Network exam project

Hello everyone.

I'm sorry if this sub isn't the right place for these kinds of questions, but I'm starting get desperate.

We have a network project which will count for 100% of the exam grade but we feel that we haven't been given enough knowledge and practice to go into this, so we're having trouble even sketching out basic the set up of what goes where.

Given 3 physical servers and two Raspberry Pies we are to set these up under the following criteria:

Put hardware "where it should go" (anywhere that we want in our network)

We get one public IP, and then within our gateway only private ips. Two zones, one dmz and one secure. Vlan 802.1q. Firewall should only let packets going to public services in the dmz, then into the network via NAT/NAPT. Between dmz and secure zone there should be a firewall as well. Connections from secure side should get response. Secure zone should should have dynamically distributed IPS from DHCP while dmz should have static from DHCP.

And then some more services, so total: DNS, DHCP, webserver with cms, websolution for email, email, firewall, HIDS and backup.

So I guess firstly I am wondering where do I put everything, and what services go where.

We haven't had any vlan labs, nothing about hids, nothing about backup, nothing about dmz or secure zone. We're really just wondering how to sketch this up so we can start googling. If we have the "correct" platform, atleast it's easier to start building the configs

GW -> firewall-> DMZ -> firewall-> Secure zone Vlan will consist of the dmz and secure zone?

We tried showing this sketch to the professor but he said he will not help us because it's the exam project. We were told to Google it