A working record of infrastructure I have built, configured and investigated. Each project is described by its purpose, implementation, present result and relevance to field engineering, networking, systems support or managed services.
Project 01 · Networking
Working physical and virtual lab
Multi-vendor network infrastructure and CCNA laboratory
A mixed environment for converting routing and switching theory into configurations on real Cisco and MikroTik equipment, supported by virtual simulation and systematic fault investigation.
Equipment and platforms
MikroTik hEX and RB4011, Cisco Catalyst 2960 and 3650 switches, Ubiquiti EdgeRouter X, TP-Link and Linksys wireless equipment, PoE switching, client devices, VMware, EVE-NG and Cisco Packet Tracer.
Configuration work
IPv4 addressing and subnetting, LAN/WAN paths, DHCP, DNS, NAT/PAT, VLAN access and trunk ports, inter-VLAN concepts, static routes, EIGRP exercises, LACP/EtherChannel, LLDP/CDP, firewall rules and Wi-Fi integration.
Result and learning
Built repeatable physical and virtual topologies, verified client connectivity and practised isolating faults by layer. Troubleshooting included identifying rogue DHCP and investigating overlapping-subnet VPN routes.
Evidence planned: physical photographs, topology files and sanitised configurationsGitHub link pending
Project 02 · VPN
Built and tested
Dual WireGuard VPN and remote infrastructure access
Two VPN implementations used to understand encrypted access, peer configuration, routes, forwarding and practical remote administration.
Raspberry Pi implementation
Configured a WireGuard server with key pairs, peers, forwarding and masquerading. Used SSH and Termius over VPN to administer Linux services and reach internal resources.
RouterOS implementation
Created a separate WireGuard interface on the MikroTik hEX, configured mobile and PC peers and used split-tunnel routes for management access.
Operational result
Verified encrypted handshakes and remote access to SSH-managed infrastructure and internal services, including CCTV recordings. Investigated route selection and overlapping-subnet failures.
Evidence planned: sanitised peer diagrams, routing notes and test resultsGitHub link pending
Project 03 · Systems
Working lab
VMware Microsoft infrastructure and identity environment
A virtual enterprise-style lab for developing Windows Server, Active Directory, endpoint support and Microsoft cloud administration capability.
Environment
VMware networks containing Windows Server, Windows client machines and Linux guests, supported by OPNsense/pfSense networking. Server, client and network roles are separated for repeatable tests.
Administration practised
Active Directory users and groups, password resets, shared folders, NTFS permissions, basic domain administration, DNS/DHCP concepts, Remote Desktop and client connectivity.
Cloud and support relevance
Microsoft 365, Outlook, Teams, SharePoint, OneDrive and Entra ID development supports service-desk and systems roles while complementing network infrastructure skills.
VMwareWindows ServerActive DirectoryDNSDHCPMicrosoft 365Entra ID
Evidence planned: logical diagram, user and group tasks, permissions testsGitHub documentation pending
Project 04 · Voice
Working lab
Raspberry Pi Asterisk 22 PBX
A VoIP environment combining a Linux PBX with physical IP phones and a softphone client for SIP registration, extension planning and call testing.
Endpoints
Yealink T46S/T42S, Polycom VVX 450 and Zoiper clients connected across the lab network, with extensions including 102 and 104.
Implementation
Compiled and operated Asterisk 22 on Raspberry Pi 5, configured SIP endpoints and used addressing, registration state and service logs to investigate call behaviour.
Current result
Endpoint registration and internal calls between extensions were completed. The next phase covers SIP trunk configuration and stronger operational documentation.
Evidence planned: extension plan, endpoint screens and sanitised configurationGitHub link pending
Project 05 · CCTV
Operational practice
IP CCTV, Frigate NVR and onsite installation work
This area combines previous camera installation experience with a modern on-premises recording lab and secure remote viewing.
Physical installation
Experience with IP and analogue cameras, positioning and mounting, cable routing, PoE connectivity, DVR/NVR setup, local storage, remote viewing, maintenance and client handover.
On-premises lab
Integrated Tapo RTSP streams with Frigate and go2rtc in Docker. Configured local recording with approximately four days of test retention on 32 GB storage.
