cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
239
Views
0
Helpful
3
Replies

Help Designing a Scalable Network for a Tech HQ

musa-afofficial
Level 1
Level 1

Hi guys,I’m working on a scenario where a tech company has multiple departments across different floors, and I need to design a network topology that keeps each department on a separate network, supports secure internal communication, provides dynamic IPs, and includes a secure guest network. I'm confused about how to properly separate the networks (e.g., VLANs? subnets?) while still allowing secure internal communication. Any guidance, diagrams, or best practices would be appreciated!

ByteLink is an expanding tech firm that has recently relocated to a newly built headquarters. The company is seeking a reliable and secure network infrastructure to ensure smooth internal communication and strong data protection.

The new headquarters includes:

  • Level 1: Management and Administrative offices

  • Level 2: Product Engineering division

  • Level 3: IT Operations and Data Center

  • Lobby Zone: Designated area for guest access and client meetings

Requirements:

Design a network layout with the essential components to meet the following needs:

  • Each team or department should operate on its own isolated network.

  • Staff devices must receive IP addresses automatically.

  • All internal systems should communicate securely within the organization.

  • The internal network must have restricted and managed internet access.

  • There should be a separate and secure Wi-Fi network for visitors, fully isolated from internal systems.

3 Replies 3

Leo Laohoo
Hall of Fame
Hall of Fame

@musa-afofficial wrote:
  • Each team or department should operate on its own isolated network.

  • Staff devices must receive IP addresses automatically.

  • All internal systems should communicate securely within the organization.

  • The internal network must have restricted and managed internet access.

  • There should be a separate and secure Wi-Fi network for visitors, fully isolated from internal systems.


Unless I am not mistaken, this reads like school work.  

What is the budget of this "Tech HQ"?

jack121
Community Member

Hi @musa-afofficial,

For your setup, the best approach is to use VLANs to separate each department:

  • VLAN 10: Management

  • VLAN 20: Product Engineering

  • VLAN 30: IT Operations

  • VLAN 99: Guest Network

Each VLAN gets its own subnet (e.g., 192.168.10.0/24) and DHCP can assign IPs automatically per VLAN. Use inter-VLAN routing on a Layer 3 switch or router to allow secure internal communication, and apply firewall rules or ACLs to restrict traffic as needed.

For guests, set up a separate SSID on VLAN 99, fully isolated from internal systems using firewall rules.

This setup is scalable, secure, and meets all your requirements.

Let me know if you need a simple diagram.

Best Regards,

Jack

Co- https://mytecharm.org/

would be very helpful if you could help out with the diagram