Designing and Implementing A Secure Enterprise Network Using Ether channel, STP, and Access Control Lists
Loading...
Files
Date
2026
Authors
Journal Title
Journal ISSN
Volume Title
Publisher
NHCE
Abstract
Modern enterprise networks demand high availability, efficient traffic management, and
robust security. This internship report documents a month-long experiential learning
programme at Brillio Technologies Pvt. Ltd., during which the design and practical
implementation of a secure enterprise network were explored using industry-standard
protocols and tools.
The study centres on three complementary technologies: EtherChannel, Spanning Tree
Protocol (STP), and Access Control Lists (ACLs). EtherChannel bundles multiple physical
switch links into a single logical connection, increasing aggregate bandwidth and providing
link-level redundancy. STP prevents Layer 2 loops that would otherwise result in broadcast
storms and network outages, while simultaneously integrating with EtherChannel to treat a
bundle as one logical link, thereby optimising port utilisation. ACLs enforce security policies
at the network perimeter and within internal segments by selectively permitting or denying
traffic flows based on source and destination addresses, transport-layer protocols, and port
numbers.
Practical exercises were carried out using Cisco Packet Tracer. Scenarios included
configuring EtherChannel with both LACP and PAgP, adjusting STP bridge priorities to
control root-bridge election, applying standard and extended ACLs to router interfaces, and
simulating link failures to verify fault-tolerance behaviour. The internship also covered
complementary topics such as Virtual Private Networks, Network Address Translation,
Quality of Service, network troubleshooting methodologies, and configuration management
practices.
The report analyses the interplay between these technologies, demonstrates how their
combined deployment improves network resilience, and outlines the skills acquired in
network architecture, CLI-based device management, and systematic fault diagnosis.