Embed Size (px)
Citation preview
Bc. nprap. Petr Gryc
University of Defence
Brno, Czech republic
Motivation
Subject of my student’s project
Current state
Quick review of main applied principles
Complications and future plans
Creation of new formation and independent units in Czech Army
Implementing VoIP in some dislocations
An Example of current real topology settings
Border routers, as a interface between trusted and untrusted networks
Concept of DMZ, servers with internal and external access
Working router settings containing Packet filteringRouter and router services settings NAT-TQoS
List of rules and recommended settings according to nsa.gov and cisco.com
School laboratory operating
Restriction of unneeded router services and blocking unnecessary functions
Basic static routing with „rough“ security implementation used together with exact access rules to servers for convenience of firewall settings
Secured remote access and QoS
Cisco and Alcatel network technology, both of them with proprietary VoIP technology and end use devices
Continuous changing and development of Czech Army IS various types and length of messages some of them are certified as Secret
Implementation VoIP security and interconnection to existing VoIP network through real Army servers
Compare settings with real border router of detached military unit
Applied better rules based on packet load of Czech Army IS
Summary:Subject of my student’s project, motivationCurrent state and main principlesFuture plans and complications
Contact:[email protected]
Thanks for your attention
