Design, Simulation, and Performance Evaluation of A Secure, Segmented Multi-Subnet Network Infrastructure with Centralized Services for Educational Computer Engineering Workstation

This study presents the design and simulation of a Computer Engineering Laboratory Network intended to provide reliable communication, centralized resource management, secure access control, and efficient network administration within an educational laboratory environment. The proposed network was developed using Cisco Packet Tracer and incorporates a hierarchical tree topology, logical subnetting, Virtual Local Area Networks (VLANs), static routing, Domain Name System (DNS) services, file-sharing services, and Access Control Lists (ACLs). The network architecture consists of forty (40) workstation computers, one (1) instructor workstation, centralized DNS and file servers, four (4) network printers, a guest wireless network, five (5) Cisco 2960 switches, and two (2) Cisco 2911 routers. Workstations were organized into separate subnet groups to improve traffic management and network scalability, while VLAN segmentation and ACL implementation enhanced security by restricting unauthorized access to critical resources. Simulation-based testing was conducted to evaluate connectivity, routing performance, DNS resolution, file-sharing functionality, and security controls. Results demonstrated successful inter-subnet communication, reliable static routing, effective DNS hostname resolution, operational file-sharing services, and secure isolation of guest wireless users from internal laboratory resources. ICMP and traceroute tests confirmed stable network performance with minimal packet loss and successful end-to-end connectivity across all network segments. The findings indicate that the proposed network design provides a scalable, secure, and manageable laboratory infrastructure capable of supporting instructional, administrative, and student computing requirements. The study demonstrates the effectiveness of integrating hierarchical network design, network segmentation, centralized services, and access control mechanisms in developing a modern Computer Engineering laboratory network.

Laboratory Network, Cisco Packet Tracer, Hierarchical Network Design, Network Security, DNS Server, File Sharing, Access Control Lists (ACLs), Static Routing

1. Athab, O. A., & Saheb, A. M. (2022). Design and implementation of electronic infrastructure for academic establishment. arXiv preprint. https://doi.org/10.48550/arXiv.2202.03801 [Google Scholar] [Crossref]

2. Bahry, M. S., & Sugiantoro, B. (2018). Analysis and implementation IEEE 802.1Q to improve network security. IJID (International Journal on Informatics for Development), 6(2), 7–13. https://doi.org/10.14421/ijid.2017.06202 [Google Scholar] [Crossref]

3. Biabani, M., Yazdani, N., & Fotouhi, H. (2023). Developing a novel hierarchical VPLS architecture using Q-in-Q tunneling in router and switch design. Computers, 12(9), 180. https://doi.org/10.3390/computers12090180 [Google Scholar] [Crossref]

4. Chou, T. S., & Hempenius, N. (2020). An assessment of practical hands-on lab activities in network security management. Journal of Cybersecurity Education, Research and Practice, 2019(2), Article 4. https://doi.org/10.62915/2472-2707.1055 [Google Scholar] [Crossref]

5. Cisco Networking Academy. (2023). CCNA: Enterprise networking, security, and automation course materials. https://www.netacad.com [Google Scholar] [Crossref]

6. Cisco Systems. (2021). Cisco Data Center Infrastructure 2.5 Design Guide. Cisco Press. [Google Scholar] [Crossref]

7. Cisco Systems. (2023). Cisco Packet Tracer user guide. https://www.netacad.com/courses/packet-tracer [Google Scholar] [Crossref]

8. Cisco Systems. (2024a). Introduction to networks (CCNA 1) companion guide. Cisco Press. [Google Scholar] [Crossref]

9. Cisco Systems. (2024b). Routing and switching essentials (CCNA 2) companion guide. Cisco Press. [Google Scholar] [Crossref]

10. Forouzan, B. A. (2013). Data communications and networking (5th ed.). McGraw-Hill Education. [Google Scholar] [Crossref]

11. IEEE Standards Association. (2018). IEEE 802.1Q standard for VLAN tagging. https://standards.ieee.org [Google Scholar] [Crossref]

12. Kurose, J. F., & Ross, K. W. (2021). Computer networking: A top-down approach (8th ed.). Pearson. [Google Scholar] [Crossref]

13. Mashuri, M. A. I. (2024). Design and simulation of a VLAN-based campus network using Cisco Packet Tracer. Journal of Applied Informatics Research, 3(1), 12–25. [Google Scholar] [Crossref]

14. Ngoie, I. (2021). Server implementation model for the management of computer laboratories: A case study of Richfield Institute of Technology. SSRN. https://ssrn.com/abstract=3876055 [Google Scholar] [Crossref]

15. Olifer, N., & Olifer, V. (2005). Computer networks: Principles, technologies and protocols for network design. Wiley. [Google Scholar] [Crossref]

16. Pokorný, M., & Zach, P. (2013). Design, implementation and security of a typical educational laboratory computer network. Acta Universitatis Agriculturae et Silviculturae Mendelianae Brunensis, 61(4), 1077-1087. https://doi.org/10.11118/actaun201361041077 [Google Scholar] [Crossref]

17. Putra, L. O. A. S., Effendi, H., Hendriyani, Y., & Ambiyar. (2023). Development of a local area network with NetSupport in learning in a computer laboratory. Indonesian Journal of Computer Science, 12(4). https://doi.org/10.33022/ijcs.v12i4.3327 [Google Scholar] [Crossref]

18. Stallings, W. (2013). Data and computer communications (10th ed.). Pearson. [Google Scholar] [Crossref]

19. Suhartanto, A., & Putri, S. B. (2024). Perancangan topologi jaringan lab komputer sekolah dengan segmentasi siswa dan guru. Eduscotech, 5(1). https://journal.udn.ac.id/index.php/eduscotech/article/view/541 [Google Scholar] [Crossref]

20. Tanenbaum, A. S., & Wetherall, D. J. (2011). Computer networks (5th ed.). Pearson. [Google Scholar] [Crossref]

21. Zapanta, D. B., Jr., Talirongan, H., & Talirongan, F. J. B. (2021). Access control and monitoring: A system for computer laboratory. Mediterranean Journal of Basic and Applied Sciences, 5(1), 18–27. https://doi.org/10.46382/MJBAS.2021.5102 [Google Scholar] [Crossref]

• What the Desert Fathers Teach Data Scientists: Ancient Ascetic Principles for Ethical Machine-Learning Practice
• Comparative Analysis of Some Machine Learning Algorithms for the Classification of Ransomware
• Comparative Performance Analysis of Some Priority Queue Variants in Dijkstra’s Algorithm
• Transfer Learning in Detecting E-Assessment Malpractice from a Proctored Video Recordings.
• Dual-Modal Detection of Parkinson’s Disease: A Clinical Framework and Deep Learning Approach Using NeuroParkNet