Multi-site enterprise infrastructure & MPLS core integration
This project involves a multi-site campus environment (TP and BC sites) integrated into a resilient MPLS Provider Core. We designed and implemented a scalable, high-availability enterprise network architecture that provides secure L3VPN connectivity for remote branches and redundant high-speed Internet access.
// Architecture & connectivity
Established routing between BC and TP sites with OSPF/EIGRP, built a high-performance MPLS core with LDP, created isolated L3VPNs using VRF, and configured dual-homed ISP routing.
// High availability
Deployed VRRP at the distribution layer to eliminate single points of failure for end-user gateways and ensure robust redundancy.
// Routing & optimization
Managed a multi-protocol routing environment using EIGRP for campus agility and OSPF for core scalability, with advanced route redistribution and filtering.
// Security & hardening
Hardened core nodes using Control Plane Policing (CPP) to block DoS attempts, secured segments with granular ACLs, and deployed NAT/PAT at the internet boundary.