FR EN
Download CV
FR EN
  • Networks
  • Cybersecurity

Secure multi-site architecture

Two isolated sites across an operator core, emulated in PnetLAB

Context

A multi-site network emulated in PnetLAB: two sites interconnected through a central operator core.

The design answers two needs: keeping user populations isolated from one another, and protecting the traffic that crosses the operator core between the sites.

Architecture

Two sites, one operator core, one encrypted tunnel

Architecture of the two sites and the operator core Operator core Interconnects the sites Emulated in PnetLAB 2 × Fortinet firewall 2 × Arista vEOS switch 1 × IPsec tunnel Site A Fortinet · Arista vEOS Fortinet firewall IPsec VPN Arista vEOS Switch VLAN / VRF OSPF inter-VRF Users 1 VRF 1 Users 2 VRF 2 Site B Fortinet · Arista vEOS Fortinet firewall IPsec VPN Arista vEOS Switch VLAN / VRF OSPF inter-VRF Users 1 VRF 1 Users 2 VRF 2 IPsec IPsec VPN tunnel from site A to site B, across the core Architecture of the two sites and the operator core Operator core Interconnects the sites Site A Fortinet · Arista vEOS Fortinet firewall IPsec VPN Arista vEOS Switch VLAN / VRF OSPF inter-VRF Users 1 VRF 1 Users 2 VRF 2 Site B Fortinet · Arista vEOS Fortinet firewall IPsec VPN Arista vEOS Switch VLAN / VRF OSPF inter-VRF Users 1 VRF 1 Users 2 VRF 2 Emulated in PnetLAB 2 × Fortinet firewall 2 × Arista vEOS switch 1 × IPsec tunnel IPsec
Each site pairs a Fortinet firewall with an Arista vEOS switch. VLANs and VRFs separate the user populations, OSPF routes dynamically between VRFs, and an IPsec VPN tunnel protects inter-site traffic across the operator core.

What I did

  • Built each site around a Fortinet firewall and an Arista vEOS switch.
  • Isolated the user populations with VLANs and VRFs.
  • Configured OSPF for dynamic routing between VRFs.
  • Secured inter-site communications with an IPsec VPN tunnel.

Skills demonstrated

Each skill links to the skills map on the home page.

Esc
At a glance
Experience
Projects
Skills
Credentials
Education
About
Languages
Journey
Contact
Secure IoT telemetry
Secure multi-site architecture
5G Standalone network
System and network hardening
Vulnerability assessment and exploitation
Multi-site network design and security
Regenerative repeater for satellite links
Use the light theme
Use the dark theme
Use the system theme
Lire en français
Copy my email address
Download my CV (PDF)
Open my LinkedIn profile
Back to the top
↑ ↓ navigate ↵ select Esc close