Arpan Manna
Network Engineer • Systems Administration • Packet Analysis
Highly motivated and detail-oriented Network Engineer with hands-on lab experience in routing, switching, and systems administration. Proficient in designing and deploying enterprise network topologies using Cisco Packet Tracer and GNS3. Strong understanding of TCP/IP architecture, subnetting, dynamic routing (OSPF, EIGRP), and Layer 2 protocols (VLANs, STP). Eager to leverage rigorous troubleshooting skills and foundational knowledge of Windows and Linux administration to contribute effectively to a Network Operations Center (NOC) or IT infrastructure team.
Recruiter Note: Every topology documented on this system has been constructed from bare-metal scratch in Cisco Packet Tracer and GNS3. Configurations emphasize RFC compliance, determinism, and zero unrouted loops.
Enterprise Multi-Site Routing →
OSPF multi-area design, EIGRP redistribution, branch links & sub-second convergence.
Dual-Homed eBGP Edge →
Multi-homed ISP connectivity, route-map policy, AS-path prepending & failover.
Switching & Campus Hardening →
802.1Q trunks, RSTP root guard, PortFast, LACP etherchannel, sticky MAC security.
Enterprise Multi-Site Network Architecture Implementation
SUB-01 Scalable Core Routing: OSPF Multi-Area & EIGRP Integration
Designed and simulated a scalable corporate network connecting a headquarters to multiple remote branch offices using OSPF and EIGRP routing protocols for optimized path selection and sub-second convergence.
- OSPF Area 0 (Backbone) established across HQ Distribution Routers with tuned hello/dead timers (1s/4s) for high-speed link-fault detection.
- Remote branch networks connected over serial/Gigabit circuits leveraging EIGRP with Feasible Successor paths pre-calculated for zero-downtime cutover.
- Mutual route redistribution configured with administrative distance metric weighting and route-maps to prevent two-way routing feedback loops.
! --- OSPF Area 0 Backbone --- router ospf 1 router-id 1.1.1.1 log-adjacency-changes network 10.0.0.0 0.0.0.255 area 0 network 192.168.1.0 0.0.0.255 area 0 auto-cost reference-bandwidth 10000 ! ! --- EIGRP Branch Redundancy --- router eigrp 100 network 172.16.0.0 0.0.255.255 no auto-summary metric weights 0 1 0 1 0 0
SUB-02 Dual-Homed Enterprise Edge: Redundant external BGP (eBGP)
Architected a dual-homed enterprise edge network utilizing external BGP (eBGP) for redundant ISP connectivity, manipulating route attributes to engineer precise inbound and outbound traffic flows.
- Primary uplink engineered to ISP-A (AS64512) with higher Local Preference (200) for deterministic primary outbound internet transit.
- Backup path routed to ISP-B (AS64513) with standard Local Preference (100) and AS-Path Prepending (3x) on egress to ensure asymmetric inbound path suppression.
- Edge NAT/PAT overload pools mapped directly to route interfaces to maintain continuous session translation during ISP failover tests.
! --- Exterior BGP Peering --- router bgp 65001 bgp log-neighbor-changes neighbor 203.0.113.1 remote-as 64512 neighbor 203.0.113.1 description PRIMARY-ISP-A neighbor 203.0.113.1 route-map SET-LP-IN in neighbor 203.0.113.5 remote-as 64513 neighbor 203.0.113.5 description BACKUP-ISP-B neighbor 203.0.113.5 route-map PREPEND-OUT out ! route-map SET-LP-IN permit 10 set local-preference 200
SUB-03 Campus Switching: Inter-VLAN, RSTP Loop Mitigation & Port Hardening
Implemented inter-VLAN routing using a Router-on-a-Stick topology to securely segment HR, IT, and Finance departments, enforcing inter-departmental traffic policies via Extended Access Control Lists (ACLs). Configured Layer 2 redundancy and loop prevention using Rapid Spanning Tree Protocol (RSTP) and aggregated switch links using EtherChannel (LACP) to increase backbone bandwidth. Deployed Port Address Translation (PAT) on edge routers and implemented Port Security on access switches.
- Port Security (Sticky MAC): Max 1 MAC per access interface, immediate shutdown violation state against unauthorized rogue laptop patching.
- DHCP Snooping & DAI: Untrusted client ports inspected; ARP spoofing poisoning completely blocked across all user access ports.
- Spanning Tree: BPDU Guard enabled on all PortFast access access points to prevent unauthorized bridge insertion.
! --- Hardened Switchport Access --- interface FastEthernet0/1 description HR-USER-PORT switchport mode access switchport access vlan 10 spanning-tree portfast spanning-tree bpduguard enable switchport port-security switchport port-security maximum 1 switchport port-security mac-address sticky switchport port-security violation shutdown
Protocol Matrix & Technical Skills
Network Architecture
Core StackAddressing foundation, subnet hierarchies, and network infrastructure baselines.
Routing Technologies
Layer 3Deterministic path selection, distance vector and link-state routing.
Switching & Layer 2
Ethernet / LANVLAN isolation, trunk negotiation, broadcast domain mitigation, and bonding.
Network Security
DefensiveFiltering rule definitions, edge translation, and access switch hardening.
Diagnostic Tools
SimulatorsDeep packet capture, emulation engines, and operational testing tools.
Systems Administration
OS & HostEnterprise directory infrastructure, storage mounts, and daemon security.
Educational History & Credentials
Advance Diploma in Hardware & Networking Engineering
Rigorous training in routing protocols (OSPF, EIGRP, BGP), enterprise switching architectures, Cisco IOS operations, Windows Server (AD DS) and Red Hat Enterprise Linux systems.
Advance Diploma in GIS & Remote Sensing
Spatial analysis, geospatial database querying, telemetry datasets, and remote sensing architectures.
M.Sc. in Agronomy
Analytical research, empirical data collection, structured methodology, and statistical variance testing.
B.Sc. in Agriculture
Core scientific curriculum, laboratory protocols, and structured documentation methods.
Initiate NOC Recruitment Link
Feel free to contact me directly regarding interviews, technical screenings, or hands-on lab walk-throughs.
Send Direct Recruiter Ping
Generates a pre-formatted payload directly addressed to Arpan's engineering mailbox.