Services

What I work on

Four areas, the whole network. Most problems touch more than one, which is why it helps to have one engineer who covers them all, from architecture to configuration.

  1. 01

    Campus & access

    Switching, routing and Wi-Fi that just work — and control over who connects.

    The network your people use every day: offices, warehouses, branches. Stable routing and switching, reliable Wi-Fi, and access control that knows who and what is connecting — including software-defined campus fabrics with Cisco SD-Access and Catalyst Center (formerly DNA Center), or a BGP EVPN fabric on Catalyst if you’d rather not depend on a controller.

    Technologies & platforms

    • Routing & switching
    • OSPF, IS-IS, BGP
    • Wi-Fi
    • Cisco SD-Access
    • Catalyst Center (DNA Center)
    • Campus BGP EVPN
    • NAC & 802.1X
    • Cisco IOS-XE
    • Cisco Meraki
    • Cisco ISE
    • Ubiquiti UniFi
  2. 02

    WAN & cloud

    Sites and clouds connected securely, using every link you pay for.

    Branches, remote users and cloud workloads connected as one network. SD-WAN that actually uses your links — Cisco Catalyst SD-WAN (Viptela) or Fortinet — VPNs that don’t drop, and cloud networking designed on purpose instead of bolted on.

    Technologies & platforms

    • SD-WAN
    • Site-to-site & remote-access VPN
    • MPLS migration
    • Hybrid connectivity
    • AWS
    • Azure
    • Cisco Catalyst SD-WAN
    • Fortinet
  3. 03

    Security

    Firewalls you can read, and segments that actually contain things.

    Firewall rulebases cleaned up or rebuilt, networks segmented so one incident stays one incident, and remote access that doesn’t open the door to everyone. Hardening is part of every change, not a separate project.

    Technologies & platforms

    • Next-gen firewalls
    • Rulebase audits & migrations
    • Segmentation
    • Zero-trust access
    • Palo Alto Networks
    • Fortinet
    • Cisco ISE
  4. 04

    Data center

    VXLAN EVPN and ACI fabrics, built and documented properly.

    Spine-leaf fabrics on Cisco Nexus with VXLAN BGP EVPN, single-site or multi-site, or on Cisco ACI. Migrations away from three-tier and vPC designs without stopping the business.

    Technologies & platforms

    • Spine-leaf
    • VXLAN BGP EVPN
    • Multi-site
    • Cisco NX-OS
    • Cisco ACI

Ways to work together

Four ways to start.

  • Assessment

    A review of your network — or of a design or quote you’ve been given — with a written report of the risks and a prioritised plan.

  • Troubleshooting

    A specific problem, found and fixed — including the ones that have been open for months.

  • Project

    Design and implementation of something new, or finishing one that stalled, including the hardware specification. Or a migration away from something old.

  • Part-time architect

    A fixed monthly arrangement as your network architect or tech lead: roadmap, supplier oversight and critical changes, without hiring anyone.

Tell me what’s going on with your network.

Book a 30-minute call and we’ll look at it together. Prefer to write first? Email works too.

Book a call

30 min · €50 · credited if you hire me

Or request a free network health check

or email contacto@hardenet.com