Skip to content
View Aj-Networks's full-sized avatar
💭
Offline
💭
Offline
3 followers · 20 following

Block or report Aj-Networks

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Aj-Networks/README.md

🐺 Mr. Aj

SysAdmin · Network Engineer · 7+ yrs (healthcare · education · MSP)

Networking · Security · Microsoft Endpoint Management

Reddit Discord X Email

Security+ CCNA visitors

🎯 What I'm doing

  • 🏠 Running a privacy-first pfSense homelab · 6 VLANs · dual Mullvad WireGuard failover · verified zero leaks
  • 🏢 Building an SCCM + WSUS Hyper-V lab for a fictional 120-user SMB (Meridian Freight Co.)
  • 🧪 Prepping CCNA 200-301 on real Cisco Catalyst 3560 + 1941 ISR · target Aug 2026
  • 🛡 Tuning Suricata IDS · auditing firewall rules · kill-switch design
  • 🐳 Self-hosting on a Mac Mini M4 (Docker, 24/7)
  • 📝 Documenting every config in markdown for the next person

🛠 Stack

🌐 Networking pfSense Cisco UniFi WireGuard Tailscale Suricata

🪟 Microsoft WindowsServer SCCM Hyper-V AD Intune PowerShell

💻 Web + Cloud HTML CSS JS GSAP Three.js Cloudflare

🤖 Automation Python Bash Docker Claude Splunk

🚀 Public Builds

🛡 Router-on-a-Stick

  • 🔥 Firewall: pfSense 2.8.1 on Protectli FW6E (i7, 16 GB)
  • 🧱 Segmentation: 6 VLANs · 802.1Q trunk · default-deny inter-VLAN
  • 🌐 VPN: dual Mullvad WireGuard (Sweden + Frankfurt) auto-failover
  • ☠️ Kill switch: 7 independent layers · zero WAN egress NAT
  • 🟢 Verified zero leaks: IP / DNS / WebRTC (ipleak + Mullvad Check)
  • 🚨 IDS / DNS: Suricata across WAN + 3 VLANs · pfBlockerNG-devel
  • 🛰 Remote: Tailscale subnet routing · 🐳 Mac Mini M4 Docker host

🏢 SCCM Lab: Meridian Freight Co.

  • 🖥 Platform: Hyper-V on Windows 11 Pro
  • 🪟 Stack: Windows Server 2022 · SQL Server 2022 · AD DS + DNS
  • 📦 Endpoint: SCCM (current branch) + WSUS as the Software Update Point
  • 🏭 Scenario: 120-user SMB across two sites (Tacoma HQ + Kent warehouse)
  • ⚙️ Automation: PowerShell, idempotent and parameterized
  • 📚 Built to teach: rebuildable end-to-end, phase-by-phase docs

🧪 CCNA Home Lab in progress

  • 🖥 Gear: Cisco Catalyst 3560 PoE-8 (WS-C3560-8PC) + Cisco 1941 ISR
  • 🎯 Target: CCNA 200-301, Aug 2026
  • 📚 Coverage: VLANs, trunking, inter-VLAN routing, NAT, ACLs, SSH, switch hardening
  • 🧰 Tools: Packet Tracer, GNS3, real Cisco IOS

📜 Certs and progress

  • ✅ CompTIA Security+ · May 2026
  • 🎯 CCNA 200-301 · target Aug 2026
  • 🛠 7+ years in production (Tier 1-3 MSP · 120+ SMB clients · 99.9% uptime)

built in the garage · documented for the next person

🌐 ajayangdembe.com

Pinned Loading

  1. CCNA_Home_Lab CCNA_Home_Lab Public

    Hands-on CCNA 200-301 lab on real Cisco Catalyst 3560 and 1941 ISR: VLANs, trunking, NAT, ACLs, SSH

  2. Homelab_Router-on-a-Stick Homelab_Router-on-a-Stick Public

    Privacy-first pfSense homelab: 6 VLANs, dual Mullvad WireGuard failover, 7-layer kill switch, verified zero leaks

  3. SCCM_WSUS_Project SCCM_WSUS_Project Public

    Hyper-V home lab simulating SCCM and WSUS rollout for a 120-user, two-site SMB on Windows Server 2022

  4. anthropics/claude-code anthropics/claude-code Public

    Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflo…

    Python 135k 21.7k