RobertRecalo

Networking, infrastructure and systems engineering. I design, deploy and troubleshoot the switching, routing, firewall and VPN layers that keep small and mid-market businesses online.

Email Robert Read the blog

Capturing from Gi1/0/48 (SPAN of Gi1/0/1–24)eth0 · 1000BASE-T

▸Apply a display filter … <Ctrl-/>

No.TimeSourceDestinationProtocolLengthInfo

50.353954140.82.112.410.20.10.42TCP66443 → 61733 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1440 SACK_PERM WS=1024
60.35427610.20.10.42140.82.112.4TCP5461733 → 443 [ACK] Seq=1 Ack=1 Win=131328 Len=0
70.35456710.20.10.42140.82.112.4TLSv1.3580Client Hello (SNI=github.com)
80.365023140.82.112.410.20.10.42TCP54443 → 61733 [ACK] Seq=1 Ack=527 Win=66560 Len=0
90.366741140.82.112.410.20.10.42TLSv1.31440Server Hello, Change Cipher Spec, Application Data
100.367002140.82.112.410.20.10.42TLSv1.31168Application Data, Application Data, Application Data
110.36785210.20.10.42140.82.112.4TCP5461733 → 443 [ACK] Seq=527 Ack=2501 Win=131328 Len=0
120.36891810.20.10.42140.82.112.4TLSv1.3118Change Cipher Spec, Application Data
130.36904010.20.10.42140.82.112.4TLSv1.3829Application Data
140.400316140.82.112.410.20.10.42TLSv1.3490Application Data, Application Data
151.053917Cisco_3c:5e:81Spanning-tree-(for-bridges)_00STP60RST. Root = 24586/10/00:1a:a1:3c:5e:00 Cost = 4 Port = 0x8018
161.27271010.20.99.2510.20.99.2SSHv290Client: Encrypted packet (len=36)
171.27682710.20.99.210.20.99.25SSHv2106Server: Encrypted packet (len=52)
181.31932410.20.99.2510.20.99.2TCP5452814 → 22 [ACK] Seq=37 Ack=53 Win=1026 Len=0
191.908736Dell_8a:41:c7BroadcastARP60Who has 10.20.10.1? Tell 10.20.10.42
201.909094Cisco_3c:5e:02Dell_8a:41:c7ARP6010.20.10.1 is at 00:1a:a1:3c:5e:02
212.07203610.20.10.42142.251.40.163QUIC1292Initial, DCID=f48e4638095f4aa4, PKN: 1, CRYPTO, PADDING
222.084582142.251.40.16310.20.10.42QUIC1292Initial, SCID=39e0653c7fb02938, PKN: 1, ACK, CRYPTO, Handshake, SCID=39e0653c7fb02938
232.085217142.251.40.16310.20.10.42QUIC1292Handshake, SCID=39e0653c7fb02938
242.08533710.20.10.42142.251.40.163QUIC1292Initial, DCID=39e0653c7fb02938, PKN: 2, ACK, Handshake, DCID=39e0653c7fb02938
252.08619910.20.10.42142.251.40.163QUIC242Protected Payload (KP0), DCID=39e0653c7fb02938
262.105380142.251.40.16310.20.10.42QUIC1292Protected Payload (KP0)
272.105679142.251.40.16310.20.10.42QUIC1292Protected Payload (KP0)
282.105907142.251.40.16310.20.10.42QUIC1292Protected Payload (KP0)
292.106624142.251.40.16310.20.10.42QUIC1292Protected Payload (KP0)
302.107249142.251.40.16310.20.10.42QUIC1292Protected Payload (KP0)
312.107525142.251.40.16310.20.10.42QUIC1233Protected Payload (KP0)
322.10914010.20.10.42142.251.40.163QUIC81Protected Payload (KP0), DCID=39e0653c7fb02938
332.41687510.20.99.210.20.99.10Syslog157LOCAL7.INFO: 2344: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: netadmin] [Source: 10.20.99.25] [localport: 22]
342.49682010.20.99.1010.20.99.2SNMP103get-request 1.3.6.1.2.1.2.2.1.10.20 1.3.6.1.2.1.2.2.1.16.20
352.49995210.20.99.210.20.99.10SNMP111get-response 1.3.6.1.2.1.2.2.1.10.20 1.3.6.1.2.1.2.2.1.16.20
363.28828910.20.10.4210.20.10.5DNS80Standard query 0xdfef A dashboard.meraki.com
373.30146310.20.10.510.20.10.42DNS136Standard query response 0xdfef A dashboard.meraki.com CNAME dashboard.meraki.com.edgekey.net A 209.206.48.17
383.30157510.20.10.42209.206.48.17TCP6654212 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
393.319902209.206.48.1710.20.10.42TCP66443 → 54212 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1440 SACK_PERM WS=1024
403.32005410.20.10.42209.206.48.17TCP5454212 → 443 [ACK] Seq=1 Ack=1 Win=132352 Len=0
413.32092110.20.10.42209.206.48.17TLSv1.3728Client Hello (SNI=dashboard.meraki.com)
423.348345209.206.48.1710.20.10.42TCP54443 → 54212 [ACK] Seq=1 Ack=675 Win=66560 Len=0
433.349416209.206.48.1710.20.10.42TLSv1.31440Server Hello, Change Cipher Spec, Application Data
443.349508209.206.48.1710.20.10.42TLSv1.31159Application Data, Application Data, Application Data
453.35034210.20.10.42209.206.48.17TCP5454212 → 443 [ACK] Seq=675 Ack=2492 Win=132352 Len=0
463.35520310.20.10.42209.206.48.17TLSv1.3118Change Cipher Spec, Application Data
473.35525410.20.10.42209.206.48.17TLSv1.3707Application Data
483.367091209.206.48.1710.20.10.42TLSv1.3570Application Data, Application Data

