Build network topology

You have been assigned the task of migrating of the network topology from one configuration to another. To accomplish this, you’ll need to partition the network into distinct security zones using VLANs, routing policies, and stateless firewalls if necessary. You’ll also have to determine the appropriate security zone for each device based on their security needs and establish how they can communicate with other devices within their respective security zones. Additionally, you must set up a DNS solution that segregates traffic between private and public DNS servers, permitting only authorized endpoints to access private DNS servers while allowing any endpoint to query public DNS servers. During the migration process, you’ll transition from static routing to the dynamic routing protocol OSPF, as detailed in FRR (https://frrouting.org/).

Furthermore, it’s essential to segregate network traffic between security zones using VLANs, routing policies, and stateful Layer 3 firewalls. You should also complete the implementation of a split DNS security pattern, where private DNS handles queries for the company’s internal resources and only authorized endpoints can query it, while public DNS handles queries for public-facing assets and is accessible to any endpoint. Finally, ensure that all host firewalls are configured using either ansible or python scripts.

Note: you have to add the below topology to my existing topology and do the necessary configuration to my existing topology if needed.