lecs.de info@lecs.de Deutsch

Profile

Project Profile

  1. 07/18 – 03/19

    Freelancer Network

    • 2nd and 3rd Level Support
    • Migration of huge national network
    Used Software
    IOS, IOS-XR, IOS-XE
    Used Routingprotocols
    static-routing, BGP
    Used Hardware
    • Ethernet-Encoders
    • Cisco Router ASR9k, ASR1k
    • Cisco Catalyst Switches 38xx
  2. 03/18 – 06/18

    Freelancer Security

    • 2nd and 3rd Level Support
    • Operating / Management Firewall System
    • TAC Case Owner Cisco
    Used Software
    R77, IOS 9.x, GA 5.4.x
    Management Firewall Systems
    • GAIA, Provider-1
    • CSM, ASDM
    • Fortigate
    Add-on software monitoring / management / ticket system
    • HP Service-Center
    • Splunk
    Used Techniques
    Anyconnect dual (User- / Machine-) cert. authentication, Site-2-Site VPN, NAT, IKEv1/2
    Used Routingprotocols
    static-routing
    Used Hardware
    • CheckPoint Firewall
    • Cisco Firewall: 55×0-x
    • Fortigate
  3. 09/17 – 02/18

    Freelancer Security

    • 2nd and 3rd Level Support
    • Design new services (e.g. ISE)
    • Migration ACE – ISE
    • ITIL process revised / new definition
    • Planning / Migration / Outsourcing Managed Service
    • Steering / escalation external partner (managed service)
    • Go-Live / Troubleshooting foreign location
    • TAC Case Owner Cisco
    Used Software
    R77, R80, IOS 9.x
    Management Firewall Systems
    • GAIA, Provider-1
    • CSM, ASDM
    Add-on software monitoring / management / ticket system
    • Solarwinds
    • eHealth
    Used Techniques
    Anyconnect, Site-2-Site VPN, NAT, spec. AD authentication, IKEv1/2
    Used Routingprotocols
    OSPF
    Used Hardware
    • CheckPoint Firewall: 12000
    • Cisco Firewall: 55×0-x
    Used measurement devices
    TCPdump, Wireshark
  4. 03/17 – 12/17

    Freelancer Network Engineering and Security

    • Design / Roll-out WAN-LISP network all over the world
    • Design / Conception Site-2-Site VPN (Primary / Backup / IKEv1/2)
    • Go-Live / migration LISP Network
    • Connect foreign companies via S-2-S Tunnel all over the world
    • 3rd Level Troubleshooting
    • Direct contact person for the end customer
    • Training / Workshop employees / customer
    • TAC Case Owner
    Used Software
    • IOS, IOS-XR, IOS-XE
    • Safenet (dual factor authentication)
    • FMC
    • Anyconnect
    Used Techniques
    SDN, APIC, IP-SLA, floating static routes, Tracking
    Used Routingprotocols
    LISP, OSPF
    Used Hardware
    • Cisco Router: ISR 4xxx, ASR 1xxx
    • Cisco Switch: 65xx, 3750, 3850, 2960
    • Cisco Source Fire Modul
    Used measurement devices
    Wireshark
  5. 01/17 – 03/17

    Freelancer Network Engineering and Security

    • Verification design / engineering DataCenter
    • 2nd and 3rd Level Support LAN / Security FW
    • Engineering / Design 802.1x
    • PoC ACS / ISE
    • PoC Windows Server / ISE
    Used Software
    NX-OS, IOS, PAN-OS
    Management Firewall Systems
    Panorama
    Add-on software monitoring / management / ticket system
    • Solarwinds
    • eHealth
    Used Techniques
    VSS, vPC, virtualization, FEX, 802.1x IPtables
    Used Routingprotocols
    OSPF, Static-routing
    Used Hardware
    • PaloAlto: PA-200/500/3020i
    • Cisco Switch: 65xx, 3750, 3850, N2K, N5K, N9K
    • Windows 2008 R2 Radius
    • Cisco ISE
  6. 12/14 – 12/16

    Freelancer Network Engineering VPN / IP Design

    • Verification of technical concepts
    • Build customer special solutions
    • CPE / PE customer connection
    • Engineering / Design IPv6 Provider Backbone
    • PoC Test IPv6 end customer
    • Connect / troubleshoot different ISP providers to the backbone
    • Engineering / troubleshoot / implementing SIP Primary / Backup
    • Tests with Spirent measurement
    • 3rd Level Troubleshooting L2VPN, L3VPN
    • Router count > 3000
    Used Software
    IOS, IOS-XR, IOS-XE, Junos, Cacti
    Used Techniques
    from the provider segment, like BFD Multihop, VRF, SIP, IPv6
    Used Routingprotocols
    OSPF, BGP, EIGRP, Static-routing, MPLS
    Used Hardware
    • Huawei
    • Cisco Switch: CPEs like 4xxx, PEs like ASR9000
    • Juniper MX
    Used measurement devices
    • Chariot
    • Spirent
  7. 04/14 – 04/15