Network integration
Tested camera connectivity, streams and storage, then used WireGuard to reach recordings remotely. This links electronic security work with Linux, IP networking and secure access.
IP CCTVAnalogue CCTVHikvisionDahuaFrigatego2rtcRTSPDockerPoENVR/DVR
A self-hosted Flask application that began as a GPS-based clock-in system and is developing toward broader workforce administration.
Purpose
Provide multi-site attendance records, location validation and straightforward administration without depending entirely on an external SaaS product.
Implementation
Flask, SQLAlchemy and PostgreSQL 17 on Raspberry Pi 5 with Gunicorn, systemd, Nginx and Cloudflare-connected access. Functions include role-based login, staff/sites, assignments, GPS accuracy, geofence checks and clock events.
Verified progress
Successful location checks and clock-in/clock-out requests were recorded. The build demonstrates service configuration, relational data, authentication, DNS, Linux administration and iterative troubleshooting.
Live project: staffclock.techmanntech.comSource case study pending
Project 07 · Linux hosting
Operational
24/7 Raspberry Pi service host and Cloudflare publishing
An always-on Linux system used to host web applications and infrastructure services while developing practical administration and service-recovery skills.
Operating environment
Raspberry Pi OS/Debian administration through SSH and Termius, package management, systemd services, Docker workloads, logs and persistent service configuration.
Hosted services
StaffClock, PostgreSQL, Asterisk, Frigate and web content, with public websites and subdomains made available through Cloudflare Tunnel.
Engineering relevance
Services must start reliably, listen on intended interfaces, survive reboots and remain reachable through local or controlled remote paths.
Raspberry Pi OSDebianUbuntuSSHsystemdDockerCloudflare Tunnel
Evidence planned: service map, deployment notes and recovery checksGitHub guide pending
Project 08 · Endpoint support
Established experience
Windows deployment, imaging and break/fix work
Long-term practical work installing, repairing and supporting endpoints across multiple hardware and Windows generations.
Operating systems
Windows XP, Vista, 7, 8, 8.1, 10 and 11, alongside Linux installation and basic macOS support. Work includes boot media, clean installations, imaging, drivers, updates and user setup.
Hardware and peripherals
Laptops, desktops, smartphones, tablets and printers; RAM and SSD/NVMe upgrades; hard-drive replacement; screens, batteries and charging ports; applications, data transfer and backup guidance.
Support method
Investigate symptoms, reproduce the issue, separate software from hardware and network causes, complete repairs within scope and explain the result clearly to the user.
Windows XP–11OS imagingBoot mediaDriversRAMSSD/NVMePrintersUser support
Evidence planned: deployment procedure and selected before/after recordsDocumentation pending
Project 09 · Managed connectivity
Prototype and deployment design
UNIDEL community Wi-Fi and hotspot platform
A university-community connectivity concept joining a tested captive-portal prototype with a segmented RB4011 pilot design.
Implemented prototype
Tested MikroTik Hotspot, a branded captive portal, voucher-only access and Mikhmon voucher creation. Investigated iOS captive-network-assistant behaviour and verified client access.
Network design
RB4011 with VLAN 10 management, VLAN 20 administration and VLAN 30 hotspot interfaces; separate subnets and DHCP scopes, NAT, PoE switching, outdoor access-point planning and WireGuard management.
Current boundary
The portal and voucher concept have been tested. Final bridge VLAN enforcement and campus deployment remain in progress and are not presented as completed production installation.
Evidence planned: topology, portal screens and deployment recordCase study pending
Project 10 · Network security
Developing lab
Virtual firewall and security-appliance comparison
A structured lab for understanding how interfaces, addressing, routing, NAT and policy decisions affect end-to-end connectivity across different firewall platforms.
Platforms
OPNsense and pfSense virtual firewall practice, MikroTik firewall/NAT configuration and Fortinet FortiGate VM setup and troubleshooting.
Tasks
LAN/WAN addressing, interfaces, DHCP, NAT, basic firewall rules, virtual networking, VPN interaction and validation of client-to-service packet paths.
Current boundary
OPNsense, pfSense and RouterOS tasks form active practice. The FortiGate VM remains an unresolved learning environment and is not claimed as production administration.
