Back to MSP

NETWORK ARCHITECTURE

A connected business.
A protected foundation.

El Jardin Techs MSP · Managed business network topology

REFERENCE DESIGN

A client-ready architecture overview.
Equipment and addressing are tailored per site.

01 / CONNECTIVITY

The network, at a glance.

El Jardin Techs MSP network topologyCameras, phones, business endpoints and wireless access points connect to a managed PoE switch. An 802.1Q VLAN trunk connects the switch to the UniFi gateway and firewall. The gateway connects through the ISP modem to the internet. Remote users connect over an encrypted VPN tunnel terminating at the gateway. Cloudflare DNS and UniFi management are internet services. Guest and restricted traffic remain subject to gateway access policies.

One managed gateway. Purpose-separated networks. Controlled access.

Wired / PoE where supportedWirelessVPN tunnel

02 / SEGMENTATION

The right space for every system.

Example VLANs and addressing—not a live inventory.

Example network segmentation
VLANNetworkExample subnetPurpose
01Management10.1.0.0/16Network administration
02Secure business10.2.0.0/16Wired business endpoints
03Core Wi-Fi10.3.0.0/16Business wireless devices
04Guest Wi-Fi10.4.0.0/16Internet access; internal access restricted
05IoT10.5.0.0/16Connected appliances and equipment
06Security cameras10.6.0.0/16Video surveillance devices
07PCI segment10.7.0.0/16Payment-system separation, where required
08Healthcare segment10.8.0.0/16Restricted healthcare systems, where required
09VoIP10.9.0.0/16Business phones
10VPN10.10.0.0/16Authorized remote access