Switching & routing
Site networks built to a standard, not one at a time.
Most industrial site networks grow one device at a time until nobody is sure what's plugged into what. We design the switching and routing for your sites, configure it to a standard, and hand you the documentation.
Sound familiar?
What we usually find
- One flat network: SCADA, cameras, office PCs and crew devices all on the same subnet.
- Unmanaged switches in panels and trailers that nobody can see or log into.
- No current network diagram or IP plan, so every change is a site visit.
- Configs that live only on the device, with no backup if it fails.
- Shared admin passwords and remote access that never gets turned off.
What we do
Scope of work
- Site LAN design: managed switches, VLANs and an IP addressing plan.
- IT/OT segmentation so control and telemetry traffic stays isolated.
- Routing and firewall design between site, HQ and the internet.
- Site-to-site and remote access VPN with named accounts.
- Configuration standards and templates you can reuse on every site.
- Staging, configuration and on-site commissioning.
Security built in
Designed secure, assessed while we work
Every job is led by a CISSP. These are standard on every switching & routing project, not extras.
- Hardened configs: unused ports and services off, encrypted management only.
- Management on its own network, never reachable from crew or guest Wi-Fi.
- Default-deny firewall rules, each with a documented reason.
- Named admin accounts and MFA where the platform supports it.
- Vendor remote access through VPN, time-limited and logged.
What you get
Deliverables you keep
- Network diagram and IP plan for each site.
- Bill of materials, vendor-neutral, with options where they matter.
- Configuration backups and templates.
- Admin credentials handed over to you, not kept by us.
- Test results from commissioning.
Checked before we sign off
- Every VLAN and firewall rule tested from both sides
- Failover and power-cycle recovery confirmed
- Remote management reachable from HQ
- Default passwords removed and configs backed up
See it in practiceSeparating control traffic at a gas facility