Network Diagrams

HI,
Network diagrams are drawn according to physical or logical connectivity?

If it helps, we use both but it depends on what you want your documentation to achieve. Do what works for you.

Similar Messages

Network diagram to display various of activities

Im trying to create an Activity Based Network Diagram for a Project Management Application. The application has been developed in Java AWT.
The Network Diagram will contain boxes which represent different activities and are connected to each other by lines signifying the predecessor and successor activities.
The general flow of the diagram has to be from left to right. This has to be developed in Java AWT or Swing or Java 2D.
Please let me know if any of you have developed something similar or can give any insight on how to proceed on this.

I don't know what knowledge there already is concerning Java development (I get the idea from your post that it is not you that is going to develop this). I would look into integrating this application into an existing application framework, like Eclipse or Netbeans. For example Netbeans already has an UML editor that has much of the functionality that is needed for your own application, so the foundation platform of Netbeans is sure to provide much of the nuts and bolts needed. Similarly on Eclipse, the JBoss tools plugin has a JBPM process editor which is very much like what you need.
If this is not an option, then go down the Swing and Java2D path. Most likely you will need to do some custom painting actions (the Java2D side). Then what you also need to do is identify what will be needed to implement the application (functional and technical design) and try to find existing solutions on the internet that might help speed up development. For example I would bet there is some API available that allows for drawing and moving boxes with lines between them, commercial or open source.

Drawing Network Diagrams For Virtualized Networks.

Hi guys,
I'm looking at drawing up simple network diagrams of the virtualised servers and IP addresses.. To make it easier to remember the IPs of the virtual machines and the hypervisor, which can get confusing at times. Is there any basic starting diagram I could
use to give a simple, clear visual representation of the virtualized network, which I could then use as a template for drawing custom network diagrams for my clients.
nb. I dont have visio, but I have photoshop my plan would be to get an image file and just edit this as required.
thanks,
J

Hi Jonathan,
it's a little bit off topic, but maybe my answer can help you.
I know that problem from my own environment. Recently we started to use VeeamOne (free version with a few limitations) for Monitoring the Workload on our Hosts and VMs.
A nice feature is that you can have an overview of the VMs per Host, including DNS-Name and IP-Address.
Maybe you want to have a look at it.
Best Regards,
Jens
jensit.wordpress.com

Forward and backward pass - network diagram

Does anyone have a .mpt file that allows you to perform forward and backward pass and display the ES, EF, LS, LF, SL in integer values instead the date formats?

Pardon me for bumping in, but I am assuming you want to show the date number for ES, EF etc.
You can with some calculations in Number fields.
For example:
Number1 (Early Start No) = DateDiff("d", [Project Start], [Early Start])
Number2 (Late Start No) - DateDiff("d",[Project Start],[Late Start])
You can continue in the same manner to calculate the number of days between the Project Start and Early Finish and Project start and late finish.
The Total slack field is a numeric value (in days) so no conversion needed.
You can then alter the network diagram view and replace the values as needed with [Number1], [Number2] etc.

Users Network Diagram

Hi all,
First of all, let me give you what I intend to do in my
coming senior project. I would like to produce a developer
workstation as a web application that will help the developers (not
in the same city) to send their document (codes, pdf, and other) to
other developer to review it or help him/her codes.
The main part in this application (as I see it) is to display
who are involve in a certain developer communication as a network
diagram with some sort of effects (something similar to the
following diagram I draw it).
Image URL:
Users
Network Diagram
So please, if you know something similar or something that
could help me, give me post.

It looks like you want to build a topology component. While I
wish there was one that ships out of the box, there isn't. I have
however seen third-party products that implement just such a
system, though I don't have any first-hand experience with them
yet.
Check out:
http://www.yworks.com/en/products_yfilesflex_about.htm

Network diagram

Hello,
I'm planning to setup a network with xserve and mac os x server when leopard is released for my company. I have been reading a lot about what I need for my requirements. I just wanted to verify my solution with you guys.
What I need:
Registered computers can have access to local network services, with their own my documents folder as well as any other shared folders etc. that can be accessed from any other registered computer. These computers can connect by wired, wireless or vpn.
Guessed computers can have access to the internet only, if they have some sort of a password. They can connect by wired and wireless.
My solution so far:
Internet ---> Mac Os X server --->
Switch ---> Wired Computers
Switch ---> Wireless Computers
(The swithes above are the same. The text editor didnt let me put tabs to make it more obvious)
Will mac os x server and a switch alone let me have this setup? All I want it so be able to dedicate the services and privillages to the computers I select, and the rest gets whatever I assign to them.
thanks