› Frame 41: 728 bytes on wire (5824 bits), 728 bytes captured (5824 bits) on interface eth0, id 0
› Ethernet II, Src: Dell_8a:41:c7 (a4:bb:6d:8a:41:c7), Dst: Cisco_3c:5e:02 (00:1a:a1:3c:5e:02)
› Internet Protocol Version 4, Src: 10.20.10.42, Dst: 209.206.48.17
› Transmission Control Protocol, Src Port: 54212, Dst Port: 443, Seq: 1, Ack: 1, Len: 674
› Transport Layer Security

eth0: <live capture in progress>Packets: 48 · Displayed: 48 (100.0%)

Inside the network

I engineer the switching,routing and security layersthat carry a business fromthe LAN to the cloud.

HOP 01 // WORKSTATION // REQUEST LEAVES VLAN 10

One request from a workstation out to the internet, then the response back down.

01Workstation, VLAN 10 · DHCP
02Access layer, STP/RSTP · LACP uplink
03Aggregation layer, Inter-VLAN routing · OSPF
04Firewall, Zone policy · NAT/PAT
05Internet, Dual WAN · BGP upstream
06Firewall, Stateful return · NAT/PAT
07Aggregation layer, OSPF · route to VLAN 10
08Access layer, Forward to edge port
09Workstation, Response delivered

Platform Experience

// Experience

Network Engineer

Athens Micro2024 – present

End-to-end network integration and consulting for small and mid-market businesses, from the switch port up to Active Directory.

Troubleshoot with: WiresharkPacket capturesFirewall logsAI-assisted log analysis
Firewalls on: SonicWallCisco MerakiUniFi

L2/L3Layer 2 / 3
01
- VLANs
- Subnetting
- ARP
- DHCP
- DNS
- OSPF
- BGP
- LACP
- LLDP
- STP/RSTP
SECNetwork Access & Security
02
- IPsec VPN
- SSL VPN
- NACLs
- Zone-based security
- NAT/PAT
- RBAC
- ZTNA
SYSSystems & IAM
03
- Active Directory
- Microsoft Entra ID
- GPO configuration
- LDAPS
- Hyper-V
- Linux
- Windows Server 2022/2025
OPSAutomation & Troubleshooting
04
- Zero-Touch
- JSON
- REST APIs
- Power Automate
- IaC
- Wireshark
- Packet captures
VNDVendors & Platforms
05
- Cisco
- Cisco Meraki
- HPE
- HPE Aruba
- UniFi
- SonicWall
- Azure

Real-World impact

Real deployments across small and mid-market networks, counted from my own work.

rr@netops: ~zsh · 96×28

rr@netops:~$ nslookup robertrecalo.com

$250K+
2025 annual billing: 12
Greenfield Branch deployments: 120+
Routing and switching deployments

[03] // Knowledge

Credentials you might like

01
Cisco Certified Network Associate (CCNA)
02
CompTIA A+
03
CompTIA Network+
04
CompTIA Security+
05
Microsoft Azure Fundamentals (AZ-900)

// Formal schooling

Completed
Georgia Gwinnett College · GPA 3.53
B.S. Information Technology, Software Development
In progress // est. 2028
Kennesaw State University · est. 2028
M.S. Electrical & Computer Engineering

Need a Network Engineer? Let's chat.

Email Robert LinkedIn

contact@robertrecalo.com

RobertRecalo

I engineer the switching,routing and security layersthat carry a business fromthe LAN to the cloud.

Platform Experience

Network Engineer

L2/L3Layer 2 / 3

SECNetwork Access & Security

SYSSystems & IAM

OPSAutomation & Troubleshooting

VNDVendors & Platforms

Real deployments across small and mid-market networks, counted from my own work.

Credentials you might like

Cisco Certified Network Associate (CCNA)

CompTIA A+

CompTIA Network+

CompTIA Security+

Microsoft Azure Fundamentals (AZ-900)

B.S. Information Technology, Software Development

M.S. Electrical & Computer Engineering