Design and segmentation
A documented topology and VLAN separation by function: servers, workstations, guests, cameras, management. The third-floor printer not seeing the database is a design decision, not an accident.
Networking
A network somebody
A network somebody
can explain
Design, implementation and support of corporate networks on any vendor. VLAN segmentation, site-to-site and remote-access VPN, and firewalls with rules someone can justify one by one.
What it covers
From topology to daily support
Perimeter
FortiGate, OPNsense or MikroTik firewalls with least-privilege rules, content filtering and geo-blocking. Every rule is documented with who asked for it and why.
VPN
Site-to-site tunnels and remote access for your team, with two-factor authentication. Tested under real load and monitored, so you hear about an outage before your users do.
Redundancy
Backup links with automatic failover, proven by actually cutting the primary link in an agreed window. A backup path that was never tested is an assumption.
Corporate Wi-Fi
Coverage survey, access point placement, separate staff and guest networks, and a captive portal where it is needed. Roaming that does not drop the call as you walk.
Support and changes
Network incident response with committed times and a recorded change process. Configurations are backed up automatically: if a device dies, it gets restored, not rebuilt from memory.
When it makes sense
Signs it is worth a look
- The network is one big flat segment where everything sees everything
- Nobody knows what half the firewall rules do
- The VPN drops and the diagnosis is to reboot and hope
- You have a single internet link and no plan if it fails
- Network device configurations are not backed up anywhere
Network status
sample12Active VPNs
28VLANs
0Outages today
Failover testedsecondary link · 2 seconds
Firewall rule appliedperimeter · country block
VPN stablesite-to-site · 14 ms latency
Saturated portSW-CORE gi1/0/24 · 87% sustained
Sample screen showing what day-to-day operation looks like. Not client data.
Frequently asked
About networking
Do you work with the vendor we already have?
Yes. We work on FortiGate, OPNsense, MikroTik, Cisco, Ubiquiti and whatever else is in the rack. Changing vendor is a cost and lifecycle decision, not something we push for its own sake.
How much downtime does a resegmentation cause?
Planned properly, very little. New VLANs are built in parallel and devices move across in batches, usually outside business hours. Real downtime is typically minutes per group.
Do you take over firewall administration?
Only if you want us to. We can run it, or configure and document it for your team with us as backup. Either way the administrator credentials are yours.
Let us start by seeing the network as it is
The network assessment returns the real diagram, the rules that are no longer needed, the single points of failure, and what can be fixed without buying anything.