Also in this setup, which unit is going to control
dhcp, and vpn? In my design I was thinking to make
mac os x server to control evertyhing.
There are several reasons to have a firewall appliance do DHCP and VPN.
One reason is to isolate functions; if/when you take the server down for maintenance, that will keep the rest of your network up and let you be able to get to Apple's site, etc., for updates for the server or to see docs. It's also possible to set up redundant DHCP if you (a) use static map DHCP based on MAC address - you can safely duplicate that static map on a redundant DHCP server, and (b) have non-overlapping dynamic pool DHCP on the DHCP servers. If you overlap scope on dynamic pool DHCP servers, grave disorder results. Having redundant DHCP keeps your network up if one DHCP server goes down.
Second, it's a more secure setup to isolate the firewall and VPN functions. For example, an exploit that compromises your Xserve could disable a software firewall on the Xserve, but wouldn't be able to disable the firewall in an appliance.
Third, having separate boxes for separate functions makes it much easier to isolate problems.
I guess a switch with a firewall would be costing
less and getting the job done, right?
I would suggest a separate switch plugged in to the firewall, rather than a combination switch/firewall. Most combo units are not GigE; having a separate switch allows you to upgrade/test the firewall and switch independent of each other.
russ
Xserve G5 2.0 GHz 2 GB RAM Mac OS X (10.4.8) Apple Hardware RAID, ATTO UL4D, Exabyte VXA-2 1x10 1u

Remote Access VPN - Unable to Access LAN / Inside Network

Hi,
I am facing a problem with Cisco ASA remote access VPN, the remote client is connected to VPN and receiving IP address but the client is not able to ping or telnet any internal network.
I have attached running configuration for your reference. Please let me know I miss any configuartion.
FW : ASA5510
Version : 8.0
Note : Site to Site VPN is working without any issues
Thanks
Jamal

Hi,
Very nice network diagram
Are you saying that originally the VPN Client user is behind the Jeddah ASA?
If this is true wouldnt it be wiser to just use the already existing L2L VPN between these sites?
In real situation I think the VPN Client would only be needed when you are outside either Head Quarter or Jeddah Network. And since you tested it infront of the ASA and it worked there shouldnt be any problem.
Now to the reason why the VPN Client isnt working from behind the Jeddah ASA.
Can you check that the following configuration is found on the Jeddah ASA (Depending on the software level of the ASA the format of the command might change. I'm not 100% sure)
isakmp nat-traversal To enable NAT traversal globally, check that ISAKMP is enabled (you can enable it with the isakmp enable command) in global configuration mode and then use the isakmp nat-traversal command. If you have enabled NAT traversal, you can disable it with the no form of this command.
isakmp nat-traversal natkeepalive
no isakmp nat-traversal natkeepalive
Syntax Description
natkeepalive
Sets the NAT keep alive interval, from 10 to 3600 seconds. The default is 20 seconds.
Defaults
By default, NAT traversal (isakmp nat-traversal) is disabled.
Command Modes
The following table shows the modes in which you can enter the command:
Command Mode
Firewall Mode
Security Context
Routed
Transparent
Single
Multiple
Context
System
Global configuration
Command History
Release
Modification
Preexisting
This command was preexisting.
7.2(1)
This command was deprecated. The crypto isakmp nat-traversal command replaces it.
Usage Guidelines Network Address Translation (NAT), including Port Address Translation (PAT), is used in many networks where IPSec is also used, but there are a number of incompatibilities that prevent IPSec packets from successfully traversing NAT devices. NAT traversal enables ESP packets to pass through one or more NAT devices.
The security appliance supports NAT traversal as described by Version 2 and Version 3 of the IETF "UDP Encapsulation of IPsec Packets" draft, available at http://www.ietf.org/html.charters/ipsec-charter.html, and NAT traversal is supported for both dynamic and static crypto maps.
This command enables NAT-T globally on the security appliance. To disable in a crypto-map entry, use the crypto map set nat-t-disable command.
Examples
The following example, entered in global configuration mode, enables ISAKMP and then enables NAT traversal with an interval of 30 seconds:
hostname(config)# isakmp enable
hostname(config)# isakmp nat-traversal 30
- Jouni

Home/Office network setup (Mini Lan Network) if possible?

