Designing an University Campus Network Architecture

[khesalahmad]

Greetings

Hello members,

I am reaching out to seek your expert advice on our proposed University Campus Network Architecture. We are in the process of designing our campus network to better meet the needs of our students, faculty, and staff.

Our proposed network architecture includes the following devices:

• Access Switch: Cisco Catalyst 9200L 24-port PoE+, 4 x 1Gigabit, Network Essentials
• Distribution Switch: Cisco Catalyst 9500 Series high-performance 24-port 1/10/25G Gigabit Ethernet switch with SFP28
• Management Switch: Cisco Catalyst C9300L-24T-4X-A
• Core Switch: Cisco C9407R

I would greatly appreciate your insights on whether these devices are a perfect match for our network or if we should consider any alternatives. Your expertise and guidance will help us make informed decisions and create a reliable and high-performance network for our university.

Thank you in advance for your valuable input. We look forward to hearing from you and greatly appreciate your assistance in this matter.

Best regards,
Khesal Ahmad
Network Engineer

[balaji.bandi]

i would suggest to use Cat 9500 as Core and Cat 9400 as distribution ( but 9400 also some people as Core too)

how about Wireless - Firewall ?

you are in the right track just refer CVD :

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-campus-lan-wlan-design-guide.html

[Leo Laohoo]

What is the budget?

[khesalahmad]

Looking for a robust network with the minimum possible budget,
a reliable and versatile network design is our primary concern.

[Leo Laohoo]

---

@khesalahmad wrote:
Looking for a robust network with the minimum possible budget, a reliable and versatile network design is our primary concern.

---

I take this answer as "no budget".  No budget coupled with zero information about what the network and you want to know if the Catalyst 9k is appropriate?  The question is very similar to the question of, "Hey, I want to buy a car.  Is a Ferrari Testarossa good enough?"

1.  What is the layout of this so-called "university"?  
2.  How many data closets are there? 
3.  How far are the data closets from each other? 
4.  How are the data closets linking back to the core switch, star- or ring topology?
5.  What is the backbone, fibre, copper, radio, BLE?

Let's start with the following questions.  

[khesalahmad]

Dear Leo Laohoo,

Thank you for your kind response and valuable questions, we appreciate your
interest in helping us.

In response to your questions:

*1. Layout*
a. Buildings - 34
b. Spread area is 16000 Sq Mtr
c. The building houses various academic departments, administrative
offices, and student facilities.

*2. Data Closets*
a. Data closets - 103 (approx) located across the campus
b. Required Wireless APs - 300 approx across the campus.
b. The distance between closets is more or less 300 meters approximately
apart.
c. Backbone - Single-mode fiber
d. Topology - hybrid (ring+start).

We would greatly appreciate any further guidance or recommendations you may
have based on this information.

Thank You

[Leo Laohoo]

What kind of single-mode fibre, OS1 or OS2?

In the core, where are the servers connected to?

Where is the authentication server positioned?  And how many?

[khesalahmad]

OS2

[Leo Laohoo]

Well, if there are 103 cabinets strewn all over the campus that needs to link back to the core, a 9500 is not suitable for a distro nor a core. 

It is better to get a 9600 and collapse the core and distro.  

[khesalahmad]

Can you please advise more specifically? that which model we use for
1. Core
2. Distro
3. Management Switch
4. Firewall
5. Access Switch
6. IE switch and
7. Wireless APs.

Thank you

[Leo Laohoo]

I mean there is really no way to determine if a Catalyst 1000 is suitable for an access switch over a Catalyst 9300 because we have ZERO information about the clients.  

Is the network static VLAN to the access ports or is there DOT1X?

How many cable drops per cabinet?  

What is the depth of each cabinet?  

What is the ventilation of each cabinet?

I mean, seriously, a "network engineer" giving us less-than-basic information is simply stupid.  I mean, I am still convinced that this so-called "university" only exist in a school assignment only.

[balaji.bandi · Accepted solution]

as mentioned budget very important to give the model of the device. or you looking all cisco house ?

Can you please advise more specifically? that which model we use for
1. Core   - Cat 9500 and 9600
2. Distro  - Cat 9500 / 9400
3. Management Switch - Cat 9300
4. Firewall   - Firepower / Checkpoint / Palo / Fortinet - your choice of experts in house
5. Access Switch  - Cat 9200 / 9300 (depends on budget)
6. IE switch and  - Cat 9K
7. Wireless APs.  - Cat 9K

you missed WLC here - you need Cat 9800 WLC for the AP to work.

i suggest to contact Local part for Full delivery and deployment, it  required local validation and correct Qty and other stuff