Nair Systems, DIFC is currently looking for Network Engineer for our UAE operations with the following terms & conditions.
Configure IPv6 on all Switches, routers, access points and firewalls .
Configure DHCP in the offices to lease IPv6 for endpoints.
Co-ordinate with local IT teams to configure printers, scanners and IPPhone to IPv6.
Configure RADIUS authentication on IPv6 at Cisco ISE
Coordinate with ISP to configure MPLS and external leased line circuits to be configured with IPv6
configuring a proper SDM/QoS policies where applicable
Dual-stack IPsec tunnel configuration
Device hardening which will include:
• Enable Unicast Reverse Path Forwarding (uRPF) in Loose Mode on all router interfaces:
IPv6 verify unicast source reachable-via any allow-default
• Prevent routers from processing illegitimate, incomplete packets via the undetermined transport
command found within ACL configuration.
Filter IPv6 Extension Headers (EH) based on IETF document Recommendations on the
Filtering of IPv6 Packets Containing IPv6 Extension Headers Section 3.31:
Drop or ignore IPv6 Hop-by-Hop Options (Protocol=0)
Drop IPv6 routing header type 0 (RTH0 - Source Route), but permit all other IPv6 routing header types
Drop EH types used for experimentation and testing (protocol 253 and 254)
Drop unknown EH types
Allow all other EH types
For first-hop access layer devices, implement IPv6 RA Guard and DHCP Guard to protect against rogue router advertisements and DHCPv6 servers.
BCP 38-equivalent ACLs for edge interfaces will be constructed to mitigate spoofing of IPv6 source addresses.
Terms and conditions
Joining time frame: 2 weeks (maximum 1 month)
The selected candidates shall join Nair Systems - UAE and shall be deputed to one of the leading Organizations in UAE.
Should you be interested in this opportunity, please send your latest resume in MS Word format at the earliest at email@example.com