VPN Project
23-Aug-2022
Agenda
PROJECT ORGANIZATION CHART
Project
Consultant
Project Coordinator
Implement
Team Leader
Team Member
Thanyaphrued Klaharn
<Thanyaphrued.K@dcs.premier.co.th
Kriangkai Lumdubwong
Kriangkai.L@dcs.premier.co.th>
Jirayut Ngampipat
<Jirayut.N@dcs.permier.co.th>
Team Member
Polkit Luangsanit <Polkit.L@dcs.premier.co.th>
Piya Buranapattama
<Piya.B@dcs.premier.co.th>
Project
Manager
Sita Sugandhavanija <Sita.S@dcs.premier.co.th>
Network Diagram
Cisco Secure Firewall 3110 �Front view
Install with Slide Rail kit
BOQ
P/N | Description | Qty |
|
|
|
FPR3110-ASA-K9 | FPR3110-ASA-K9 Cisco Secure Firewall 3110 ASA Appliance, 1U | 2 |
CON-SNTP-FPR3110A | SNTC-24X7X4 Cisco Secure Firewall 3110 ASA Appliance | 2 |
FPR3K-PWR-AC-400 | Cisco Secure Firewall 3K Series 400W AC Power Supply | 2 |
FPR3K-PWR-AC-400 | Cisco Secure Firewall 3K Series 400W AC Power Supply | 2 |
CAB-AC | AC Power Cord (North America), C13, NEMA 5-15P, 2.1m | 4 |
SF-F3KASA9.17.1-K9 | Cisco ASA 9.17.1 Software for Firepower 3100 appliances | 2 |
FPR3K-SSD900 | Cisco Secure Firewall 3K Series 900GB | 2 |
FPR3K-SLIDE-RAILS | Cisco Secure Firewall 3100 Slide Rail Kit | 2 |
FPR3K-CBL-MGMT | Cisco Secure Firewall 3k Series Cable Mgmt Brackets | 2 |
BOQ
P/N | Description | Qty |
FPR3110-BSE | Cisco Secure Firewall 3110 Base Lic | 2 |
FPR3K-FAN | Cisco Secure Firewall 3K Series Fan Tray | 4 |
PR3K-SSD-BLANK | Cisco Secure Firewall 3100 Series SSD Blank Slot Cover | 2 |
FPR3K-NM-BLANK | Firepower 3100 Series Network Module Blank Slot Cover | 2 |
L-AC-APX-LIC= | Cisco AnyConnect Apex Term License, Total Authorized Users | 2000 |
L-AC-APX-5Y-S5 | Cisco AnyConnect Apex License, 5YR, 1000-2499 Users | 2000 |
SFP-10G-SR-S= | 10GBASE-SR SFP Module, Enterprise-Class | 4 |
Request Information
Time plan
Project Time Plan | | | | | | |
| | | | | | |
Main Task | Sub Task | Activ / Tasks | Owner Task | Estimated Time�(Day) | Start Date�(Date) | End Date�(Date) |
1 | | Task : Install licenses | | | | |
| 1.1 | Install APEX license | DCS | | | |
2 | | Task : Prepare information | | | | |
| 2.1 | Kick off Meeting | DCS | | | |
| 2.2 | Provide existing configuration | BAY | | | |
| 2.3 | Prepare IOS and Anyconnect Image | DCS | | | |
3 | | Task : Install Cisco Secure Firewall | | | | |
| 3.1 | Upgrade IOS | DCS | | | |
| 3.2 | Configuration Cisco Secure FIrewall | DCS | | | |
| 3.3 | Test Authentication | DCS | | | |
| 3.4 | Test Authentication | DCS | | | |
4 | | Task : Migrate Devices at RAMA3 | | | | |
| 4.1 | Delivery Firewall to RAMA3 site | DCS | | | |
| 4.2 | Install Rail rack kit | DCS | | | |
| 4.3 | Install Firewall | DCS | | | |
| 4.4 | Test Authentication | DCS | | | |
5 | | Task : Migrate Devices at Amata | | | | |
| 5.1 | Delivery Firewall to RAMA3 site | DCS | | | |
| 5.2 | Install Rail rack kit | DCS | | | |
| 5.3 | Install Firewall | DCS | | | |
| 5.4 | Test Authentication | DCS | | | |
6 | | Task : Feature Radius VPN on ASA | | | | |
| 6.1 | Configure policy on Cisco ISE | DCS | | | |
| 6.2 | Change VPN pilot profile and redirect authenticated to Cisco ISE | DCS | | | |
| 6.3 | Test Authenticated with pilot profile | DCS | | | |
| 6.4 | Migrate all vpn profile to be authenticated with CIsco ISE | DCS | | | |
7 | | Task : Test Additional feature | | | | |
| 7.1 | - | DCS | | | |
| 7.2 | - | DCS | | | |
8 | | Task : UAT | | | | |
| 8.1 | UAT Authention with RAMA3 devices | DCS | | | |
| 8.2 | UAT Authention with Amata devices | DCS | | | |
9 | | On the job training | | | | |
| 9.1 | On the job training | DCS | | | |
shorturl.at/cdo27
Q & A