Configuring network devices is a fundamental skill for cyber security professionals operating in Kenya’s dynamic IT environment. Effective network configuration ensures secure, reliable communication within organizations such as county government offices, financial institutions, and healthcare facilities. This chapter focuses on designing Local Area Networks (LANs) tailored to security needs and correctly assigning IP addresses, both of which are essential for establishing controlled access and monitoring in cyber security frameworks.

4.1 Design a Local Area Network

Designing a Local Area Network (LAN) involves creating a structured framework that connects devices within a limited geographic area, such as an office or campus. For cyber security professionals in Kenya, LAN design must incorporate secure topologies that reduce vulnerabilities while optimizing network performance. Whether for a SACCO managing sensitive financial data or a county hospital coordinating patient records, a well-designed LAN supports both operational efficiency and security oversight.

4.1.1 Logical Topology

Logical topology refers to how data flows within a network, regardless of the physical connections between devices. It defines the path that data packets take and determines communication protocols, which is critical for enforcing security policies and controlling access.

Components of Logical Topology

• Bus Topology: Data travels along a single communication line shared by all devices. This topology is simple but vulnerable to collisions and eavesdropping, which can be risky for sensitive information in institutions like banks.
• Star Topology: Devices connect to a central device, usually a switch or hub, which manages data traffic. This structure allows easier implementation of security controls at the central node, ideal for university networks where monitoring is crucial.
• Ring Topology: Devices are connected in a closed loop, with data passing sequentially. It provides predictable data flow but presents challenges in isolating compromised nodes, a concern for secure government offices.
• Mesh Topology: Every device connects to multiple others, providing redundancy. This robust design enhances fault tolerance and is suitable for critical infrastructure like county hospitals where uptime and security are paramount.
• Hybrid Topology: Combines two or more logical topologies to leverage their advantages. For example, a hotel’s network may use a star topology within floors and a mesh topology between floors to balance security and reliability.

Importance of Logical Topology in Cyber Security

Logical topology influences how cyber security measures are applied. For instance, in a star topology, a compromised central switch can jeopardize the entire network, emphasizing the need for hardened devices and segmentation. Logical designs also determine where firewalls and intrusion detection systems are placed, shaping the network’s defensive posture.

4.1.2 Physical Topology

Physical topology describes the actual physical layout of network devices and cables. It affects installation costs, maintenance, and the physical security of the network infrastructure, which are pertinent considerations in Kenyan organizations managing limited budgets and diverse environments.

Types of Physical Topologies

• Bus Physical Topology: Devices connect to a single backbone cable. This layout is cost-effective but difficult to troubleshoot and secure, making it less suitable for cyber security-sensitive environments.
• Star Physical Topology: Each device has a dedicated cable to a central hub or switch. This layout simplifies troubleshooting and supports physical security measures such as controlled access to wiring closets in banks or schools.
• Ring Physical Topology: Devices connect in a closed loop with cables forming a ring. Physical failures can disrupt the entire network, so this topology requires careful cabling and monitoring.
• Mesh Physical Topology: Devices connect directly with multiple cables to other devices. Though expensive, this topology offers redundancy, reducing downtime risks for mission-critical facilities like county government offices.
• Tree Physical Topology: A combination of star-configured groups connected to a linear bus backbone. This hierarchical structure allows segmented security zones, useful for large organizations such as universities.

Physical Topology and Security Considerations

Physical topology impacts the risk of unauthorized physical access to network components. For example, a star topology centralizes connections, allowing easier physical protection of critical devices. Conversely, bus topologies expose cables, increasing interception risks. Cyber security professionals must collaborate with facility managers to secure wiring closets and cable routes to prevent tampering.

Chapter Summary

This chapter explored the essential steps in configuring network devices, beginning with the design of Local Area Networks through the understanding of logical and physical topologies. Logical topology focused on how data flows within the network, while physical topology described the actual arrangement of cables and devices. The chapter then examined the assignment of IP addresses, differentiating between static addresses that are manually configured and dynamic addresses assigned automatically via DHCP. Routing protocols were covered next, highlighting the differences between static routing, where routes are manually set, and dynamic routing, which allows routers to share information and adapt to network changes. Finally, the chapter addressed network troubleshooting techniques using both command line tools, such as ping and traceroute, and graphical tools that provide visual interfaces for diagnosing network issues. Together, these topics provide a comprehensive foundation for configuring and managing network devices effectively.