Hi,
To all the people that know what the best way to set up a home to office network such as the diagram below, please help us out with the following questions:
I hope that someone can understand the diagram. Anyways,
We currently have both setups, but there is no network communication either through Home nor Office where a PC will talk to a Mac or vic versa, nor through connecting through the internet where our office machines will talk to the home machines and vices versa. This is where my requirements for such a setup is needed.
Our Office uses the iMac for general Administration/Accounting work, whilst the PC is used for Engineering Draft work and others. The home machines; the PC again is used for Engineering work and others whilst the Mac is a general Purpose machine used by most members of the house hold.
Basically speaking, we would like to somehow link all peripherals and machines in such a way that:
- The home machines can talk to each other and their respective connected devices as well as the Office machines and their respective devices.
- The Office machines can talk to each other and their respective connected devices as well as the Home machines and their respective devices.
Currently the setup is as follows:
Home: PC : Has one main user for doing Engineering work and General other purpose activities.
MAC : Has multiple Accounts for doing general work
Office: PC : Has one main user for doing Engineering work and General other purpose activities.
MAC : Has 3 accounts; One for main Admin user and the other two only to access MYOB accounting and shared folders.
If I can get a point listing of how to achieve all this, I would be very grateful. Also, due to software licensing imposed by S/W companies what would be the best way to reduce the number of software bought for each computer only to be run from one main machine... similar to how program linking worked in Mac OS 9.2.2. I would like to do this through Virtaul PC running off the iMac and say running Microsoft Office from the P3. I currently have MS remote Desktop connection but this logs out the user that would otherwise been logged on when I hook up to the PC, is there another way?
I hope to get lots of feed back for this one guys.
Thanks
Tibs
<pre>
Home/Office Network Diagram:
PC (P4/2GHz Win 2000 Professional) Mac ( Dual Boot Dual 1.25GHz G4/ Tiger 10.4.9)
- Microsoft Office - General Software
- Engineering Software
| |
| |
| |
---------------------- SWITCH (100MBps) -------------------------
|
|
|
ADSL/CABLE Modem
|
-------------------------------------------------------------------------------- ---------------------------------------- HOME
|
INTERNET
|
-------------------------------------------------------------------------------- ---------------------------------------- OFFICE
|
ADSL/CABLE Modem
|
|
|
---------------------- SWITCH (100MBps) -------------------------
| |
| |
| |
PC (P3 800MHz/ Win 2000 Professional) iMac ( 1GHz G4/ Tiger 10.4.9)----------------------------- USB HUB ----------------------
- Engineering Software - MYOB Account Edge Version 6 | | |
- Microsoft Office - Virtual PC 6.1.1 | | |
| - Apple Works 6.2.4 | | |
| Epson Scanner Lexmark BW Laser Brother Fax
| |
|
---------------------------------- |--- FW 400 Ext. HD 80GB
| |
| |
HP A0 EPSON COLOUR
(NETWORK PLOTTER/PRINTER) (NETWORK LASER PRINTER)
</pre>
PPC MDD Dual Boot/Dual 1.25GHz Mac OS 9.2.x 2 x 23" Apple HD Display, 2GB RAM, 2x150GB + 1x1TB HD
PPC MDD Dual Boot/Dual 1.25GHz Mac OS 9.2.x 2 x 23" Apple HD Display, 2GB RAM, 2x150GB + 1x1TB HD

You should study VNC.
You will need to configure the router at work, to accept and forward VNC connections. (open port 5900, forward to computer#1's IP address. open port 5901, forward to computer#2's IP address...see below)
You will need to set up work computers to be running as VNC servers.
Work computers should also be configured to have static IP inside the LAN. Your router will need a fixed IP address to forward VNC traffic into.
standard listening port for VNC is 5900 (i think), and each VNC server can be set to listen on different port. (5900,5901,etc)
You will need to configure home computers to be VNC client.
On home computer, in order to connect to work computer #1, run VNC client to connect to Work Public IP address (WAN router address) on port 5905(or whatever standard VNC port is). Work router will forward that hit on VNC port, into work computer#1.
More FAQ here:
http://www.google.com/search?num=100&hl=en&safe=off&q=vnc+faq&btnG=Search

