Projects

Things I built, labelled honestly.

Every item shows whether it is professional work, a personal lab, a tool or a live site, and whether it is finished, in progress or only planned.

In progressPersonal lab

Cisco VLAN automation with Ansible

Configuring VLANs and port assignments on a physical Cisco Small Business switch from version-controlled YAML instead of typing CLI.

Done: VLANs 10–20 created and assigned across 24 FastEthernet ports.
Finding: this firmware's CLI is not compatible with the standard Ansible IOS modules, so I send raw CLI with ansible.netcommon.cli_command.
Finding: VLAN names cannot have letters immediately followed by digits.
Finding: switchport trunk native vlan 10 on its own makes VLAN 10 untagged. No allowed vlan line needed.
Next: move connection variables into group_vars/all/connection.yml that references Ansible Vault, fix an SSH connection hang, and scale the inventory beyond one device.

AnsibleYAMLGitCisco CLI

GitHub

LiveSimulator / tool

Dual-ISP failover simulator

An interactive simulation of a dual-uplink network. Cut links and devices, and watch routes recompute, traffic fail over and packets drop during convergence.

JavaScriptSVGDijkstra

Open the simulator

LiveSimulator / tool

Longest-prefix-match and subnet tools

A route-lookup tool that shows which route wins and why, preloaded with the /8-versus-/32 incident, plus a CIDR calculator.

JavaScriptIPv4 maths

Try the tools

In progressProfessional experience

Monitoring and troubleshooting write-ups

Case studies from real diagnostic work: bandwidth counters, IP utilization and disk health. Each explains the problem, the method, the evidence and the corrective action.

LinuxSMARTInterface countersShell

Read the case studies

CompletedPersonal lab

Network speed checker

A one-line installer that deploys speed-test tools (speedtest-cli and the fast binary) on a gateway, shipped as versioned GitHub Release assets.

ShellGitHub Releases

GitHub

In progressPersonal lab

WireGuard VPN troubleshooting

A write-up in progress on a WireGuard client that connects but cannot reach the internet: IP forwarding, firewall and NAT, and return-path routing, with packet captures.

WireGuardDockerUbuntutcpdump

LiveLive site

This website

A static multi-page site with self-hosted fonts, a strict content-security policy, HTTP/2 and TLS 1.3 on an Oracle Cloud free-tier server.

HTMLCSSJavaScriptNginxLet's EncryptOracle Cloud

How it was built

RetiredPersonal lab

Port checker (retired)

A Flask app for checking TCP port reachability, deployed behind Nginx. I retired it: a public tool that connects to arbitrary hosts needs real safeguards (input validation, SSRF protection, rate limiting), and a static site has far less attack surface.

PythonFlaskNginx

Why I retired it

Planned labs

What I am building next.

These are not finished. They are on my list, and each one will get a full write-up when I have run it and have evidence.

Planned

Secure guest Wi-Fi segmentation

Design a guest network that is isolated from administrative networks but still has the internet access it needs.

Skills: VLANs, TCP/IP, ACLs, firewall policy

Deliverables: Network diagram, IP plan, firewall rules, connectivity test results

Planned

Firewall policy review

Review rules in a lab, find overly permissive access, restrict what is unnecessary and verify what is allowed and denied.

Skills: FortiGate concepts, NAT, logging, least privilege

Deliverables: Before-and-after policy design, test matrix, findings

Planned

Network traffic analysis with Wireshark

Analyze a public training capture for DNS failures, TCP problems and retransmissions.

Skills: Wireshark, TCP/IP, incident investigation

Deliverables: Display filters, findings, incident report

Planned

Linux DNS troubleshooting case study

Document a DNS failure from resolver configuration to packet capture to root cause.

Skills: dig, tcpdump, resolvers, routing

Deliverables: Commands, capture examples, findings, corrective action

Planned

Sequential switch-management automation

A safe SSH workflow that checks reachability, collects device information and reboots approved devices one at a time, with a dry run first.

Skills: Bash, SSH, logging

Deliverables: Script, dry-run output, error handling, test notes

Planned

WAN troubleshooting decision tree

A method for links that are up but carry no traffic: unreachable gateways, wrong negotiation, load-balancer faults.

Skills: Routing, WAN, MikroTik, monitoring

Deliverables: Decision tree, command reference, failure matrix, escalation criteria

Let's talk about your network.

I'm open to network engineering and network security roles. The quickest way to reach me is LinkedIn.

Message me on LinkedIn View CV