Designed and documented a secure multi-size enterprise network. Focusing on high availability, segmentation, and secure inter connectivity.
Designed a full enterprise LAN/WAN architecture supporting multiple site locations with structured VLAN segmentation, inter-VLAN routing, and scalable IP addressing. Implemented dynamic routing using OSPF to enable efficient communication between sites and ensure network resilience. Configured BGP to provide simulated ISP connectivity and external route exchange for internet access
Configured high-availability services including HSRP for gateway redundancy, STP for loop prevention, and EtherChannel for link aggregation and improved bandwidth utilization. Established secure site-to-site connectivity using DMVPN tunnels between locations protected by IPsec encryption to ensure secure communication between locations.
Applied multiple layers of network security using ACLs, DHCP Snooping, and BPDU Guard to protect against unauthorized access, lateral movement, and Layer 2 attacks.
Produced detailed network topology diagrams and comprehensive implementation documentation to support deployment, troubleshooting, and future scalability.
Technologies: Cisco IOS, VLANs, OSPF, BGP, HSRP, STP, EtherChannel, DMVPN, IPsec, DHCP, TCP/IP
Project Documentation
Offline Website Software