ASA5505 I cannot reach to an outside network from a branch office

My customer has a HQ office and many Branch offices. In the HQ there is an ASA5510 configured as a default gateway, From HQ customer must access to internet (everythig works fine), from Inside LAN should reach to anyway including special services like Credit Card service provider and others (it works fine). From Branch offices must reach Inside LAN hosts (it works fine), from Branch Offices must reach DMZ (it works fine), from branch offices should reach CC Service provider and here's the point of this Q, From almost all branch offices they reach CCSP fine but branch offices where an ASA5505 is installed (Offices that reach CCSP have a RV042 installed or a TPlink ER6120 installed) but offices with ASA just can ping to LAN side of CCSP's router.
I think ASA5505 conf is an opened door configuration. Here's the 5505 configuration and also attached the network diagram. Some one can help please

Hi,
Are the branch offices connected to the HQ through some ISP MPLS network since I do not see any L2L VPN configurations on the ASA5505?
I presume this is the case. Since you say that the connections between Branch Office (with ASA5505) and HQ LAN work fine it should tell us that there should be no routing problems between those networks.
The diagram possibly also suggests that all the Branch Office connections come to your HQ network through the same Router at the edge so if other Branc Offices connections CCSP work then there should be no routing problem between the Branch Offices and the CCSP (atleast regarding your part of the network)
Now, some questions.
Does the ISR Router forward traffic destined to CCSP directly to the Router at 192.168.2.249 ?
Does the Router with the connection to the CCSP use the Internet to reach the CCSP or is there somekind of dedicated connection between these networks?
If the Router towards CCSP uses Internet then does it lack some NAT configurations for the source network 192.168.27.0/24? Does it perhaps lack a route towards the network 192.168.27.0/24? Or is there any possible errors in the configurations (wrong gateway IP or network mask somewhere?)
Is there any ACLs configured on the Router that has the connection to the CCSP that might block traffic?
Does the CCSP have all the required routing information to pass traffic towards the network 192.168.27.0/24? (If were talking about a dedicated connection and not traffic through the Internet) Have they allowed traffic from the mentioned network 192.168.27.0/24 to their servers/network?
Have you taken "packet-tracer" output from the ASA5505 to confirm that the ASA configurations allow the traffic and dont drop it for some reason?
For example
packet-tracer input inside tcp 192.168.27.100 12345 193.168.1.100 80
You can modify the IP addresses (source/destination) and the used destination port and protocol to match the connections that are actually attempted.
Have you monitored the connections on the ASA when users attempt them? This should atleast tell you why they are failing or give a hint. You could also configure traffic capture on the ASA5505 if you wanted to make sure if any traffic was coming from the CCSP towards this ASA (return traffic for connection attempt)
Hope this helps :)
Let me know if I missunderstood the situation wrong somehow.
- Jouni

Network Security for a department

Hi all ,
       Please go through my network diagram
I am using ospf in the network .I only mentioned some of the routers in the diagram .
Consider a Department A which is having a branch connected to Router R3 and to some other routers through E1 links   which is no mentioned here .
Department A is having servers in the DMZ Zone of the firewall .
I need to add security features(Ipsec) to the department A network either though firewall or through routers .Here consider 192.168.2.0/24 in the R3 as department A network .Need to provide ipsec or any other security features to 192.168.2.0/24 network only not to the whole R3 network .
Routers Cisco 7206 ,7204

