© 2026 Reigis Muca All Rights Reserved.
Final Project: Network Engineering (GNS3)
This final year project involved designing, implementing and testing a secure network infrastructure for a games development company operating across the UK and China. The aim was to protect sensitive intellectual property such as source code, internal tools, project files and pre release game builds while meeting the client’s strict requirements around a zero cloud dependency, wired only connectivity, encrypted site to site communication and controlled access to sensitive resources.
The environment was built in GNS3 using MikroTik routers, a simulated UK/China topology, VLAN segmentation, a WireGuard VPN tunnel, an Ubuntu Server, Windows VM’s and a Kali Linux VM external to the network for pen testing. I configured the Samba Active Directory for centralised identity management, Samba shares for access based on certain departments in the company, Apache for an internal intranet, Postfix and Dovecot for internal email, Bacula for backup and restore, Wazuh SIEM for log monitoring, Fail2Ban for brute force protection and Perforce (Helix Core) for version control.
- Added Core Services: Active Directory, Email, Backup, Intranet & Perforce
- Added Cyber Solutions: Wazuh SIEM, MFA, Fail2Ban, Firewall Rules
- Pen Tested With Kali Linux Tools: Nmap, Nikto, CVE, Enum4Linux, LDAP
A key feature was a custom MFA program created for the sensitive Project Eclipse folder (MA’s latest project). This used a PowerShell script on the Windows client as the frontend, a bash script on the Ubuntu server as the backend, internal email delivery (for OOB authentication), Kerberos ticket refreshing and Samba group membership to deny access first, verify the user, and then grant access to the sensitive folder. The plan was to store the program on company approved USB’s to emulate a cost efficient version of a Yubikey.
Security testing and reconnaissance was performed using Kali Linux tools such as Nmap and Enum4Linux to identify exposed services, compare the network’s before/after security posture and validate the effectiveness of the features I implemented. I also implemented SCP file transfer with SHA-256 hashing to prove file integrity and show MA how tampering can change a file’s hash.
Below is a comprehensive walkthrough of the network I built:
Get in touch with me
Please fill out the form below to start chatting with me directly.