Tigran K. Profile

0,0

(0 avaliações)

Você está agora seguindo

Erro seguindo usuário.

Esse usuários não permite que o sigam.

Você já está seguindo esse usuário.

Seu plano permite apenas 0 seguidas. Aprimore-o aqui.

Deixou de seguir com sucesso

Ocorreu um erro ao deixar de seguir o usuário.

Você recomendou com sucesso

Ocorreu um erro ao recomendar o usuário.

Algo deu errado. Por favor, atualize a página e tente novamente.

E-mail verificado com sucesso

$29 USD / hora

berlin,

germany

$29 USD / hora

Atualmente, está 4:44 AM aqui

Ingressou em janeiro 25, 2012

0 Recomendações

Tigran K.

@tkhachik2

0,0

(0 avaliações)

1,6

100%

$29 USD / hora

berlin,

germany

$29 USD / hora

100%

Trabalhos Concluídos

Não se aplica

Dentro do Orçamento

Não se aplica

No Prazo

Não se aplica

Taxa de Recontratação

Network and System Engineer (CCNA, CCNP)

Skillful network and system engineer (active CCNP certification) with good analytical, troubleshooting, and communication skills. Over 7 years' experience in configuring and maintaining highly available computer networks and network related services on Cisco devices and GNU/Linux servers. Profficient in configuring dynamic routing protocols (BGP, OSPF, EIGRP), VPN technologies (IPSec, GRE), IPv6, STP, etherchannel, VTP, VRRP, HSRP; Cisco routers and switches (IOS/CatOS), ASA appliances, GNU/Linux ditributions including Red Hat, Debian, CentOS, Fedora, Ubuntu, Slackware (iptables, openswan, racoon, openvpn, BIND, Squid, Apache, DHCP, TFTP, vsftpd, keepalived etc).

Ver todos System Administrators em Germany

Contate Tigran K. sobre seu trabalho

Faça login para discutir quaisquer detalhes via chat.

Portfólio

To provide a secure communication channels between the main site and remote sites, branches, external partners or teleworkers this IPSec VPN infrastructure has been designed and implemented. The main site uses two Cisco 3800 series routers with HSRP while remote sites and branches have 1800 series.

VPN Infrastructure

To serve as a web proxy Squid has been configured on Debian servers. The active-passive redundancy has been implemented by means of keepalived. Squid configuration includes access restrictions and delay pools based on source IP addresses, destination URL, and authentication (to connect to other cache peer proxy).

Redundant Web Proxy Servers

To handle all requests from production network and external queries the name servers and resolvers have been separated.
- A single master name server updates 4 slaves with AXFR transactions.
- All slaves have been configured to serve requests for about 1200 public domains.
- 2 views have been created for internal and external DNS clients.
- 4 resolvers are placed behind 2 vips to optimize load sharing and provide high availability.
- All systems are Debian servers with BIND.

Production DNS infrastructure

All firewalls and routers except the vpn router were GNU/Linux servers (Slackware and later migrated to Fedora) with shorewall, iptables and iputils. Different route tables with PBR were created to utilize two internet links and one VPN connection. The redundancy (active-passive) of edge routers and firewalls was achieved by means of keepalived.

Linux routers and firewalls

To connect several locations IPSec tunnels were used over public Internet links. Over the secure channels an OSPF hierarchy was built. The backbone are contained the main production data center and services. The main purpose of this infrastructure was providing secure remote management of those services. At the same time it was used also by office IT systems (Windows AD, MS Exchange). ABR-s were Cisco 1721 and the main data center had Cisco 6513.

OSPF over IPSec links

Avaliações

Mudanças salvas

Nenhuma avaliação aqui!

Experiência

Orange Armenia

out. 2009 - Atual

Orange Armenia, 100% subsidiary of France Telecom, is a 3g mobile voice and internet service provider in Armenia. My responsibilities are: - Configuration and maintenance of a highly available VPN infrastructure for production between internal endpoints, external partners and teleworkers on Cisco routers and ASA firewalls; - Configuration and maintenance of Cisco core/distribution/access switches, routers and ASA firewalls; - Configuration and maintenance of the DNS (BIND) and other network related serv

ADC

mai. 2009 - out. 2009 (5 meses, 1 dia)

Armenian Datacom Company (ADC) has created a 21st century ultramodern fiber-optic network. My responsibilities were: - Building up a new data center infrastructure; - Configuration and maintenance of remote deployment infrastructure; - Design of rack layout and power allocation; - Installation and maintenance switches, routers, and other networking gear.

iCON communications

fev. 2009 - mai. 2009 (3 meses, 1 dia)

iCON Communications is a broadband (WiMAX) Internet Service Provider (ISP). My responsibilities were: - Configuration and maintenance of RHEL routers; - Installation configuration and maintenance of RT (Request Tracker) system. - Configuration and maintenance of Alcatel Lucent access switches; - Configuration and maintenance of corporate wireless access points.