Here's a list of the lab items that require maintenance. You're probably looking for someone with some good Linux admin experience. The stuff in the lab is running on Fedora Linux, if that helps. Lab – · Firewall (kernel 2.6)– a. NAT – DMZ and LAN are running on non-routable space, nat’d at the firewall to 64.193.19/24 addresses b. Source NATs – individually defined source NATS for outbound hosts c. Destination NATs – individual, (full cone) NATs for inbound connections d. Port mapping – firewall is translating ports during filtering e. Stateful and non-stateful filtering on each segment: DMZ, LAN, PUB f. No QoS, Traffic Shaping or other advanced iptables features are in use · Intrusion Detection System – Snort IDS should be maintained 1 Antivirus (Trend) 2 SMTP Gateway – linux/Sendmail host – sendmail mail routing is relatively simple, internals of sendmail require specific knowledge, system is critical to all email flowing through the lab. 3 DNS – two linux DNS boxes – advanced configuration using views with BIND, needs to be watched and patched from time to time. Knowledge of BIND or ability to move onto alternative is critical. 4 Switching/Routing/Wiring – All Cisco equipment - 2600 series routers, some 29 series switches - nothing complicated. 5 POP3 Server for WS Store Demos – linux box with qpopper, webmin and front-ended by the Nortel 3050 with SSL certificate. System is very low maintenance, but requires an upgrade to a newer release of Linux, and requires specific knowledge of POP server configuration, webmin configuration/management and linux host management (scripting/etc). Basic reporting in Perl. 6 Certificates Server – Running Windows Certificate Services – no effort to maintain but should be patched and looked at occasionally. Can be used to generate valid PKI Certificates – clients with certs from this server can be recognized by the Cisco VPN. 7 VPNs: Cisco 3000 Series Concentrator, Nortel 1050, Nortel 3050, ipUnplugged Roaming Server, ipUnplugged Roaming Gateway. – Lucent supports the ipUnplugged stuff, the Cisco and Nortel devices require specific knowledge or a lot of patience and time. (We get good support from Nortel when needed, we are supposed to have support from Cisco, but I’ve never gotten much from them when needed aside from a CCO login). 8 Cisco WiFi AP – never was able to configure it properly. Linked to the ipUnplugged VPN only.