    Freelancer Network Design / Implementation / Analysis

    Used Techniques
    vPC, FEX, VSS
    Used Routingprotocols
    OSPF, BGP, EIGRP, Static-routing
    Used Hardware
    • Nexus Switch: 7K, 5K, 2K, 1Kv
    • Cisco Switch: 650x, 450x, 3750x, 2960
  8. 05/13 – 03/14

    Freelancer Datacenter, Second Level Support Firewalling and Loadbalancer

    Used Software
    • Management Firewall Systems
      • Juniper: Junos (Space); Junos Network and Security Manager (NSM)
      • Checkpoint: Provider One R75.40, Provider One R77
    • Troubleshooting / Firewall Monitoring
      • Juniper Security Threat Response Manager (STRM)
      • algosec
      • Big Brother (SNMP-Tool)
      • MRTG (statistics)
      • Valuemation (Syslog-Server)
    Used Hardware
    • Loadbalancer
      • Radware: ODS 1, ODS 3xl
      • Alteon: 5412xl
      • F5 BigIP 5200, 10200
    • Firewall Juniper
      • SRX550, SRX 1400, SRX 5800, ISG 2000
      • approx. 20 Cluster
    • Firewall Checkpoint
      • IP 290, IP 1220, IP 1260, IP 1280, IP 2250, IP 2450, CP21400
      • VSX
      • approx. 80 Cluster
  9. 04/11 – 04/13

    Member of the operating team as well as the engineering team

    • Conception / redesign L2/L3 core backbone at the datacenter
    • Implementing / design OSPF routing at the datacenter
    • Implementing / design of routing regarding provider change
    • MPLS moves with their foreign companies
    • Conception / design / implementing of VSS
    • Redesign different firewall DMZ
    • Lan2Lan IPsec tunnels between foreign companies
    • 2nd / 3rd level troubleshooting all over the company
    • Administration BlueCoat Proxy
    • Network support and design for a business-critical company application (MCH)
    • Re-engineering / development of internal process rules (such as fw-process structures)
    Used Techniques
    IPsec, NetFlow, QoS, SNMP, HSRP, VRRP, 80x.xx, VSS
    Used Routingprotocols
    static-routing, OSPF, BGP
    Used Hardware
    • Cisco 3560x-xx – 3750x-xx
    • Cisco 650x
    • PIX / ASA 5xx, 55xx
    • Palo Alto
    • BlueCoat Proxy 310, 8100
  10. 09/10 – 03/11

    Member of the customer engineering team

    • Proof of concepts
    • Design of special network requirements
    • Design of Layer 2 Spirent templates
    • 3rd level troubleshooting
    • > 3000 Router
    Used Techniques
    IPsec, NTP, SNMP, HSRP, 80x.xx
    Used Routingprotocols
    static-routing, OSPF, BGP, MPLS, IS-IS, L2TP
    Used Hardware
    • Cisco 8xx – 720x
    • Cisco 100x – ASR
    • Cisco 120xx
    Used measurement devices
    • Chariot
    • Spirent
  11. 01/10 – 09/10

    Member of the customer engineering team

    • Technical leadership for router rollout at one German federal state
    • Design and implementation of special IPsec-PKI network requirements
    • Employee training and workshops for new technologies
    • 3rd level troubleshooting
    • > 2000 Router
    Used Techniques
    IPsec, PKI, open PKI, Netflow, NTP, SNMP, HSRP, EEM
    Used Routingprotocols
    static-routing, EIGRP, OSPF, BGP, MPLS
    Used Hardware
    • Cisco 8xx – 720x
    • Cisco 100x – ASR
    • Cisco 65xx
  12. 08/09 – 12/09

    Responsible Firewall / Security international Datacenter

    • Re-engineer security concept Datacenter
    • Administration Firewall
    • Optimize Firewall rule set
    • 3rd level troubleshooting
    Used Techniques
    FWSM, CheckPoint Provider-One, CSM, ASDM, AlgoSec
    Used Routingprotocols
    static-routing, OSPF, BGP, MPLS
    Used Hardware
    • Nokia Firewall
    • Cisco 5xxx ASA Firewall
    • Cisco 65xx
  13. 01/06 – 07/09