Hi jennifer ,
   I understood the router part configuration .
Let me clear a point
In the pix ,servers are in the server zone whose security Level is 95 and wan network in W AN zone and security level is 91. The ipsec is to be enable in WAN zone interface for a particulaR traffic .
interface Ethernet4
speed 100
duplex full
nameif WAN
security-level 91
ip address x.x.x.x y.y.y.y
interface Ethernet5
speed 100
duplex full
nameif SERVER
security-level 95
ip address X.X.X.X Y.Y.Y.Y
I had read the following link
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00805e8c80.shtml
I had totally confused with PIX part .
crypto ipsec transform-set avalanche esp-des esp-md5-hmac
crypto ipsec security-association lifetime seconds 3600
crypto ipsec df-bit clear-df outside
crypto map forsberg 21 match address Ipsec-conn
crypto map forsberg 21 set peer 172.17.63.230
crypto map forsberg 21 set transform-set avalanche
crypto map forsberg interface outside
tunnel-group 172.17.63.230 type ipsec-l2l
tunnel-group 172.17.63.230 ipsec-attributes
pre-shared-key *
The above configuration is mentioning about one branch router and its ip 172.17.63.230.
But i had 14 branch routers .Then what is the change in the network configuration also what is the significance of
access-list nonat extended permit ip 10.1.1.0 255.255.255.0 10.2.2.0 255.255.255.0
.Here my traffic is not to the outside interface but only to the intranet .

Unable to access shared files over network after period of time.

First off, I don't think that this issue is related to our router, but I have been searching for a fix and can not find one. We have a WRT54GS. Now, on to our issue:
At my work, we have a small network with computers sharing files between the others. I have attached a network diagram to help explain this better.
Our Win7 machine is our main computer that shares an external hard drive with much information that the other computers need to access. What we have noticed is either after a sleep, or even a period of time of say, 2 hours, those files are no longer able to be accessed. The Win7 machine is still sharing them, but the WinXP machines are unable to access them anymore and my Mac can see the computer is unable to connect to the folders. I have gone and attempted to get some help over at Microsofts site but that was a fail. Here is the link to the forum post there. http://social.answers.microsoft.com/Forums/en-US/w7network/thread/f0a2e8d6-f75a-41d7-a280-c6f3adbffa...
A member there gave me this:
The Network connection is probably not resuming after sleep.
First try this, http://www.ezlan.net/Win7/power_save_win7.jpg
It is in the Network Connection Properties under the Network card configuration.
If it already checked this way, or does not work after checking, the Network card has to be taken out of the computer's Power Saving loop, and stay on all the time.
Otherwise, Updating the Card with the latest OEM drivers (downloaded from the computer's support site) might help too.
On a rare occasions, some cards might be "Quirky" in this regards and need to be replaced.
--I would like to add that this DOESN'T ONLY happen after sleep, it also happens after a time of being used.
I attempted those and no luck. This problem is still occurring and the only way we can fix it is by restarting the Win7 machine. But even if it is being used, we have no idea when those files are unable to be accessed.
*I will add that the Win7 machine is still able to access the other computers when this problem occurs if that helps.
**The Win7 machine is a Dell T3500 running Windows 7 64bit. I can provide specific hardware if needed. The drivers are all up to date as of yesterday.
***So upon looking in the Windows XP machine, both of the folders from the Win7 machine disappear once this problem occurs in the My Network Places folder. And one folder is on the internal drive, one is on external. The computers are in this situation now where I am unable to access them. The Win7 machine can read and write from the other computers, but the other computers can even see the Win7 Machine.
****All the connections are wired and are not using the wireless.
Thanks for any help that anyone may have for me!
Steve
Network Map > http://scubasblog.com/network.jpg
Dell Support Forum with same issue I posted >> http://en.community.dell.com/support-forums/network-internet-wireless/f/3324/p/19337620/19716797.asp...

It sounds like there is incompatibility issue with XP and Win7. To isolate this, do you have another Win7 machine? Try to add it to the network and check if the shared drives are accessible after sleep. If you don't have another computer, try virtual machine and create a Win7 system.
Update your LAN card driver from the manufacturer's site. Don't use the driver from windows update.
Lastly, does this happen to your XP machines? Like, one of the XP machine sharing a folder and falls asleep. When it wakes up, does Win7 machine can still access the shared folder?

