Redizajn siete vybranej strednej školy

The bachelor thesis focuses on the design and implementation of a modern LAN solution for a selected secondary school with emphasis on transparency, security and the possibility of future expansion. The main theme is the transition from an outdated and disjointed model to a centralized design with a split into MDF and IDF cabinets, complemented by Layer 3 routing and logical network segmentation using VLANs. The theoretical part of the thesis is devoted to the analysis of network designs including hierarchical models, access-distribution structures and solutions such as VSS, SD-Access and Routed Access. Structured cabling, its components and the selection of appropriate technologies are then described. The practical part documents the physical and logical mapping of the infrastructure, the selection of specific devices (switches, firewalls) and the configuration of the network on each floor of the school. The thesis details the setup of the Check Point SMB firewall including virtual switches, DHCP, ACL rules, VPN access, NAT, application filtering, defining zones, objects and public servers. Logging using rsyslog and Graylog is also mentioned, as well as backing up configurations using the Oxidized tool. A separate chapter is devoted to rewriting the original Proxmox static network into a bridged model with vmbr0, which simplifies routing and management of the virtual environment. Authentication of services and server IP addresses was then performed via SSH tunneling, password resets and tools such as nmap. The work resulted in a consolidated and easy to maintain network infrastructure with an emphasis on security and management.