This project demonstrates the design and implementation of a secure dual-network (Two-LAN) architecture using both Cisco Packet Tracer simulation and a real Ubuntu-based environment.
The network is divided into:
- LAN1 (Internal Network) – Trusted users
- LAN2 (Public/DMZ Network) – Guests and web server access
The goal is to achieve:
- Secure network segmentation
- Controlled inter-network communication
- Internal web hosting
- Real-time traffic monitoring and logging
This project bridges theoretical networking concepts with practical system implementation.
-
🌐 Dual LAN Segmentation
- LAN1 → 192.168.1.0/24 (Internal)
- LAN2 → 192.168.2.0/24 (DMZ/Public)
-
🔁 Inter-LAN Routing
- Router-based communication between networks
-
📡 DHCP + Static IP Support
- Dynamic IP allocation for clients
- Static addressing for servers
-
🌍 Web Server Hosting
- Internal HTTP server (Packet Tracer + Apache Ubuntu)
-
🛡️ Security Isolation
- Logical separation of internal and public networks
- Controlled communication via routing
-
📊 Traffic Monitoring
- Packet capture using tcpdump
- Log file generation and analysis
-
🧪 Testing & Validation
- Ping tests
- HTTP access verification
- Simulation mode packet tracing
The system follows a two-LAN segmented model:
- LAN1 → Internal users (secure zone)
- LAN2 → Guests + Web Server (DMZ)
All communication passes through a router acting as:
- Gateway
- Security control point
Detailed architecture available in: 👉
- Cisco Packet Tracer
- Router (Cisco 2911)
- Switches (2960)
- PCs & Server
- Ubuntu Linux
- Apache2 Web Server
- Bash Scripts
- tcpdump
- Wireshark
- Log-based traffic analysis
- Two separate LANs with distinct IP ranges
- Router configured as default gateway
- Internal web server hosted in LAN2
- Apache2 setup on Ubuntu
- Packet capture stored as
.pcapfiles - Logs generated in
/var/log/traffic
- Successful ping across LANs
- Web server accessible via browser
All implementation steps are documented in the report
| Test Type | Result |
|---|---|
| Same LAN Communication | ✅ Success |
| Cross-LAN Routing | ✅ Success |
| Web Server Access | ✅ Success |
| Traffic Monitoring | ✅ Active |
secure-two-lan-network/
│
├── README.md
├── architecture.md
├── troubleshooting.md
├── setup.sh
├── start-monitoring.sh
├── logs/
├── report/
└── packet-tracer-file.pkt
- Network design and architecture
- Cisco Packet Tracer configuration
- Ubuntu server setup and testing
- Traffic monitoring implementation
- Project documentation and report preparation
- README and technical documentation
- Structuring architecture and explanations
- Testing validation support
Common issues and fixes are documented here: 👉
Includes:
- DHCP issues
- Apache server errors
- VLAN problems
- Traffic capture failures
- 🔐 Access Control Lists (ACLs)
- 🔥 Firewall integration (ASA / iptables advanced rules)
- 🌍 Internet access with NAT
- 📡 Wireless network integration
- 🚨 Intrusion Detection Systems (IDS)
- 📊 Monitoring dashboard (Grafana / Prometheus)
- Cisco Networking Academy
- Apache HTTP Server Documentation
- Ubuntu Server Docs
- Computer Networking – Tanenbaum
This is not just a simulation project. It combines:
✔ Network design ✔ Real-world Linux implementation ✔ Security concepts ✔ Traffic monitoring ✔ Practical validation
Making it a complete mini network security lab.
This project reflects a strong foundation in:
- Networking fundamentals
- Cybersecurity principles
- System-level implementation
Built as part of academic coursework — but designed with real-world relevance.