Networks & infrastructure

Enterprise networks Cisco & FortiGate

A segmented, documented and fast network, from the patch panel to the firewall.

threat blockedInternetRemote siteVPN IPsecRemote workerVPN SSLFortiGateFirewall · NAT · VPNCisco Catalyst802.1Q · inter-VLANVLAN 10AdminVLAN 20UsersVLAN 30ServersVLAN 40VoIP · Guests

SMB SOFT designs, installs and manages reliable enterprise networks: VLAN segmentation, inter-VLAN routing, Cisco switching and routing, Fortinet FortiGate firewalls, Wi-Fi, site-to-site VPN between your branches and remote access VPN (RA VPN) for mobile staff. We work on brand-new infrastructures as well as existing networks that need a clean-up.

What we do

VLAN segmentation

IP addressing plan, 802.1Q VLANs, trunks and inter-VLAN routing to separate admin, users, servers, VoIP and guests.

Cisco switches & routers

Cisco IOS configuration, access and trunk ports, access control lists (ACLs), configuration backups.

FortiGate firewalls

Flow-based filtering policies, NAT, service publishing and logging.

Site-to-site VPN

Permanent encrypted IPsec links between your branches, plants or datacentres, with routing between sites.

Remote access VPN (RA VPN)

Secure access to the company network for teleworkers and mobile staff (IPsec or SSL), with per-group rights.

Enterprise Wi-Fi

One wireless network per use (staff, guests), bound to its VLAN and isolated from the rest of the system.

Network services

DHCP, DNS, time synchronisation and traffic prioritisation for a stable day-to-day network.

Documentation & follow-up

Up-to-date network diagram, addressing plan and equipment inventory, maintenance visits.

Technologies

  • Cisco IOS
  • Cisco Catalyst
  • Fortinet FortiGate
  • FortiOS
  • 802.1Q VLAN
  • ACL
  • NAT
  • Site-to-site VPN
  • RA VPN
  • IPsec VPN
  • SSL VPN
  • DHCP
  • DNS
  • Wi-Fi

Frequently asked questions

Why segment a network into VLANs?

VLANs isolate uses (servers, workstations, telephony, guests) on the same physical infrastructure. A compromised machine no longer sees the whole network, traffic is better controlled and performance is more stable.

Do you work on existing networks?

Yes. We start with an inventory (equipment, cabling, configurations, flows), then propose a gradual migration plan to limit downtime.

What is the difference between site-to-site and remote access VPN?

A site-to-site VPN permanently links two networks, for example the head office and a branch or plant: users have nothing to start. A remote access VPN (RA VPN, IPsec or SSL) lets a teleworking or travelling employee connect to the company network from their device over an encrypted connection.

A software, AI, network or security project?

Let’s talk: no-obligation first discussion, answer within 24 h.