Network Design < 2024 >

Most modern network designs follow the (Cisco’s classic hierarchy), which prevents a single device from becoming a bottleneck:

Moving away from "trusting everyone inside the building" to a model where every user and device must be continuously verified.

Using VLANs to isolate sensitive departments (like Finance or R&D) from the rest of the network. This prevents "lateral movement" if one device is compromised. network design

The "interchange." This layer implements policies, routing between VLANs (Virtual Local Area Networks), and security filtering. It bridges the high-speed core with the user-facing access layer.

Implementing Next-Generation Firewalls (NGFW) and Intrusion Prevention Systems (IPS) at the boundary between the internal network and the internet. 4. Modern Evolution: SD-WAN and Cloud Most modern network designs follow the (Cisco’s classic

Modern networks assume the perimeter is porous. Design-level security includes:

The "driveways." This is where end-user devices (PCs, printers, Wi-Fi APs) connect. It focuses on port security and providing power (PoE) to devices. 2. Core Principles: Performance and Reliability The "interchange

We are moving away from purely hardware-centric designs toward . SD-WAN allows companies to manage their network via software, automatically routing traffic over the most efficient path (e.g., using a cheap internet connection for basic apps and a private line for critical data). Additionally, "Hybrid" designs now integrate local office hardware seamlessly with cloud providers like AWS or Azure, treating the cloud as an extension of the local data centre. Conclusion