Networking
From the Wi-Fi to the fiber: Cisco, Arista, Juniper or HPE Aruba, supplied and connected.
Request a quoteNetworking
From the Wi-Fi to the fiber: Cisco, Arista, Juniper or HPE Aruba, supplied and connected.
Request a quoteWe carry all four. None is our default.
A switch refresh at one branch or a whole campus, or a new site to open: we design, supply, install, test and support it. Cisco, Arista, Juniper or HPE Aruba, the line that meets your written requirement, with ThousandEyes to watch the paths. Whoever recommends it delivers it.
From the ceiling to the core.
Wi-Fi 7 access points, 48-port access switches, two paths to both core switches, and encrypted links between data centers.³
Four radios at once.
Each access point runs four radios on 2.4, 5 and 6 GHz at the same time.
No 1G ports.
A 1G port holds a Wi-Fi 7 access point far below its speed, so 1G access was rejected.
Fast access ports.
Every access switch carries 48 ports at up to 10G.
Two paths to the core.
Each stack of access switches connects at 100G to both core switches.
Two transports.
Each branch is designed with two separate lines.
No single-line design.
An MPLS-only branch has one line, which fails the requirement, so it was rejected.
Encrypted on the fiber.
AES-256-GCM encryption at wire speed on the optical layer, plus quantum-safe encryption.
Two systems per site.
One system per data center was rejected: one fault would take the whole link down.
One unreviewed change. Twelve hours. 92 million calls blocked.⁷
What we write.
AT&T, February 22, 2024: one misconfigured element, placed without the peer review its own procedures required.⁷ We write into your requirement: no change goes live until a second engineer’s review is on record.
On each option.
Whether its management tools can refuse a change with no recorded second approval.
Your first step.
One branch or a whole campus. Send the sites and your date. You get a reply the same day, then a quote.
We write into your requirement:
After every change, the services that matter most are tested end to end, site by site, and a named person signs that they work.
What we check.
Whether monitoring can see one site or region failing, not only a national total.
Uplink pulled.⁵
An access uplink is pulled under load. Pass: traffic moves in under one second, no session lost.
Fiber cut.⁴
One data-center wavelength is cut. Pass: traffic continues on the second one, at half capacity, switched within 50 ms.
Controller failover.⁵
The wireless controller fails with 50 clients on. Pass: no client disconnects; failover in 3 seconds or less.
Branch line cut.⁵
A branch line is cut during a voice call. Pass: the call continues.
A network built to survive a procurement review and an audit.
Led by Mark Winston
Mark Winston, Principal Network Architect · CCIE · CISSP · CCSP · CCISO · CISM · Adopting Zero Trust (Forrester) · credential IDs on request
Led by Mark Winston
Mark Winston, Principal Network Architect · CCIE · CISSP · CCSP · CCISO · CISM · Adopting Zero Trust (Forrester) · credential IDs on request
Networking Blueprint
No single point of failure between data centers.
Networking Blueprint
No single point of failure between data centers.
Design studies
Our network design studies
Questions about this design? You get a reply the same day.
Send your sites and your date. You get a reply the same day, then a quote.
Questions about this design? You get a reply the same day.
