Networks and connectivity
We design the network around what it has to carry, install it and keep it under watch. Offices, connected sites, public bodies and operator networks.
Local and wide area networks
Switching and routing, VLANs to keep offices, guests, cameras and phones apart. Sites linked by VPN over fiber, copper or radio.
Firewalls and access
Rules written to serve, not to pile up. Remote access for people working off site, with centralized authentication and a record of who logged in.
Radio links and managed Wi-Fi
Point-to-point and point-to-multipoint links where fiber does not reach. Wi-Fi with centrally managed access points, roaming and separate guest networks.
(W)ISP networks
Edge routing, subscriber authentication, recursive and authoritative DNS. Regulatory DNS and IP blocking, updated automatically.
Monitoring
Every device we manage is under watch: traffic, errors, temperature, batteries. We often see a fault before the people affected by it do.
Internet: routing and IP resources
If you have your own IP addresses and AS number, or are applying for them, we take care of the part that connects your network to the rest of the Internet. The resources stay registered to you or your LIR: we configure them and keep them in order.
- BGP: sessions with transit providers and peers, multihoming, filters on what is announced and received.
- RIPE Database:
inetnum/inet6num,route/route6andaut-numobjects, with contacts and abuse mailbox kept up to date. - RPKI: creating and managing ROAs for your prefixes in the RIPE NCC's RPKI service.
- Secondary DNS for your zones.
We follow the meetings of the network operator community, ITNOG and RIPE among others, where the rules for how these resources are assigned and used are discussed.
$ whois -h whois.ripe.net 192.0.2.0/24 route: 192.0.2.0/24 descr: Customer network origin: AS64500 mnt-by: CUSTOMER-MNT source: RIPE RPKI ROA AS64500 192.0.2.0/24 VALID
Example using addresses and an AS number reserved for documentation.
IP video surveillance
Cameras on a dedicated network, recording on network video recorders or servers, remote access without opening ports to the Internet. Image retention set according to the rules that apply to your business.
- cameras on a VLAN separate from the rest of the network
- PoE power and power continuity for recorders and switches
- smartphone access through a VPN
VoIP phone systems
Phone systems on an open source platform, IP phones, SIP trunks and connections to existing lines where they are still needed. Auto attendants, queues and transfers configured around how your office actually works.
- migration from the old PBX without changing numbers
- extensions off site too, on a phone or a computer
- call logs and voicemail by e-mail
Power continuity
UPS units sized on the real load, with orderly shutdown of servers and equipment when the battery is about to run out, and regular checks on battery health. A blackout should not turn into a ruined disk.
Equipment
We work every day with Cisco, MikroTik and Huawei equipment for routing and switching, Sangoma for telephony, Hikvision for video surveillance and Eaton for power continuity.
The trademarks mentioned belong to their respective owners and indicate the equipment we work on.