Ihor Soloviov
Offer Ihor work on your next project.
Rating
Language proficiency level
Skills and abilities
Programming
-
Databases & SQL
from 11 USD for project
Services
-
Cybersecurity & Data Protection
from 11 USD for project
-
Enterprise Resource Planning (ERP)
from 11 USD for project
-
Tuition
from 11 USD for project
Administration
-
Linux & Unix
from 11 USD for project
-
Software & Server Configuration
from 11 USD for project
-
System & Network Administration
from 11 USD for project
-
Windows
from 11 USD for project
Writing
-
Technical Documentation
from 11 USD for project
Portfolio
-
586 USD Implementation of IP telephony (FreePBX + Asterisk) for the enterprise
System & Network AdministrationTask:
Restore the operation of telephony at the enterprise after a critical incident in the IT infrastructure that led to a complete loss of communication. It was necessary to quickly deploy a stable, scalable, and secure solution for business continuity.
Solution:
… A new IP telephony system based on FreePBX/Asterisk was deployed in a short time with SIP trunk integration and network infrastructure through FortiGate.
What was done:
- Configuration of IP PBX (FreePBX / Asterisk)
- Integration of SIP trunk
- Setup of IVR (voice menu with custom audio greeting)
- Implementation of call forwarding scenarios to mobile numbers
- Mass configuration of IP phones (~ 60 subscribers Grandstream GXP1625/GXP2140)
- Organization of provisioning (automatic pulling of configurations)
- Configuration of Virtual IP on FortiGate (NAT/port forwarding)
- Configuration of Firewall Policies (access only from provider's IP)
- Basic security solution (fail2ban, IP whitelist)
- Prioritization of VoIP traffic through SD-WAN
- Comprehensive troubleshooting and stabilization of the system
Non-trivial tasks:
- Diagnosis and elimination of one-way audio
- Resolution of call drop issue at the 15th second
- Optimization of VoIP operation by disabling SIP ALG on FortiGate
- Clearing sessions and stabilizing SIP traffic processing
Result:
- Critical communication function at the enterprise was promptly restored
- Stable operation of telephony without interruptions was ensured
- A centralized call management system was implemented
- VoIP traffic was prioritized in the network
- Access to the PBX was restricted and the level of security was increased
- The system is ready for further scaling
Technologies: #fortigate #asterisk #freepbx #pjsip #voip #qos #grandstream
-
338 USD Setting up a secure VPN (IPsec + certificates) on FortiGate
System & Network AdministrationTask:
Organize secure remote access to the corporate network without using PSK (Pre-Shared Key), with an enhanced level of cryptographic protection.
Solution:
… A VPN based on PKI certificates has been implemented, significantly increasing security compared to classic passwords.
What has been done:
- A local Certificate Authority (CA) has been deployed
- RSA 2048 certificates have been generated for the server and clients
- FortiGate has been configured (IPsec VPN, Phase 1 / Phase 2)
- Access policies (Firewall Policies) have been implemented based on the principle of least privilege (Zero Trust)
- FortiClient has been configured for users (certificate-based authentication)
- Diagnostics have been conducted and conflicts resolved during certificate agreement
Result:
- A secure corporate-level VPN channel
- Abandonment of vulnerable PSK
- Stable connection operation
- Minimized risks of unauthorized access
- Preparedness for scaling
Technologies:
#FortiGate, #IPsec, #PKI, #RSA 2048, #Firewall Policies, Network Security
I can implement similar solutions for your business — from basic VPN to comprehensive network security.
-
225 USD Comprehensive infrastructure monitoring
System & Network AdministrationTask: Ensure transparency of network equipment and servers with real-time monitoring in Telegram. The main priority is the accurate recording of the time when server UPS (uninterruptible power supplies) switch to battery power and their return to mains power, as well as monitoring the status of network equipment. An additional bonus is the monitoring of the load level of the corporate WiFi network.
Solution (Stack: Zabbix, Ubuntu Server, Python, systemd, Telegram API, Smart-UPS 3000XL, Smart-UPS SRT 10000):
… - Deployed a Zabbix monitoring system to control the status of servers and network equipment with custom triggers and alerts sent to Telegram.
- Developed a separate Python script for precise tracking of the status of server UPS.
- As an additional functionality, integrated interaction with the UniFi controller API for parallel monitoring of the status of Wi-Fi access points.
- The script was deployed on Ubuntu Server as a systemd service to ensure guaranteed uninterrupted operation in the background.
- All notifications were consolidated into a single Telegram bot for maximum convenience for the on-duty administrator.
Result: Created a single, fault-tolerant monitoring ecosystem. Instant notification of power outages in the server room and other equipment on the company's premises has been ensured, which is critically important under the current working conditions in Ukraine. The response time to power incidents or "why Wi-Fi is not working well" has been reduced thanks to push notifications in the messenger and quick understanding of what happened.
Activity
| Latest proposals 1 | Budget | Added | Deadlines | Proposal | |
|---|---|---|---|---|---|
|
HIKVISION intercom settings
58 USD
|