Design, Simulation, and Performance Evaluation of A Secure, Segmented Multi-Subnet Network Infrastructure with Centralized Services for Educational Computer Engineering Workstation

Abstract

This study presents the design and simulation of a Computer Engineering Laboratory Network intended to provide reliable communication, centralized resource management, secure access control, and efficient network administration within an educational laboratory environment. The proposed network was developed using Cisco Packet Tracer and incorporates a hierarchical tree topology, logical subnetting, Virtual Local Area Networks (VLANs), static routing, Domain Name System (DNS) services, file-sharing services, and Access Control Lists (ACLs). The network architecture consists of forty (40) workstation computers, one (1) instructor workstation, centralized DNS and file servers, four (4) network printers, a guest wireless network, five (5) Cisco 2960 switches, and two (2) Cisco 2911 routers. Workstations were organized into separate subnet groups to improve traffic management and network scalability, while VLAN segmentation and ACL implementation enhanced security by restricting unauthorized access to critical resources. Simulation-based testing was conducted to evaluate connectivity, routing performance, DNS resolution, file-sharing functionality, and security controls. Results demonstrated successful inter-subnet communication, reliable static routing, effective DNS hostname resolution, operational file-sharing services, and secure isolation of guest wireless users from internal laboratory resources. ICMP and traceroute tests confirmed stable network performance with minimal packet loss and successful end-to-end connectivity across all network segments. The findings indicate that the proposed network design provides a scalable, secure, and manageable laboratory infrastructure capable of supporting instructional, administrative, and student computing requirements. The study demonstrates the effectiveness of integrating hierarchical network design, network segmentation, centralized services, and access control mechanisms in developing a modern Computer Engineering laboratory network.