SUMMARY

• Nearly 7+ years of experience in Networking, including hands - on experience in providing network support, installation and analysis for a broad range of LAN / WAN/MAN communication systems.
• Strong hands on experience in installing, configuring and troubleshooting of Cisco 12404,12406,7600, 7200, 3800, 3600, 2800, 2600, 2500 and 1800 series Routers, Cisco Catalyst 6500, 4500, 3750, 2950 and 3500XL series switches.
• Proficient in Cisco IOS for configuration & troubleshooting of routing protocols: MP-BGP, OSPF, EIGRP, RIP, BGP v4, MPLS.
• Knowledge of implementing and troubleshooting complex layer 2 technologies such as VLAN Trunks, VTP, Ether channel, STP, RSTP and MST. Implementation of HSRP, VRRP for Default Gateway Redundancy
• Involved in troubleshooting of DNS, DHCP and other IP conflict problems.
• Strong knowledge of TACACS+, RADIUS implementation in Access Control Network.
• Hands-on experience with complex routed LAN and WAN networks, Cisco routers, switches, ASA and PIX firewall deployment.
• Worked extensively in configuring, monitoring and troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NAT with the firewalls as per the design.

PROFESSIONAL EXPERIENCE

Network Engineer

Confidential, Lawrenceville, GA

Responsibilities:

• Checking and configuring Cisco 7600 and 7200 routers at data center for remote sites’ issues.
• Working on Cisco 6509 and 4507 series switches for LAN requirements that include managing VLANs,
• Performed switching technology administration including VLANs, inter-VLAN routing, Trunking, STP, RSTP, port aggregation & link negotiation.
• Performing troubleshooting on slow network connectivity issues, routing issues that involves OSPF, BGP and identifying the root cause of the issues.
• Configuration of Access List ACL (Std, Ext, Named) to allow users all over the company to access different applications and blocking others.
• Providing daily network support for national wide area network consisting of MPLS, VPN and point-to point site.
• Hands on experience in solving Network connectivity troubleshooting using ping, trace route, telnet, SSH
• Designed QoS policies for critical applications based on business requirements and traffic patterns.
• ConfigureVRRP & GLBP andVLANTrunking802.1Q, STP, Port Security on Catalyst 6500 switches.
• Experience with manipulating various BGP attributes such as Local Preference, MED, Extended Communities, Route-Reflector clusters, Route-maps and route policy implementation.
• Performing the ACL requests change for various clients by collecting source and destination information from them.
• Worked on migration of existing PIX firewall to ASA firewall, PIX OS upgrade from 6.3 to 7.0
• Worked extensively in configuring, Monitoring and Troubleshooting Cisco's ASA 5500/PIX security appliance, Failover DMZ zoning & configuring VLANs/routing/NATing with the firewalls as per the design.
• Configuration of Cisco 6500 (sup 720), 4500 (SUP 6) & 3750 Catalyst Switches for network access. Worked extensively on Cisco Firewalls, Cisco PIX (506E/515E/525/) & ASA 5500(5510/5540) Series, experience with convert PIX rules over to the Cisco ASA solution.

Network Engineer

Confidential

Responsibilities:

• Managing Cisco Routers 3600,7200 series routers And Cisco Switches 3800 and 6500 series
• Managed fast Layer 3 switched/routed LAN/WAN infrastructure as a part of Network team. The LAN consisted of Cisco campus model of Cisco 3550 at access layer, Cisco 6513 at distribution/core layer.
• Hands-on experience with WAN (ATM/Frame Relay
• Supporting EIGRP, OSPF and BGP based network by resolving level 1 &2 problems of internal Sites.
• Providing daily network support for Global wide area network consisting of MPLS, VPN and point-to point site.
• Involved in L1/L2 Switching Technology Administration including creating and managing VLANs, Port security, Trunking, STP, InterVlan routing, LAN security.
• Worked on the security levels with RADIUS, TACACS+.
• Isolate and diagnose network problems, SSH, HTTP, HTTPS, involving TCP/IP, DHCP, DNS, Group Policy, Deployment & support of Microsoft Active Directory Services
• Configured standard and extended ACL’s on the servers to limit its access.
• Configured static NAT, dynamic NAT, inside global address overloading, TCP overload distribution, overlapping address translation.
• Experience with Firewall Administration, Rule Analysis, Rule Modification
• ConfigureVRRP & GLBP andVLANTrunking802.1Q & ISL, STP, Port Security on Catalyst 6500 switches.
• Negotiate VPN tunnels using IPSec encryption standards and also configured and implemented site-to-site VPN, Remote VPN.
• Configuring Net Screen Firewall to allow site to site VPN access and configuring authentication, encryption, compression, ACL to ensure better security.
• Modified internal infrastructure by adding switches to support server farms and added servers to existing DMZ environments to support new and existing application platforms.

Network Engineer

Confidential

Responsibilities:

• Configuring HSRP between VLANs, Configuring Ether-Channels, Port Channel on 6500 catalyst Switches
• Configured VLANs with 802.1q tagging. Configured Trunk groups, ether channels, and Spanning tree for creating Access/distribution and core layer switching architecture.
• Conversions to BGP WAN routing. Which will be to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links
• Performed switching technology administration including VLANs, inter-VLAN routing, Trunking, STP, RSTP, port aggregation & link negotiation.
• Design, execution of installation and configuration of VPN/IVPN, LAN/WAN as per organizational requirements.
• Data center migration was involved in Access, Distribution and Core layers.
• Wrote IOS and CAT OS upgrade procedures and Pre/Post checks for customer production upgrades.
• Responsible for Capacity planning, Contingency planning & disaster recovery.
• Involved in troubleshooting IP addressing issues and Updating IOS images using TFTP.
• Monitor performance of network and servers to identify potential problems and bottlenecks.
• Maintenance and Troubleshooting of connectivity problems using Ping, Trace route.
• Managed IP address space using subnets and variable length subnet masks (VLSM).
• Worked on Extensively on Cisco PIX (506E/515E/525).
• Responsible for device security through (Physical security, passwords, interactive excess through TELNET, SSH, VTY, TCP, UDP, DHCP BOOTP SERVICES, Proxy arp, ICMP, HTTP, NTP, AAA, SNMP and Auto Secure features)
• Configuration of access control through ACL, S. (Standard, extended, named, dynamic, established, time based ACL,s etc)
• Security on Switches through (Port Security, storm control, Protected ports, STP Security features, BPBDU Guard LOOP Guard, DHCP Snooping, DAI etc.)