Bremen, Germany hashmat@bahadari.de bahadari.de

System Administration

System administration, networking and IT security

Reliable operation of network, Wi-Fi, firewall, servers and workstations – secure and documented.

Good IT goes unnoticed: sign-in, printers, Wi-Fi and backups simply work. That takes a clean network design, clear permissions and regular care. I take on these operations and bring experience from a large, security-critical environment in the financial sector.

What I take care of

  • Network design with VLAN segmentation for workstations, servers, Wi-Fi and guests
  • Firewall configuration with clear zones and rules, VPN with two-factor sign-in
  • Wi-Fi planning: internal network with 802.1X, isolated guest network
  • User and permission management, onboarding and offboarding
  • Servers, clients, updates and patch management
  • Backup following the 3-2-1 rule with regular restore tests
Network topology: site with office, servers and Wi-Fi
VLAN 10: WorkstationsVLAN 20: ServerVLAN 30: Wi-Fi internalVLAN 40: Wi-Fi guestsInternetMicrosoft 365Router / modemISPFirewall (NGFW)IPS, web filter, VPNRemote usersSSL VPN + MFAOff-site backupcopy off siteCore-SwitchVLAN routing, PoETunnelClientsPrintersServerNASAP 1AP 2Guest APInternet onlyencrypted1234

Reference topology for a site with office, servers, internal Wi-Fi and guests.

  1. The firewall separates internet and internal network and filters traffic (IPS, web filter).
  2. Remote access only via encrypted VPN with a second factor.
  3. VLANs separate workstations, servers, internal Wi-Fi and guests. Guests reach the internet only.
  4. Backups are additionally stored encrypted off site (3-2-1 rule).

Let’s talk about your IT.

In a free 30-minute call we clarify where you stand and what’s worth doing.