Tigran K. Profile

0.0

(0 ulasan)

Anda kini mengikuti

Ralat mengikuti pengguna.

Pengguna ini tidak membenarkan pengguna untuk mengikuti mereka.

Anda telah mengikuti pengguna ini.

Pelan keahlian anda hanya membenarkan 0 mengikuti. Naik taraf di sini.

Berjaya menyahikut

Ralat tidak mengikuti pengguna.

Anda berjaya mengesyorkan

Ralat mengesyorkan pengguna.

Sesuatu telah berlaku. Sila segar semula halaman dan cuba lagi.

E-mel berjaya disahkan.

$29 USD / jam

berlin,

germany

$29 USD / jam

Sekarang jam 11:09 PTG di sini

Menyertai Januari 25, 2012

0 Syor

Tigran K.

@tkhachik2

0.0

(0 ulasan)

1.6

100%

$29 USD / jam

berlin,

germany

$29 USD / jam

100%

Pekerjaan Disiapkan

N/A

Mengikut Bajet

N/A

Tepat Pada Masa

N/A

Kadar Upah Semula

Network and System Engineer (CCNA, CCNP)

Skillful network and system engineer (active CCNP certification) with good analytical, troubleshooting, and communication skills. Over 7 years' experience in configuring and maintaining highly available computer networks and network related services on Cisco devices and GNU/Linux servers. Profficient in configuring dynamic routing protocols (BGP, OSPF, EIGRP), VPN technologies (IPSec, GRE), IPv6, STP, etherchannel, VTP, VRRP, HSRP; Cisco routers and switches (IOS/CatOS), ASA appliances, GNU/Linux ditributions including Red Hat, Debian, CentOS, Fedora, Ubuntu, Slackware (iptables, openswan, racoon, openvpn, BIND, Squid, Apache, DHCP, TFTP, vsftpd, keepalived etc).

Lihat semua System Administrators dalam Germany

Hubungi Tigran K. tentang pekerjaan anda

Log masuk untuk membincangkan sebarang butiran melalui sembang.

Portfolio

To provide a secure communication channels between the main site and remote sites, branches, external partners or teleworkers this IPSec VPN infrastructure has been designed and implemented. The main site uses two Cisco 3800 series routers with HSRP while remote sites and branches have 1800 series.

VPN Infrastructure

To serve as a web proxy Squid has been configured on Debian servers. The active-passive redundancy has been implemented by means of keepalived. Squid configuration includes access restrictions and delay pools based on source IP addresses, destination URL, and authentication (to connect to other cache peer proxy).

Redundant Web Proxy Servers

To handle all requests from production network and external queries the name servers and resolvers have been separated.
- A single master name server updates 4 slaves with AXFR transactions.
- All slaves have been configured to serve requests for about 1200 public domains.
- 2 views have been created for internal and external DNS clients.
- 4 resolvers are placed behind 2 vips to optimize load sharing and provide high availability.
- All systems are Debian servers with BIND.

Production DNS infrastructure

All firewalls and routers except the vpn router were GNU/Linux servers (Slackware and later migrated to Fedora) with shorewall, iptables and iputils. Different route tables with PBR were created to utilize two internet links and one VPN connection. The redundancy (active-passive) of edge routers and firewalls was achieved by means of keepalived.

Linux routers and firewalls

To connect several locations IPSec tunnels were used over public Internet links. Over the secure channels an OSPF hierarchy was built. The backbone are contained the main production data center and services. The main purpose of this infrastructure was providing secure remote management of those services. At the same time it was used also by office IT systems (Windows AD, MS Exchange). ABR-s were Cisco 1721 and the main data center had Cisco 6513.

OSPF over IPSec links

Ulasan

Perubahan disimpan

Tiada ulasan untuk dilihat di sini!

Pengalaman

Orange Armenia

Okt 2009 - Hari ini

Orange Armenia, 100% subsidiary of France Telecom, is a 3g mobile voice and internet service provider in Armenia. My responsibilities are: - Configuration and maintenance of a highly available VPN infrastructure for production between internal endpoints, external partners and teleworkers on Cisco routers and ASA firewalls; - Configuration and maintenance of Cisco core/distribution/access switches, routers and ASA firewalls; - Configuration and maintenance of the DNS (BIND) and other network related serv

ADC

Mei 2009 - Okt 2009 (5 bulan, 1 hari)

Armenian Datacom Company (ADC) has created a 21st century ultramodern fiber-optic network. My responsibilities were: - Building up a new data center infrastructure; - Configuration and maintenance of remote deployment infrastructure; - Design of rack layout and power allocation; - Installation and maintenance switches, routers, and other networking gear.

iCON communications

Feb 2009 - Mei 2009 (3 bulan, 1 hari)

iCON Communications is a broadband (WiMAX) Internet Service Provider (ISP). My responsibilities were: - Configuration and maintenance of RHEL routers; - Installation configuration and maintenance of RT (Request Tracker) system. - Configuration and maintenance of Alcatel Lucent access switches; - Configuration and maintenance of corporate wireless access points.