Network simulation build in packet tracer

Network topology provided as image attachment, details are below for the project. Network Deployment • Single area OSPF should be used to manage routing within the HQ Site • Secure all OSPF communication • Deploy suitable static and default routes on the ISP router and the two permitter routers (R1 and R4) routers to enable connectivity between the HQ site and the Secondary Site. • Assign the switches their IP address, subnet mask and default gateway. AAA Services for the Management Plane • Implement an AAA Server running TACACS+ within Packet Tracer • Create two user accounts on the AAA server for network management purposes. • Configure routers R1, R2 and R3 along with switches S1, S2 and S3 to communicate with the AAA Server. Make sure that R1, R2, R3, S1, S2 and S3 use the AAA server for all network management authentication requests. • Configure SSHv2 as the only remote access management protocol recognised by all routers and switches within the HQ site. Site to Site Security • Create a site-to-site VPN between R1 and R4. All traffic travelling between the internal networks of both sites should be sent over the VPN. All Internet traffic should remain unencrypted. Choose suitable authentication, data integrity and data privacy protocols for the VPN.   Firewall Services • Deploy a stateful firewall on R1. All conversations that are initiated by an end device internal to the HQ Site (reachable via Gi0/0 of R1) and destined for a device on the Internet (represented by PC1) should be allowed through the firewall. All responses should be allowed back through the firewall. • If a device connected to the Internet (ISP) attempts to start a conversation with one of the internal devices within the HQ site, then that conversation should be blocked by the firewall. • Make sure that Internet devices and internal devices do have access to the Web Server. Make sure that only web traffic is permitted through the firewall to the web server. The web server should not be allowed to initiate any conversation with any internal or Internet device but it must respond to all Web requests.