Crafting a Wired and Wireless Solution for a New Modern Office

The client is a co-working enterprise that built a new office space of nearly 70,000 square meters in the local area, integrating three core functions - comprehensive office operations, sales and service operations, and product research and development. Due to the urgency of moving to the new site, the company's CTO prioritized the rapid deployment of a high-performance, highly available, and easily manageable campus network. This infrastructure is essential to deliver a seamless, reliable, and efficient workplace experience for employees while supporting the company's development and innovation goals.

The new campus consists of two office areas, Area A and Area B, which form an enclosed low-density office space. Area A is a comprehensive office and sales operation center, which will carry functions such as headquarters office, customer service, and visitor reception to improve service levels and response efficiency. Area B is positioned as a core base for product research and development and innovation. In the future, it will gather more advanced equipment, product technology, and high-end talents to achieve the coordinated development of technology research and talent training.

FS conducts detailed research on the campus network, breaks down various office and operation and maintenance application scenarios, and outputs office network solutions and detailed technical specifications for each application scenario.

After understanding and analyzing the company's old network situation, deploying this network architecture is a daunting task.

The existing infrastructure in the previous office area lacks redundancy, resulting in complete network outages when device failures occur. This lack of failover mechanisms directly affects business continuity and disrupts employee productivity during downtime.

Additionally, frequent issues such as websites failing to load or experiencing extended loading times are common, further hindering productivity and reducing overall workflow efficiency.

Network congestion also becomes a significant challenge, particularly between 10:00 and 11:00 a.m., when a large number of employees access the network simultaneously, creating peak traffic hours. This surge in traffic leads to sharp increases in peak bandwidth demand, causing slowdowns and connectivity issues that exacerbate operational disruptions.

Moreover, to comply with ISO 27001 certification standards and address employee data security requirements, the network must support authentication-based access. This ensures traceability of all network connections, providing an audit trail that strengthens overall security and compliance.

The company also hosts external enterprises and visitors for meetings or tours, necessitating a dedicated visitor network. It is crucial that this network is completely isolated from the employee network to protect sensitive corporate data and maintain security across the entire infrastructure.

Before designing the network, FS analyzed the customer's requirements for Area A to ensure the network meets various business needs. FS conducted an on-site survey, assessed the physical environment, and created a detailed topographic map. Based on this, FS selected suitable equipment and developed a VLAN and IP address plan to optimize traffic management. Area B is under construction and will have network deployment after completion. The following example refers to Area A.

For the wired network, FS integrates core, aggregation, and access switches into a centralized management system. The S5860-48SC aggregation switch, deployed in VXLAN mode, provides high performance, scalability, and efficient traffic management for large networks. VXLAN enhances flexibility and supports multi-tenant environments. To ensure security, servers authenticate both wired and wireless devices, with 802.1X authentication and MAC/VLAN binding for wired PCs. The S3910 Series 24-port and 48-port switches are used to connect devices such as computers and printers, providing reliable Gigabit connections without PoE to optimize performance and cost.

For wireless networks, FS uses wireless controllers and thin APs for local data forwarding. Wireless services are divided into employee and guest services, each with its own VLAN for efficient traffic management. The S3410-48TS-P is selected for the access layer, providing high port density and PoE support for devices like access points and security cameras. Its PoE functionality simplifies installation, while Gigabit speeds ensure reliable data transmission. The AP-N515 is strategically deployed to ensure full Wi-Fi coverage, while dome and turret network cameras enhance security.

Finally, FS adopted a strong security configuration to protect the network from potential threats. This includes implementing measures such as VLAN isolation, access control policies, and encryption protocols. These measures ensure that the Area A network is not only efficient and reliable, but also resilient to changing network risks.

Through frequent and detailed consultations with the company's CTO, FS developed a tailored project plan, including on-site assessments, floor planning, and detailed network design. In June of this year, FS successfully deployed both wired and wireless networks across the new campus, ensuring seamless connectivity and high performance for thousands of users.

After the company moved to the new campus, FS enhanced network security by implementing authentication protocols for all employees. Network congestion during peak hours was alleviated, and employees could connect seamlessly no matter which floor and area they were in, improving business work efficiency. The CTO expressed high satisfaction with FS's campus network solution and indicated a commitment to future collaboration once the new building is fully operational.