15/02/2026
small office network setup. Here’s a simple breakdown of how it works:
1. Internet Connection: The office gets its internet from the outside world (the globe with “www”).
2. Firewall/Router: The internet goes into a firewall/router (red box with a shield). This device protects the network from bad traffic and directs data to the right places. It also has rules (shown in the orange box) like:
- Letting staff access the internet.
- Blocking guests from reaching internal resources.
- Enabling VPN and IPS (security features).
3. Core Switch (Layer 3): The firewall/router sends traffic to a central Layer 3 switch (gray box). This switch routes data between different parts of the network.
4. VLANs (Virtual LANs): The network is split into separate VLANs, which are like logical groups that keep traffic isolated:
- VLAN 10 – Management: For managing network devices.
- VLAN 20 – Staff: For office PCs and Wi‑Fi for employees.
- VLAN 30 – Servers: For the file server, domain controller, and backup server.
- VLAN 40 – Guest Wi‑Fi: For visitors’ internet access (kept separate from staff).
- VLAN 50 – CCTV/IoT: For security cameras and IoT devices.
5. Access Switches: Two access switches connect to the core switch:
- One serves VLAN 20 (staff PCs and office Wi‑Fi).
- The other serves VLAN 40 (guest Wi‑Fi).
6. Server Switch: A third switch handles VLAN 30, linking the file server, domain controller, and backup server.
7. Devices:
- Office PCs and a Wi‑Fi access point are on the staff VLAN.
- Guest devices use a separate Wi‑Fi on the guest VLAN.
- Servers (file, domain, backup) are on the server VLAN.
- CCTV cameras are on VLAN 50.
In short, the setup separates staff, guests, servers, and devices into VLANs for security and management, uses a firewall/router for protection, and routes traffic through a core switch to the appropriate access switches and servers.