    • Responsible remote-access overall
    • Responsible Middle East area
    • Responsible Italy, Spain area
    • Responsible connecting support companies
    • Design and implementation WLAN networks
    • Connecting support companies all over the world to the company network
    • Project planning, cost analyses, execution (installation) of own projects
    • Troubleshooting overall
    • Reproducing technical failures
    • Development / handover of concept documents
    • Verification of new concepts
    • Performance measurement and evaluation of new hardware
    • Campus-design, Campus-MPLS
    • Datacenter redesign
    • Troubleshooting and administration CheckPoint / PIX-ASA firewalls
    • MPLS connection of European branch offices and subsidiaries
    • 3rd level support
    • Create requirement definitions and system specifications
    • Employee training and workshops for new technologies
    Used Techniques
    R-STP, STP, VRRP, PPP, NAT, SNMP, ACL´s, HSRP, QoS, IPsec, DMVPN, 802.1x, NAC, TACACS, RADIUS, CWSI, iperf, NTP, FWSM
    Used Routingprotocols
    EIGRP, OSPF, BGP, MBGP, RIPv1/2, static-routing, floating static routing, Multicast-routing, MPLS
    Used Interfaces
    PRI, BRI, ATM, popular LAN Interfaces etc.
    Used Hardware
    • Cisco Switch: 29xx, 35xx, 38xx, 4x0x, 65xx
    • Cisco Router: 836 – 72xx
    • Cisco Concentrator: 3x0x
    • Cisco FW: PIX 5xx, ASA
    • Cisco Contentswitching: CSS 12xxx
    • Cisco Access-Point: AP 12xx
    • Cisco WLAN Controller: 4400
    • Cisco Remote Access: ACS
    • RSA: ACE Server
    • DTAG: IPASS Server
  14. 11/04 – 12/05

    Member of the CET (customer engineering) Team

    • Customer solution / connection to the MPLS network
    • Responsible for my own customer projects
    • Contact person for internal employees and customers
    • Treatment of SBR´s (special business request)
    • Testing, compiling and implementation of special customer configurations / problems at the lab
    Used Techniques
    HSRP, mppp, FRF.16, loadsharing, ISDN Backup, Multi-VPN, QoS
    Used Routingprotocols
    EIGRP, OSPF, (M)BGP, RIPv2, static routing, floating static routing
    Used Interfaces
    POS, ChSTM-1, E1-E3, PRI, BRI, T1, ATM, etc.
    Used Hardware
    • Cisco Switch: 35xx, 4x0x, 65xx
    • Cisco Router: 836 – 76xx
    • Juniper Router: M10, M40, M320
  15. 10/04 – 11/04

    • Troubleshooting at the LAN / WAN
    • 3rd level Support
    • Re-Design of Vlan structure
    • Re-Design of Routing structure
    • Re-Design of OBM (out-of-band management) structure
    • Employee training
    • Contact person to Cisco Systems
    Used Techniques
    HSRP, Channeling, Vlan-trunking
    Used Routingprotocols
    EIGRP
    Used Hardware
    • Cisco Switch: 35xx, 4x0x, 65xx
  16. 07/04 – 10/04

    • Troubleshooting and verification of MPLS customer problems at test labs, also finding solutions in terms of QoS (LLQ, WRED etc.)
    • Part Re-Design of BGP-4 Backbone (Manchester BB)
    • Part Re-Design of OSPF network (Abbey Bank)
    • Multicast network Re-Design (Abbey Bank)
    • Re-Design of HSRP with Radius authentication for about 1 Mio users (xDSL users)
    • Troubleshooting BGP-4 and OSPF
    • Measurement of VoIP packets in a test lab regarding jitter, echo, performance (21´st century network)
    • Contact person to Cisco Systems
    Used Techniques
    LLQ, HSRP, MPLS
    Used Routingprotocols
    OSPF, BGP-4, MOSPF, MP-BGP
    Used Hardware
    • Cisco Switch: 35xx, 4x0x, 65xx
    • Cisco Router: 120xx, 7507, 720x, 38xx, 37xx, 26xx
  17. 08/03 – 07/04

    • 3rd level support (data team) for the world's largest voice-over-IP project, including RTR analysis and on-site measuring with analysers like WaGo Domino and Expert Sniffer
    • Development and implementation of QoS (LLQ) for lines like ISDN-BRI/-PRI/ATM/S2M on Cisco routers and switches
    • RTP and cRTP configuration on lines like ISDN BRI
    • Development and implementation of a backup scenario in case of line failure (dial-in router over ISDN PRI; connecting B-channels with higher performance)
    • Development and implementation of a backup scenario in case of routing failure (OSPF, BGP-4)
    • Optimize L2/3 protocol timers
    • Last escalation to Cisco Systems; case owner and contact person to Cisco Systems
    Used Techniques
    LLQ, HSRP, Radius, Ether-Channeling, ISDN Backup, RTR Analyse via eHealth, Domino Analysen etc.
    Used Routingprotocols
    OSPF, BGP-4
    Used Hardware
    • Cisco Switch: 35xx
    • Router: 7507, 7206, 3745, 3660, 2610, 1760, 827
  18. 04/03 – 08/03