Apple Home Networking Setup

Hi, hope someone could help before i do purchase the whole package I need from apple.
This is the current network i did design, however I would really appreciate any tips or corrections regarding the set up.
INTERNET ROUTER>SWITCH*>TIME CAPSULE>PORT 1 > ethernet connected KITCHEN AIRPORT EXPRESS
                                                                              PORT 2 > ethernet connected TV AREA > SWITCH > PORT 1 AIRPORT EXPRESS
                                                                                                                                                                PORT 2 BOSE SURROUND SYSTEM
                                                                                                                                                                PORT 3 APPLE TV
                                                                                                                                                                PORT 4 MAC > USB/ETHERNET > PRINTER
                                                                                                                                    (or would be better to add the printer to a FIFT PORT of the switch?)
                                                                                                                                                                PORT 5 SKY BOX
                                                                              PORT 3 > ethernet connected > SWITCH***> 4 ethernet connected AIRPORT EXPRESS (other floors)
                                                                                                As i pads cannot be connected to the Ethernet then those will stream (wall mounted).
*This SWITCH will incorporate CCTV hub, Lights hub, EVOHOME hub, INTERCOM hub and 11 ethernet cables coming from various room wall plugs.
**This SWITCH will incorporate all TV AREA technology. Would all these switches create issues?
***This SWITCH will incorporate the 4 cables of the AIRPORT EXPRESS(S) from other rooms so to be able to get them all in the TIME CAPSULE port.
I did replace the AIRPORT EXTREME with the TIME CAPSULE for the back up
I tried to get all the AIRPORTEXPRESS etc.. into the TIMECAPSULE direct port
Would you move something before/after the main switch* or other ideas to get data flowing smoothly?
Thank you
Kerry

One item of concern with your proposed networking diagram is that the INTERNET ROUTER. Are you suggesting using a combination modem & router or gateway device here? If it is, then your network, as designed, should work just fine. Usually, gateway devices incorporate a built-in multi-port switch.
The only other question I have is: Is the switch at: PORT 2 > ethernet connected TV AREA > SWITCH > PORT 1 AIRPORT EXPRESS the switch you identified with a double star? Otherwise I could not find this switch.

Web page slow on 192.168.x.x network

I don't think this is a Cisco problem. When I try to access our school homepage from a 192.168.x.x network it is very slow to load. When I access the page from a 172.20.X.X network or registered subnet it works fine. It also works from the Internet. I've also tried several differant 192.168.x.x networks with the same slow page loading problem. I even tried a vlan with a 192.169.x.x network the page loaded fine. I even tried a 192.168.x.x network on the same vlan as the server. All other traffic from the 192.168.x.x network is fine. Any ideas why the page loads slow from a 192.168.x.x net??

Hi!
Can u send us ur network diagram? It will helpful to give suggestions...
Im not sure but maybe there is a routing problem... Please check traceroute from 192.168.x.x and from 172.16.x.x
Regards
Ahmet

Help needed setting up access point to public network

Hi from a newbie,
Assuming they are suitable, I want to use one (or two) AP1232AG-E-K9 access points for Internet connection through a public wireless network (BTFON), where wire broadband is not an option. I've downloaded what I think is the correct manual for the APs and I'm now scratching my head as to where and how to start setting them up. I want to use these Cisco APs in the hope they will give me better wireless performance than I'm currently getting, which is frequently flakey.
I've tried to reset the APs to the factory default but there seem to be different ways of doing this depending on what you want and what you've got. I made up a console cable to access the console but there even appear to be different versions of this so I'm not sure if the cable I have is the correct one.
I have setup and used lower end wireless devices in the past but these Cisco units seem real complicated and I'm going to need help in getting them working.
Any assistance would be much appreciated.
Kind regards,
Glenn.

Updated network diagram.

Building/editing topology diagrams - any ideas/advice?

Hi,
I'd like to build a web application that is capable of displaying & editing topology diagram (e.g. a network diagram with applications too). Effectively to have a graphically web based means of allowing a user to add nodes & relationships to represent a topology such as the following [http://performancepointinsider.com/files/planning/planningtopology.png|http://performancepointinsider.com/files/planning/planningtopology.png] . So the model basically consists of nodes and relationships.
Any ideas/advice on how best to do this, e.g.:
Q1. Any open-source project that does something similar?
Q2. Best way of handling the graphical aspect of the application?
(e.g. prototype, extjs, etc?)
Thanks

Hi Eric,
I want to build topology diagrams in Flex 2. Is it possible? Are there any prototypes like TWaver built on Flex 2? Twaver is built on Flex 3 and i cant use it on Flex Builder 2....
P.S: I dont have Flex 3 SDK or Flex Builder 3 and i cant even avail it any time sooner.

Network Diagrams

Similar Messages

Maybe you are looking for