi]

Depends on your requirement, go to Sup-2T or higher supervisor

10G or 1Gig Line cards depends on your requirement.

BB

[Mubeen]

Let me explain the scenario

We have different offices in one building, each office has between 50-150 users.

Our servers like VOIP, hosting, email etc are on cloud. Servers like SharePoint, AD, monitoring serve, cameras etc are placed locally.

We cannot afford downtime of even a single minute

we have 4 different ISP's A B C and D

need to configure in such a way

ISP A primary for VOIP and B as secondary, ISP C primary for DATA and D secondary, in case both ISP of DATA goes down, link should be switched secondary of VOIP and vice-versa only if primary of VOIP is up.  

Need to do content filtering, QoS for VOIP, limit BW on IP base, monitor live traffic as well as save in logs so that we can scan those for logs when required (eg. agent browse some website which he shouldn't), VPN's to remote locations, 

Intranet traffic would be higher then normal. 

I also have cisco 36XX AP's for WiFi in few offices.

For VOIP, I'm not using call manager, instead just routing all traffic via Asterisk server.

Will be using fiber uplinks for each office.

Detailed reply would be appreciated, feel free to ask any detail I missed

[Mubeen]

Let me explain the scenario

We have different offices in one building, each office has between 50-150 users.

Our servers like VOIP, hosting, email etc are on cloud. Servers like SharePoint, AD, monitoring serve, cameras etc are placed locally.

We cannot afford downtime of even a single minute

we have 4 different ISP's A B C and D

need to configure in such a way

ISP A primary for VOIP and B as secondary, ISP C primary for DATA and D secondary, in case both ISP of DATA goes down, link should be switched secondary of VOIP and vice-versa only if primary of VOIP is up.  

Need to do content filtering, QoS for VOIP, limit BW on IP base, monitor live traffic as well as save in logs so that we can scan those for logs when required (eg. agent browse some website which he shouldn't), VPN's to remote locations, 

Intranet traffic would be higher then normal. 

I also have cisco 36XX AP's for WiFi in few offices.

For VOIP, I'm not using call manager, instead just routing all traffic via VOIP server.

Will be using fiber uplinks for each office.

Detailed reply would be appreciated, feel free to ask any detail I missed

[balaji.bandi]

Look the guide i have recomended

Looks at some Campus Lan CVD should help you.

https://www.cisco.com/c/en/us/solutions/design-zone/networking-design-guides/campus-wired-wireless.html

If you have expertise in house and about document help you to build, if not please contact one of Cisco partner can help you.

BB

BB