Developed as a Complex Computing Problem (CCP) project at the University of Management and Technology (UMT), Lahore by Muhammad Ibrahim, Muhammad Hammad Mirza, Muhammad Hammad Hadier, and Muhammad Abdullah[cite: 2].
Modern campus networks face challenges regarding inefficient IPv4 space allocation, poor traffic isolation, and security risks from high-density student areas[cite: 2]. This project delivers a fully scalable, secure, and optimized network architecture designed for a mid-sized university across 8 primary departments using a single 192.168.0.0/22 IP block (1,024 total addresses)[cite: 2].
By applying Variable Length Subnet Masking (VLSM) instead of fixed-length subnetting, the network optimizes address allocation according to actual host density, saving 494 IP addresses for future expansion[cite: 2]:
| Department / Zone | Subnet ID | Subnet Mask | Usable Host Range | Subnet Size | Usable Hosts[cite: 2] |
| :--- | :--- | :--- | :--- | :--- | :---[cite: 2]|
| Computer Science (CS) | 192.168.0.0 | 255.255.255.128 | 192.168.0.1 - 192.168.0.126 | /25 | 126[cite: 2] |
| Hostel | 192.168.2.0 | 255.255.255.128 | 192.168.2.1 - 192.168.2.126 | /25 | 126[cite: 2] |
| Mechanical Eng. (ME) | 192.168.7.0 | 255.255.255.192 | 192.168.7.1 - 192.168.7.62 | /26 | 62[cite: 2] |
| Electrical Eng. (EE) | 192.168.1.0 | 255.255.255.192 | 192.168.1.1 - 192.168.1.62 | /26 | 62[cite: 2] |
| Faculty Block | 192.168.3.0 | 255.255.255.192 | 192.168.3.1 - 192.168.3.62 | /26 | 62[cite: 2] |
| Library | 192.168.6.0 | 255.255.255.192 | 192.168.6.1 - 192.168.6.62 | /26 | 62[cite: 2] |
| Admin Office | 192.168.5.0 | 255.255.255.224 | 192.168.5.1 - 192.168.5.30 | /27 | 30[cite: 2] |
| Civil Engineering | 192.168.4.0 | 255.255.255.224 | 192.168.4.1 - 192.168.4.30 | /27 | 30[cite: 2] |
| ISP Domain | 1.0.0.0 | 255.255.255.248 | 1.0.0.1 - 1.0.0.6 | /29 | 6[cite: 2] |
To transition the campus from a flat network to a role-based environment, a Standard Access Control List (ACL 10) was implemented on the core routing engine (Router1)[cite: 2]:
- Threat Mitigation: Blocks lateral movement and mitigates security threats originating from high-risk zones (Hostels) towards sensitive administrative and grading infrastructures (Admin Office & Faculty Block)[cite: 2].
- Rule Logic: Explicitly denies traffic from the Hostel block (
192.168.2.0/25) to outward-facing interfaces of restricted departments while permitting outbound access to external resources[cite: 2].
access-list 10 deny 192.168.2.0 0.0.0.127
access-list 10 permit any
```[cite: 2]
---
## 🚀 Key Implementation Highlights
* **Dynamic Routing:** Configured **Routing Information Protocol (RIP)** across core and perimeter routers (`Router0`, `Router1`, `Router2`) for inter-subnet communication[cite: 2].
* **Application Services:** Deployed DNS resolution and HTTP web servers for specific departmental portals (Admin Block Portal, Faculty Portal, Hostel Portal, and External Web Services)[cite: 2].
* **Packet Tracer Simulation:** Verified complete functionality including ICMP ping sweeps, web browser HTTP requests, and ACL packet drops[cite: 2].
---
## 🛠️ Stack & Tools
* **Simulation Environment:** Cisco Packet Tracer[cite: 2]
* **Protocols:** IPv4, VLSM, RIP, ICMP, HTTP, DNS, Standard ACLs[cite: 2]