Switching and routing

We design and build the switching and routing infrastructure of your local network, with redundancy.

What we build

How the local network is built

The design settles how the devices connect to each other, which traffic goes into which VLAN, and where a backup path is needed.

  1. Topology and VLAN structure

    We plan where the switches go and how they connect to each other. VLANs are assigned by group, building, and function, and critical systems and web servers get VLANs of their own.

  2. Routing between VLANs

    If the firewall handles routing for the VLANs and Wi-Fi networks, traffic between segments can be inspected with antivirus scanning, IPS, and file filtering. That is how we built the network in our reference projects.

  3. Redundancy

    Wherever losing a device or link would take part of the network down, we design in a backup link or a backup device. If something fails, traffic switches over to the backup path automatically.

  4. Central management

    If the firewall manages the switches, they do not have to be configured on site. Operations then take less work, and there is less room for mistakes.

Deliverables

What you get at the end

items handed over

  • Network topology design and VLAN structure
  • Equipment supply, configuration, and installation
  • Redundancy settings
  • Documentation

References

Where we replaced the switches

We rebuilt the network at both institutions. The case studies cover the details.

Case studies

Hungarian Dance University
FortiSwitchThe outdated active devices in use before went down regularly, and traffic kept stalling. We replaced every switch with a high-performance FortiSwitch. Since then the network has been stable, and the outages and slowdowns have stopped.
Municipality of Gödöllő
FortiSwitchWe replaced all the switches with FortiSwitch, and the phone system got its own VLAN with high priority and guaranteed bandwidth. Network bandwidth grew by an order of magnitude, and response times for reaching the servers and the internet went down.

Frequently asked questions

The questions we hear most

If every group is in its own VLAN, is that enough protection?

Not on its own. A VLAN is only logical separation: if traffic is routed between segments without filtering, they can reach each other freely. That is why the boundary between VLANs needs a decision point that allows or blocks traffic according to rules. For the first steps, see our article Segmenting the internal network: where to start.

Will we find out in time if a switch fails?

In our reference projects, yes. At the Hungarian Dance University, the Security Fabric shows in real time when a switch or access point loses its connection or overheats, or when a physical port fails. In Gödöllő it also shows the physical topology of the connected devices, which cut the time spent on operations and troubleshooting to a fraction. We covered traffic monitoring in our article Network monitoring: what it sees that the endpoint cannot.

Which vendors' switches do you work with?

Our designs are vendor-independent: we choose the solution to fit the environment and the existing equipment. In our reference projects we installed Fortinet switches (FortiSwitch), and we also work with Arista equipment. The switches have to work together with the firewall and the wireless network, so we take that into account when choosing.

Contact

Ready to secure your critical systems?

Our experts will assess where your security stands and build a roadmap that fits your organization.

ARLITECH's office in Gödöllő

Visit us

You are welcome to visit our Gödöllő office in person.

Address
Centrum Office Building, 2100 Gödöllő, Dózsa György út 13, 3rd floor, office 309
Office hours
Mon–Fri, 9 a.m. to 5 p.m.
Get directions (opens in a new tab)