< cd ../projects

~/projects/enterprise-network-overhaul

Enterprise Network Overhaul

year
2025
role
Lead network engineer
client
Logistics group (HK)
  • Networking
  • FortiGate
  • VLAN
  • High availability

The brief

A growing logistics company was running all three offices on flat, unmanaged networks built up over a decade. Broadcast storms, no guest isolation, a single aging firewall — and the warehouse Wi-Fi dropped every time the loading dock doors closed.

What I did

  • Audited and documented the existing network, then designed a segmented target architecture (servers, staff, VoIP, guest, CCTV and warehouse IoT on separate VLANs).
  • Deployed redundant FortiGate firewalls in HA at the head office with IPsec tunnels to both branch sites.
  • Replaced unmanaged switches with a managed L2/L3 stack, configured LACP uplinks and spanning tree.
  • Ran a full Wi-Fi survey in the warehouse and re-planned AP placement and channels for the metal-heavy environment.
  • Executed the cutover over a single weekend with a written rollback plan — Monday morning, nobody noticed anything except faster file transfers.

Outcome

  • Zero unplanned downtime since go-live
  • Guest and CCTV traffic fully isolated from the corporate LAN
  • Site-to-site latency down 40%, warehouse Wi-Fi complaints down to zero
  • Every switch port, VLAN and rule documented in a living network diagram