Pardis Project

Implemented a small office network infrastructure using MikroTik routing, Cisco switching, an HP server, and Windows Server services. The project included DHCP, NAT, Active Directory, DNS, shared folders, mapped drives, printer sharing, user accounts, group permissions, and basic access control.

Created separate networks for Admin, Sales, and IT departments using different VLANs. Internet access was provided only for required users and services, while some sensitive devices were intentionally kept without internet access for security reasons.

• Devices UsedMikroTik router, Cisco switch, HP server, client computers, network printer, wireless access point, patch panel, and Ethernet cabling.
• WorkConfigured VLANs, DHCP, NAT, Active Directory, DNS, shared folders, mapped drives, printer access, and department-based permissions.
• ResultTested user login, internet access, file sharing, printer access, VLAN communication, restricted devices, and overall connectivity.

Sadat Institution

Designed and implemented a small institution network using a router-on-a-stick design to separate departments through VLANs while allowing controlled communication between them. The network included routing, DHCP, internet access, VLAN trunking, and basic security policies.

Implemented a complete VoIP phone system using Issabel PBX, including internal extensions, call routing, IP phone registration, and softphone connectivity. This improved internal communication between users and departments without depending fully on traditional phone lines.

• Devices UsedMikroTik router, Cisco Layer 2 switch, Issabel PBX server, IP phones, softphones, client computers, wireless access point, network printer, patch panel, and Ethernet cabling.
• WorkConfigured department VLANs, router-on-a-stick routing, DHCP, internet access, inter-VLAN communication, Issabel PBX, extensions, and call routing.
• ResultTested VLAN communication, user connectivity, IP phone registration, softphone access, and internal VoIP calling across the institution.

Tabesh Dental Clinic Project

Implemented an advanced dental clinic network and systems infrastructure using seven Cisco 2960 Layer 2 switches, one Cisco 3750 Layer 3 core switch, a MikroTik router, and one HPE Gen10 server with four 2.4 TB 10K SAS hard drives. VMware ESXi was installed on the HPE server to host virtual servers for Active Directory, DNS, DHCP, file sharing, backup, and clinic services.

Designed VLAN-based separation for reception, doctors, finance, management, dental imaging, servers, VoIP, guest Wi-Fi, IT administration, and branch communication. Configured inter-VLAN routing, access control, NAT, VPN access, guest isolation, shared folders, printer access, mapped drives, Group Policy, and role-based permissions.

Because the dental clinic needed to communicate with another branch, VLAN 60 was used as a dedicated communication VLAN between the two networks. This VLAN carried approved branch-to-branch traffic such as selected server access, administrative communication, and required internal services. Instead of allowing full open access between both locations, the connection was controlled so only necessary traffic could pass. This kept the branch link organized, easier to monitor, and separated from normal user traffic, guest Wi-Fi, VoIP, dental imaging, and server traffic.

• Devices UsedSeven Cisco 2960 Layer 2 switches, one Cisco 3750 Layer 3 core switch, MikroTik router, HPE Gen10 server, four 2.4 TB 10K SAS drives, IP phones, access points, printers, imaging devices, patch panel, rack, and Ethernet cabling.
• WorkInstalled VMware ESXi, created virtual server services, configured VLANs, branch communication through VLAN 60, VPN access, guest isolation, shared resources, and security policies.
• ResultTested internet access, domain login, file sharing, printer access, VLAN security, VPN connectivity, server availability, branch communication, and failover behavior.