Network Specialist
Cisco-TAC
مجموع سنوات الخبرة :13 years, 5 أشهر
Giving recommendations for designing customers network and setting up lab re-creates for the same.
Network Redundancy. Using SLA monitoring on Switches, routers and ASA'S to allow for backup routes to be populated.
Applying QOS in a network.Traffic Shaping, CBWFQ, Prioritization based on the type of traffic in the network.
Using IGP within the network on Cisco based setups and applying them for proper traffic routing.
Using EGP's for communicating with the external WAN network and filtering of sent and received routes.
Using policy based routing(PBR) on the Routers to alter routing paths. Black holing malicious traffic and proecting the inside network.
Applying ZBF (IOS firewall) to allow and deny protocol specific traffic.
Using technologies like NBAR, Deep packet inspection and rate-limiting for traffic within the network.
Routing Protocols(OSPF, BGP, EIGRP)
Route-Filtering and optimal path selection.
CEF switching and fast switching
1. Network Engineer:- Work for Cisco-Technical assistance center, New-Delhi, India. Part of the VPN team in the Security domain. Handle US/CAN region customers and assist them with trouble-shooting Priority-1, 2 and 3 issues. Work on ASA-5500's, PIX515, s, Cisco (1800/2600/2800/3600/7200) series routers.
2. Handle intermix of technologies. Basic Internet connectivity via perimeter Routers and ASA, s. Failover(Single and Multi-mode) Setting up NAT/PAT, Policy-NAT, Policy-PAT rule on the ASA/Router. Allowing specific access to servers on the inside using Static Translation rules.(Pre and Post 8.3 code).
3. Secuing the DMZ and the inside interface network of the ASA. Applying Layer3(Network) and Layer-7(Application) inspection to filter specific traffic on the ASA. Protecting the ASA from attacks from the internet.
3. Setting up site-to-site, Remote access VPN's on ASA, s and Routers.Establishing Anyconnect VPN on the ASA'S. SSL-Webvpn setup.Using Cisco secure desktop and technologies like Dynamic access policies to allow and deny access to remote machines. Using hostscan mechanisms to scan connecting hosts.
4. Setting up single-sign on for remote VPN users. Two factor authentication.
5. Setting up IPS/IDS in preferred modes according to interface availability. Enabling relevant signatures for traffic inspection. Enabling custom signatures to stop day-zero attacks.
6. Setting up Cisco ACS, LDAP server(AD) for client authentication. Assigning privilege levels to particular users.Setting up Domain controllers.Assigning privileges to users based on the credentials entered.
7. Enabling router and switch security. Port-Security, Dynamic arp inspection, NBAR, access-lists.
8. Capturing and analyzing traffic on the ASA/Router and end host machines and verify issues based on the same.
9. Generating CSR'S for 3rd party signing requests and in house CA requests. Using same certificates for SSL and IPSec VPN setup. Using Ikev2 for SSL.Securing VPN access by enabling client authentication.
