Projects

AAA, Wi-Fi and VPN at ČEPRO

2011–2021

I deployed centralised authentication at ČEPRO using Cisco ACS and later ISE, secured the Wi-Fi networks with 802.1X, and set up remote access via Cisco AnyConnect.

I installed Cisco Secure ACS 5 to authenticate both network device administrators and VPN users, integrated it with Active Directory, and migrated local accounts and VPN filters from the ASA using a conversion script I wrote myself. I later did the same on Cisco ISE, adding authentication for Check Point firewall administrators.

For the new Wi-Fi networks I designed and tested the security policies — 802.1X, certificates, and third-party access. For remote access I prepared AnyConnect, including profiles, installation packages and user guides, and later added machine-certificate authentication.