A Security-Oriented Design to Elevate the of ETECSA's Backbone in Cienfuegos

Abstract

Cienfuegos network, like most ETECSA's territorial networks, faces security problems due to its topology, scalability, lack of supervision and privileges and physical failure vulnerability. A new network design is proposed in order to solve this problem through different actions: inserting a Layer 3 Switch, creating subnetworks for diverse functions, creating ACLs for traffic control and improving logs storage mechanisms. Other actions involve subnetworks expansion to those Company’s main areas that are geographically dispersed, and protocols implementation for redundant link management automation in the backbone.