Campus Network Design and Operations

This is a technical workshop, made up of lecture and hands-on lab work to teach the skills needed to design, build, operate and manage any organisational network infrastructure according to current best practices.

Participants in this course will learn about:

• Core organisational infrastructure design best practices
  • Network design principles
  • Physical infrastructure (cabling and cabling installation)
  • Fibre optics
  • Switching (spanning tree, VLANs, L2 best practices)
  • Routing (static routing, IS-IS, and BGP)
  • IPv4, IPv6 and deploying dual stack infrastructure
  • Choosing routers and switches
• Campus security implementation and best practices
  • Acceptable use policies
  • Monitoring
  • Firewall placement

These skills will in turn drive an increase in organisational network performance, security and reliability. In turn this will improve the day to day Internet experience of end users.

Workshop agenda: https://nsrc.org/workshops/2022/mnnog4-cndo/agenda.html

Philip Smith

Dale Smith

Sanchir Bayasakh

Manlaibaatar Tserenkhuu

Network Management and Monitoring

Dave Phelan

Ulsbold Enkhtaivan

Gonchig Altansukh

Network Security & DNSSEC

Synopsis

This course will discuss the concept of DNS Security in detail, mechanisms to authenticate the communication between DNS Servers, mechanisms to establish authenticity, and integrity of DNS data and mechanisms to delegate trust to public keys of third parties. Participant will be involved in Lab exercises and do configurations based on number of scenarios.

Target Audience

This course is designed for network engineers, systems administrators, and anyone who is involved in managing DNS operations.

Prerequisites

It is assumed that participants have a good understanding of networking fundamentals and a basic knowledge of Unix/Linux.

Course Outline

• Intro to Network Security
• Cryptography Basics
• Device & Infrastructure Security
• Access Control
• DNS Technical Overview
• DNS Operations
• DNS Security
• DNS Transactions
• DNSSEC Overview
• DNSSEC Validation & Signing

Shane Hermoso

Warren Finch

Ankhzaya Tseden

Nyamkhand Buluukhuu

RPKI ROV tutorial

Target Audience

• Anyone interested to understand the RPKI framework and how it helps secure Internet Routing.

Synopsis

• Why do we keep seeing news headlines about major networks not being reachable because traffic got rerouted to somewhere else? BGP mishaps are very common and frighteningly very easy. Examples are malicious route hijacking, mis-origination (fat fingers), and bad filters (route leaks). We need better mechanism(s) to ensure no one can inject false information into the global routing system that easily.
• This tutorial will look at current route filtering tools/techniques, how RPKI is just a piece in the puzzle, and what we should do to secure the internet routing.

Pre-requisites

For those who manage IP resources for your organisations (technical or corporate contacts), please do come with MFA (OTP) enabled for your MyAPNIC account, as well as ensure you have permission from your Corporate Contacts to certifiy your resources - let us create ROAs for your prefixes!

This workshop is not an introduction. It is assumed that the workshop participants have a working knowledge of:

• IP Routing (esp BGP)
• How to use a router command line interface (Cisco IOS configuration syntax).
• Basic Linux command line (CLI) skills.

Full agenda: https://wiki.apnictraining.net/rpki-20221022-online

RPKI ROV tutorial + ROA session free for everyone who is interested, it will be held on ErdemTower room#705 on October 22nd at 14:00 (GMT+8)

Ulsbold Enkhtaivan