Network Consultant
Hcl Technologies
Total years of experience :14 years, 9 Months
• Managing a critical, business impact 24x7x365 large scale network.
• Providing support for Major incident / outage and Requests as per severity and priority.
• Planning and implementing hardware / software upgrades to the recommended version.
• Migration of LAN / WAN Network and Network refreshments for EOL devices.
• Configured site-to-site VPN from on-premises to an Azure VNet using (IKEv1 or IKEv2).
• Virtual VPN gateway configuration and UDR configuration as per requirements.
• Configured Local VNet to Local VNet Peeing and Global to Global VNet peering.
• Configured Point-to-Site VPN connection to a VNet using native Azure certificate auth.
• ExpressRoute configuration to extend the on-premises networks into Azure cloud.
• Implementing Layer-2 security like Port security, DHCP snooping, IP source guard etc.
• Managing Cisco ISE to manage and secure the Wireless & LAN access.
• Deploying, Managing and supporting Meraki Wireless, security and Wired devices.
• Planned and deployed the software upgrades on Cisco Wireless infrastructure.
• Implementation of LAN protocol STP, RSTP, MST, VTP, VLAN, Port-channel LACP & PAGP.
• Managing Catalyst Switching Technology Stack-Switch and Virtual Switching System.
• Documenting network design, change and upgrades with Visio.
• Deployed and Managing Nexus environment, VPC, VDC and Fex cards.
• Implementing TACACS/AAA for network Authentication, Authorization and Accounting.
• Provides training sessions to the team and mentoring Level-2 engineers.
• Successfully completed WLAN migrations from local to central controller for 80+ sites.
• Implementing site-to-site VPN, IPSec, DMVPN as per customer or project requirements.
• Managing & configuring rules on Firewalls like Cisco ASA and checkpoint.
• BGP, OSPF and EIGRP configuration and troubleshooting & Fine-tuning.
• IPAM database on Infoblox and solar-wind tools.
• Worked on presenting MLD and LLD documents to the customer.
• Prepare & provide configuration for LAN/WLAN implementation as per HLD.
• Implementing Remote Access and Site-to-Site VPN solution as per customer requirement.
• Troubleshooting VPN issue and providing fix/solution for various customers globally.
• Configuring ASA Security context (virtual firewall), Active/Standby, Active/Active Failover.
• Deploying and configuring polices on checkpoint firewall & High Availability.
• Routing protocols configuration EIGRP, OSPF and BGP and Policy based Routing.
• Implementing DMVPN, GET VPN and Easy-VPN across various customer globally.
• Configuring Policy and Routed based VPNs as per customer/business requirements.
• Installation | configuration of switches in stacks and standalone, 2960, 3650, 3750, 3850.
• Administration of high-end core switches 4500, 6500, and IOS upgrade with ISSU.
• NAC | ISE integration with data and wireless infrastructure, based LDAP/RADIUS database.
• Troubleshooting of Cisco ISE rules for authentication policy and authorization policy.
CCNP Routing, CCNP Security, IKEV2, Flex VPN, GET VPN, EZee VPN, Native IPSec, Site- to-site, IPSec, DMPVN, GRE, MGRE, IPS, IDS, Cisco ASA, PIX. ASA and PIX Failover (Active/Standby or Active/Active), Transparent Firewall, Security Contexts, Dot 1X, NAT, PAT, AAA (RADIUS/TACACS+), Traffic Filtering, IOS Security Features, Cisco Secure ACS, DOS Prevention, NBAR, CBAC, ARP inspection. Port based security, DHCP snooping, Time based access-list, Reflexive access-list, VLAN access-list.
Netw• Implemented IPsec and GRE tunnels in VPN technology.
• Designed, configured, implemented site-site VPN on cisco ASA 5500 firewall.
• Designed and implemented DMZ for Web, Mail, FTP Servers using Cisco ASA Firewalls.
• Troubleshooting Firewall related issues using Smart view tracker on Checkpoint.
• Configured and assisted in designing of LAN, WAN, VPN connections, which include configuration of protocols OSPF and BGP, VLANS, IP addressing, access lists and firewalls.
• Configured Cisco Switches 2950, 2960, 3550, 3650, 3750, 3850, 4500 and 6500
• Ensured hardware is in compliance with latest patches and security updates.
• Secured the network by implementing AAA, ACLs and looking at access logs.
• Experience of working on Static routing, Default routing and dynamic routing.
• Designed and Implemented IP addressing, VLAN, VTP, STP, Trunk, access-list,
• Configure Microsoft windows servers with DNS, DHCP, RAS, HTTP, FTP, POP3, IIS and VPN.
• Managed Dell Power-Vault TL 2000 Tape Library, Symantec backup Exec 12.5 on Windows.
ork Engineer
Master's in Telecommunications