Configuring network devices is a critical skill for cyber security professionals, especially in Kenya’s growing digital economy where secure and efficient data communication underpins business operations and public services. This chapter focuses on designing Local Area Networks (LANs) and assigning IP addresses, foundational tasks that affect network performance, security, and manageability. Proper network design and addressing schemes ensure that cyber security measures can be effectively implemented and enforced, supporting organizations such as county governments, banks, and hospitals in protecting sensitive data and resources.

4.1 Design a Local Area Network

Designing a Local Area Network (LAN) involves planning the structure and layout of the network to optimize performance, reliability, and security. Kenyan organizations such as universities, SACCOs, and retail chains depend on well-designed LANs to support their internal communications and safeguard against cyber threats. The design process includes defining the logical and physical topologies which determine how devices connect and communicate within the network.

4.1.1 Logical Topology

Logical topology describes how data flows within a network, independent of its physical layout. It defines the path that signals follow between devices, influencing network efficiency and security.

Characteristics of Logical Topology

• Data Flow Direction: Logical topology determines whether communication is unidirectional or bidirectional, impacting network protocols and security arrangements.
• Network Protocol Compatibility: The chosen logical topology must support protocols such as TCP/IP, which are essential for secure communication in Kenyan financial institutions and government agencies.
• Scalability: A logical topology should allow easy expansion to accommodate additional devices without compromising performance or security.
• Fault Isolation: Effective logical design can limit the impact of faults or attacks by segmenting data flow paths, critical for cybersecurity incident containment.
• Security Implications: Logical topology affects firewall placement, access control, and monitoring strategies, shaping the defense mechanisms against internal and external threats.

Common Logical Topologies Used in LANs

• Bus Topology: Data travels in one direction along a single cable; simple but vulnerable to cable failures affecting the entire network.
• Star Topology: All devices connect to a central hub or switch; failures in a single device do not affect others, making it popular in Kenyan hospitals for robustness.
• Ring Topology: Devices connect in a circular manner with data passing through each node; offers predictable data flow but can be disrupted by a single node failure.
• Mesh Topology: Every device connects to multiple others, providing redundancy; used in critical infrastructure like county government offices for resilience.
• Hybrid Topology: Combination of two or more logical topologies, allowing customization to specific organizational needs and security policies.

4.1.2 Physical Topology

Physical topology refers to the actual physical layout of network devices and cables. It impacts installation costs, maintenance, and vulnerability to physical attacks or environmental hazards.

Key Physical Topologies and Their Applications

• Bus Topology: Devices share a single communication line; cost-effective but difficult to troubleshoot and less secure due to shared medium.
• Star Topology: Devices connect via individual cables to a central switch; facilitates easy isolation of faults and physical security controls.
• Ring Topology: Devices physically form a closed loop; requires careful cable management and monitoring to prevent disruptions.
• Mesh Topology: Direct physical connections between many devices; complex and costly but provides alternative paths for data in case of link failure.
• Tree Topology: Hierarchical layout combining star and bus topologies; suited for large organizations like universities where departments need segmented networks.

Considerations for Physical Topology in Cyber Security

• Physical Security: Placement of switches and routers in secure, access-controlled environments reduces risk of tampering.
• Environmental Factors: Kenyan offices located in areas with power fluctuations must consider topology designs that support uninterrupted power supplies to critical devices.
• Cable Management: Proper labeling and routing prevent accidental disconnections and facilitate rapid response during cyber incident investigations.
• Redundancy: Physical topology should support backup links to maintain service availability during hardware failures.
• Ease of Maintenance: Topology should allow for straightforward upgrades and repairs without extensive downtime, essential for institutions like banks that require constant network availability.

Chapter Summary

This chapter explored the design of Local Area Networks by distinguishing between logical and physical topologies, emphasizing how devices are interconnected conceptually and physically. It then addressed the assignment of IP addresses, explaining the differences between static and dynamic methods and their applications in network management. The configuration of routing protocols was covered next, with a focus on static routing that requires manual setup and dynamic routing that adapts automatically to network changes. Finally, the chapter detailed approaches to network troubleshooting, highlighting both command line tools and graphical tools as essential resources for diagnosing and resolving connectivity issues in various environments.