This project outlines a detailed logical network architecture for Covenant Superstore. The primary objective of this design is to establish a secure and high-performance network foundation that protects sensitive company and customer data by leveraging modern security best practices. The core of this architecture is the strategic implementation of network segmentation using VLANs. This approach divides the network into four distinct security zones: a trusted internal Local Area Network (LAN), a semi-trusted Demilitarized Zone (DMZ) for public-facing servers, and two untrusted zones for the Internet (WAN) and Guest Wi-Fi. Access between these zones will be strictly controlled by a central firewall, operating on a "default deny" basis. This ensures that only explicitly permitted traffic can flow between segments, drastically reducing the organization's attack surface. This proposal details the network layout, IP addressing plan, a comprehensive set of firewall policies, and recommendations for ongoing management.