[SOLVED] software network security Configure Test Lab for PPTP, L2TPIPsec, and EAPTLS Remote Access VPN Connections

Configure Test Lab for PPTP, L2TPIPsec, and EAPTLS Remote Access VPN Connections

Define group of two or three team members and perform following task.

The infrastructure for the VPN test lab network consists of five computers performing the following services:
A computer running Windows Server 2016, named DC1 that is acting as a domain controller, a Domain Name System DNS server, a Dynamic Host Configuration Protocol DHCP server, and a certification authority CA.
A computer running Windows Server 2016, named IAS1 that is acting as a Remote Authentication DialIn User Service RADIUS server.
A computer running Windows Server 2016, named IIS1 that is acting as a Web and file server.
A computer running Windows Server 2016, named VPN1 that is acting as a VPN server. VPN1 has two network adapters installed.
A computer running Windows 10 named CLIENT1 that is acting as a VPN client

The following diagram shows the configuration of the VPN test lab.

There is a network segment representing a corporate intranet and a network segment representing the Internet. All computers on the corporate intranet are connected to a common hub or Layer 2 switch. All computers on the Internet are connected to a separate common hub or Layer 2 switch. Private addresses are used throughout the test lab configuration. The private network of 172.16.0.024 is used for the intranet. The private network of 10.0.0.024 is used for the simulated Internet. Windows Firewall is set up and configured on the RADIUS server IAS1, the Web and file server IIS1, and the client computer CLIENT1. Windows Firewall should not be turned on or configured on either the domain controller DC1 or the VPN server VPN1. In addition, the Windows FirewallInternet Connection Sharing ICS service should be disabled on VPN1.

IIS1 obtains its IP address configuration using DHCP. CLIENT1 uses DHCP for its IP address configuration; however, it is also configured with an alternate IP configuration so that it can be placed on either the intranet network segment or the simulated Internet. All other computers have a manual IP address configuration. There are no Windows Internet Name Service WINS servers present.

It is important to record resultScreenshot of every task and show it to your trainer to evaluate the task.

Question 1: Configure perimeter topology as per diagram
Question 2: Configure basic functionality of devices as mentioned to allow easy access of devices
Question 3: Configure PPTP based remote access VPN connection
Question 4: Establish a connection between CLIENT1 PC AND IIS1 SERVER
Question 5: Test connection between CLIENT1 PC AND INTRANET PCs
Question 6: Perform penetration testing on VPN network.
Question 7: Monitor and show performance of perimeter device during failure and upgrade of service.

Assessment Task 3: Project

Define group of two or three team members and perform following tasks and present to your assessor in a group.

Design plan document for the small scale Chartered Accountant firm approximately 15 clients across the network as mentioned in Task 2 to implement security parameter. You may also include the following in your plan.

Question 1: Identify potential of security needed to meet the requirements.
Question 2: What are the major security threats for the organisation?
Question 3: Define new security policy for the organisation.
Question 4: Show your work on different network security option available.
Question 5: Details of the optimised design plan of new network topology.
Question 6: Hardware and Software requirements.
Question 7: Document the testing result.