Switch to English?
Yes
Переключитись на українську?
Так
Переключиться на русскую?
Да
Przełączyć się na polską?
Tak

Ihor Soloviov

Offer Ihor work on your next project.

Ukraine Odessa, Ukraine
1 month 17 days back
A little busy a little busy
age 39 years
on the service 2 months 7 days

Rating

Successful projects
No data
Average rating
No data
Rating
270
System & Network Administration
115 place out of 587
Software & Server Configuration
73 place out of 221

Language proficiency level

Русский Русский: fluent
Українська Українська: upper-intermediate
English English: pre-intermediate

Skills and abilities

Programming

Services

Administration


Writing

Portfolio


  • 586 USD

    Implementation of IP telephony (FreePBX + Asterisk) for the enterprise

    System & Network Administration
    Task:
    Restore the operation of telephony at the enterprise after a critical incident in the IT infrastructure that led to a complete loss of communication. It was necessary to quickly deploy a stable, scalable, and secure solution for business continuity.

    Solution:
    A new IP telephony system based on FreePBX/Asterisk was deployed in a short time with SIP trunk integration and network infrastructure through FortiGate.

    What was done:
    - Configuration of IP PBX (FreePBX / Asterisk)
    - Integration of SIP trunk
    - Setup of IVR (voice menu with custom audio greeting)
    - Implementation of call forwarding scenarios to mobile numbers
    - Mass configuration of IP phones (~ 60 subscribers Grandstream GXP1625/GXP2140)
    - Organization of provisioning (automatic pulling of configurations)
    - Configuration of Virtual IP on FortiGate (NAT/port forwarding)
    - Configuration of Firewall Policies (access only from provider's IP)
    - Basic security solution (fail2ban, IP whitelist)
    - Prioritization of VoIP traffic through SD-WAN
    - Comprehensive troubleshooting and stabilization of the system

    Non-trivial tasks:
    - Diagnosis and elimination of one-way audio
    - Resolution of call drop issue at the 15th second
    - Optimization of VoIP operation by disabling SIP ALG on FortiGate
    - Clearing sessions and stabilizing SIP traffic processing

    Result:
    - Critical communication function at the enterprise was promptly restored
    - Stable operation of telephony without interruptions was ensured
    - A centralized call management system was implemented
    - VoIP traffic was prioritized in the network
    - Access to the PBX was restricted and the level of security was increased
    - The system is ready for further scaling

    Technologies: #fortigate #asterisk #freepbx #pjsip #voip #qos #grandstream
  • 338 USD

    Setting up a secure VPN (IPsec + certificates) on FortiGate

    System & Network Administration
    Task:
    Organize secure remote access to the corporate network without using PSK (Pre-Shared Key), with an enhanced level of cryptographic protection.

    Solution:
    A VPN based on PKI certificates has been implemented, significantly increasing security compared to classic passwords.

    What has been done:
    - A local Certificate Authority (CA) has been deployed
    - RSA 2048 certificates have been generated for the server and clients
    - FortiGate has been configured (IPsec VPN, Phase 1 / Phase 2)
    - Access policies (Firewall Policies) have been implemented based on the principle of least privilege (Zero Trust)
    - FortiClient has been configured for users (certificate-based authentication)
    - Diagnostics have been conducted and conflicts resolved during certificate agreement

    Result:
    - A secure corporate-level VPN channel
    - Abandonment of vulnerable PSK
    - Stable connection operation
    - Minimized risks of unauthorized access
    - Preparedness for scaling

    Technologies:
    #FortiGate, #IPsec, #PKI, #RSA 2048, #Firewall Policies, Network Security

    I can implement similar solutions for your business — from basic VPN to comprehensive network security.
  • 225 USD

    Comprehensive infrastructure monitoring

    System & Network Administration
    Task: Ensure transparency of network equipment and servers with real-time monitoring in Telegram. The main priority is the accurate recording of the time when server UPS (uninterruptible power supplies) switch to battery power and their return to mains power, as well as monitoring the status of network equipment. An additional bonus is the monitoring of the load level of the corporate WiFi network.

    Solution (Stack: Zabbix, Ubuntu Server, Python, systemd, Telegram API, Smart-UPS 3000XL, Smart-UPS SRT 10000):

    - Deployed a Zabbix monitoring system to control the status of servers and network equipment with custom triggers and alerts sent to Telegram.

    - Developed a separate Python script for precise tracking of the status of server UPS.

    - As an additional functionality, integrated interaction with the UniFi controller API for parallel monitoring of the status of Wi-Fi access points.

    - The script was deployed on Ubuntu Server as a systemd service to ensure guaranteed uninterrupted operation in the background.

    - All notifications were consolidated into a single Telegram bot for maximum convenience for the on-duty administrator.

    Result: Created a single, fault-tolerant monitoring ecosystem. Instant notification of power outages in the server room and other equipment on the company's premises has been ensured, which is critically important under the current working conditions in Ukraine. The response time to power incidents or "why Wi-Fi is not working well" has been reduced thanks to push notifications in the messenger and quick understanding of what happened.

Activity

  Latest proposals 1
HIKVISION intercom settings
58 USD