    • Technical project management for the internal company bank (choice of Cisco products, firewall hardware, bid proposal management, project planning, control of costs etc.)
    • Design, configuration and build of a new LAN (Ethernet) / WAN (T-DSL-ISDN/VPN) area
    • Build-up of LAN / WAN DMZ´s
    • Build-up of VPN / IPsec connections with ISDN backup
    • Configuration, consulting and implementation of SNA-over-DSL in 190 remote offices
    • Priority (service policy) of data traffic, e.g. SNA-over-IP
    • DLSW peer implementation with ISDN backup, without disconnection of the DLSW circuits
    • HSRP with different groups (backup scenario)
    • Network design from the point of view of „traffic share“ and „redundant scenario“
    • Connect IBM 3174 and “Kassencontroller” over token-ring and serial lines
    • NTP and SNMP implementation
    • Troubleshooting in the entire IT environment with analysers like WaGo Domino, Expert Sniffer
    • Concepts of customized workshops
    • Attendance and bid proposal management for projects like SNA-Switching
    • LAN/WAN 3rd level support troubleshooting across the company
    Used Routingprotocols
    OSPF, EIGRP
    Used Techniques
    NAT, IPsec, VPN, Backup over dial on-demand, HSRP
    Used Hardware
    • Cisco Switch: 29xx, 35xx, 45xx, 65xx
    • Cisco Router: 7206, 36xx, 26xx, 17xx
    • Nokia IP30/350
  19. 01/03 – 04/03

    • Consulting and Troubleshooting (LAN [Token-Ring]; ATM [LANE])
    • Design and Installation of Layer 2 and 3
    • Migration of LANE – Token-Ring to Ethernet (approx. 1900 users)
    Used Hardware
    • Cisco Switches: 35xx, 65xx
  20. 01/03 – 01/03

    • Design and Installation of Security/VPN´s over T-DSL; remote dial-in from different countries with PC´s
    • Consulting Security VPN
    • Implementation of OSPF with backup over ISDN
    • Pre- and Postsales Support Security
    • Redesign of the network
    Used Hardware
    • Cisco Router: 26xx, VPNclient
  21. 01/02 – 10/02

    • Design and installation of Layer 1, 2 and 3
    • Consulting and troubleshooting (LAN/WAN)
    • New design and implementation of the WAN line
    • Support for the clients (NT and Win 2000)
    Used Routingprotocols
    static routing
    Used Hardware
    • Sonix Firewall
  22. 01/01 – 10/02

    • Contract for certified Cisco seminars
    Certified for following seminars as instructor
    ICND, IMCR, BCMSN, BCRAN, BSCI, CIT, CCIE-Prep-Lab
    Technical Certification
    CCNA, CCDA, CCNP, CCSI, CCIE
  23. 07/01 – 09/01

    • 3rd level support
    • Installation and extension of the network
    Used Hardware
    • Cisco Router: 26xx, 36xx, 720x
    • Switches: 29xx, 650x
  24. 05/01 – 07/01

    • Installation and consulting with Cisco products
    • Main focus on different routing protocols
  25. 02/01 – 12/01

    • Planning and installation of the complete network
    • 3rd level support
    • Design, selection and installation of WAN lines (speed – provider)
    • Implementation and configuration of BGP-4, HSRP, RIP v1/2, Vlan´s, Trunking etc.
    Used Hardware
    • Cisco Router: 26xx, 36xx
    • Switches: 29xx, 650x
  26. 09/99 – 09/00

    • Development and performance of the trainee program to be certified as CCSI (Certified Cisco Systems Instructor)
    • Selection and engagement of trainees
    • Installation and consulting with different Cisco products
    • Telephone and in-house support with related companies
    Used Hardware
    • Cisco Router: 80x – 720x
    • Switches: 19xx – 650x
  27. 03/99 – 09/99

    • Change of the Germany-wide network from static routing to the dynamic routing protocol OSPF
    • Responsible for HSRP, BGP-4, Tunneling, VPN´s and IOS security
    • Tracking and testing the online traffic with the related products (router / switches / network analyser [DA30; Expert Sniffer])
    • 3rd level support for WAN (Frame-Relay) and LAN (Ethernet and Token Ring)
    • Germany-wide rollout and automatic distribution of the system configuration for Cisco products
    • Network design and consulting for the customer LZB Deutschland
    Used Hardware
    • Cisco Router: 36xx, 26xx, 25xx, 72xx, 75xx
    • Switches: 650x, 29xx
    • Network Analyser: DA30, Expert-Sniffer, Linux
  28. 1994 – 1995

    • Customized trainings for Novell Netware
    • Diagnostics and analysis of network architectures and protocols, for example Novell NetWare, DECnet, TCP/IP and more
    • Implementation Novell Network (with 20 users)
    • Consulting and troubleshooting in heterogeneous network environment with approx. 350 users
    Used Protocols
    NT, Novell, DECnet