Projects

Security of ČEPRO depots

2011–2013

At the start of the collaboration, I mapped the L1–L3 network topology, proposed modifications, and unified configuration templates for new active network elements.

2011-2012: deployment of Cisco ASA firewalls in depots, VLAN segmentation, implementation of DHCP Snooping, and connectivity redundancy. Unification of routing for petrol station networks.
2013–2015: migration of petrol stations from individual IPsec tunnels to MPLS networks,
2015: connection to the MPLS network of České Radiokomunikace (BGP), new public addressing and transition of internet connectivity,
2021: migration of WAN and internet connectivity to T-Mobile.

For each migration, I prepared the procedure, documentation, and post-migration support.