Technical Project: Full Office Network Setup with Department Segmentation

Project Overview

Scotia Logic – IT & Development designed and deployed a complete network infrastructure for a small office. The goal was to provide secure, reliable connectivity for all departments while enabling department-specific segmentation and shared resources across the organization.

Network Architecture

Topology:
ISP → Firewall / Router → Managed Switches → Access Points → Department Workstations

Departments:

• Sales
• Human Resources (HR)
• Administration
• Accounts

Each department was segmented using VLANs to ensure security and traffic isolation while maintaining the ability to share files between departments through controlled inter-VLAN routing.

Technologies & Tools

• Firewall / Router (with VLAN & inter-VLAN routing capabilities)
• Managed Layer 2 / Layer 3 Switches
• TP-Link Access Points for Wi-Fi coverage
• Windows Server / NAS for shared folders and file access
• Omada / Cloud Controller for device management and monitoring
• VLANs, ACLs, and Port-Level Security

Technical Steps & Implementation

1️⃣ Network Planning

• Map each department’s devices and IP addressing scheme.
• Assign VLAN IDs for each department:
  • VLAN 10 → Sales
  • VLAN 20 → HR
  • VLAN 30 → Admin
  • VLAN 40 → Accounts
• Define inter-VLAN routing rules for controlled access to shared folders.

2️⃣ Device Deployment

• Connect ISP to the main firewall/router.
• Deploy managed switches to each department.
• Connect wired workstations and Wi-Fi access points.
• Ensure switch ports are configured for access or trunk mode based on device type.

3️⃣ VLAN Configuration

• Configure VLANs on switches and router/firewall:

VLAN 10 – Sales

VLAN 20 – HR

VLAN 30 – Admin

VLAN 40 – Accounts

• Assign each switch port to the appropriate VLAN.
• Configure trunk ports between switches and router for inter-VLAN routing.

4️⃣ Interconnect & File Sharing

• Deploy a Windows Server / NAS for central file storage.
• Configure shared folders with access control lists (ACLs) per department.
• Allow controlled cross-department access for necessary folders (e.g., Admin ↔ Accounts).
• Map network drives on client workstations.

5️⃣ Wi-Fi Setup

• Deploy wireless access points in office areas.
• Assign SSID per department or single SSID with VLAN tagging.
• Configure security (WPA3 / strong passwords) and guest isolation.
• Monitor signal strength and connectivity through centralized controller.

6️⃣ Security & Monitoring

• Enable firewall rules per VLAN for internal and external traffic.
• Configure port-level security to prevent unauthorized devices.
• Set up alerts for connectivity issues or device downtime.
• Enable regular backups of shared folder data.

7️⃣ Testing & Validation

• Ping test between VLANs and confirm restricted access per policy.
• Verify shared folder access for each department.
• Test Wi-Fi coverage and roaming for all workstations.
• Confirm firewall rules and inter-VLAN routing work as expected.

Results & Outcomes

• Full segmented office network with department-specific VLANs.
• Secure and isolated traffic between departments.
• Shared resources accessible where required, with proper permissions.
• Reliable Wi-Fi and wired connectivity throughout the office.
• Centralized monitoring and management, simplifying future expansion.

Role & Responsibility

• Full network architecture and planning
• VLAN design and configuration
• Device deployment and Wi-Fi setup
• Security configuration and file-sharing setup
• Testing, validation, and documentation