Projects

ČEPRO depot security

2011–2013

I mapped ČEPRO's network and progressively rolled out firewalls, VLAN segmentation and DHCP snooping across all storage depots.

At the start of the engagement I mapped the L1–L3 network topology, proposed improvements and standardised configuration templates for new active network equipment.

2011–2012: deployed Cisco ASA firewalls at the depots, introduced VLAN segmentation, implemented DHCP snooping and provided connectivity redundancy. Unified routing for the petrol-station networks.
2013–2015: migrated petrol stations from individual IPsec tunnels to MPLS networks.
2015: connected to the České Radiokomunikace MPLS network (BGP), introduced new public addressing and transitioned internet connectivity.
2021: migrated WAN and internet connectivity to T-Mobile.

For each migration I prepared a detailed procedure, documentation and post-migration support.