Branch links lag, channels drop, 1C and telephony get lost
SD-WAN with provider redundancy, IPsec/WireGuard tunnels, QoS for 1C and voice, latency and jitter monitoring with alerts.
Networks and connectivity
Network infrastructure, VPN and Wi-Fi
MikroTik, Cisco, FortiGate, corporate Wi-Fi, site-to-site VPN and SD-WAN — from a single office to a distributed network with branches, warehouses and remote workers.
When clients come to us
Three common scenarios and how we solve them.
Wi-Fi can't cope: drops during meetings, guests end up on the corporate network
Ubiquiti UniFi / MikroTik CAPsMAN / Ruckus with seamless roaming, separate VLANs for guests and IoT, segmentation.
Remote access needed — the VPN was configured from the first random tutorial
We move to ZTNA or proper IPsec/WireGuard with MFA, logging, centralized credential issue and revocation.
What is included
Clear boundaries: what is covered by the retainer and what is a separate project.
Included in the service
- Network audit: diagram, bottlenecks, security risks, inventory
- MikroTik RouterOS, Cisco IOS/ASA, FortiGate — routing, VLANs, QoS, failover
- VPN site-to-site and client-to-site: IPsec, WireGuard, OpenVPN, SSL VPN, ZTNA
- SD-WAN and ISP redundancy with automatic failover
- Corporate Wi-Fi: Ubiquiti UniFi, Ruckus, MikroTik CAPsMAN, 802.11r seamless roaming
- Traffic segmentation, guest networks, DPI, content filtering
- Link and latency monitoring, alerts on degradation
Not included / separate project
- Cable installation — we coordinate the contractor but don't pull cables ourselves
- Network equipment supply — ordered via reseller, contracting stays on your side
- Custom firmware development for routers
What is actually included in the contract
When we sign — both sides know exactly what you pay for and what you get. These are the four planes the SLA is built on.
Coverage hours
- Business hours: Mon–Fri 08:00–20:00, L1 with guaranteed response
- On-call evenings and weekends on request
- 24/7 for critical services: mail, 1C, UNA, POS, website, VPN
- Scheduled night windows for planned work without downtime
Contact channels
- Single ticket portal with history and SLA timers
- Hotline phone for P1 incidents
- Email and Telegram bot for routine tasks
- User chat with our on-duty engineer during business hours
Priorities and response
- P1 (critical, service is down): response in 15 minutes, 24/7
- P2 (severe impact): response within 1 hour in business hours
- P3 (single-user issue): response within 4 hours
- P4 (planned work, improvement): scheduled for the coming week
Contract scope of work
- Planned maintenance: updates, backups, monitoring, patch management
- Incident management: diagnostics, recovery, postmortems
- Small projects within the retainer: up to N hours per month
- Large projects (migrations, new equipment) — separately scoped
Technologies and tools
What we work with in this area.
MikroTik
Cisco
FortiGate
Ubiquiti UniFi
IPsec
WireGuard
SD-WAN
CAPsMAN
BGP/OSPF
How we onboard a new client
1
Kickoff and brief
30–60 minutes online or in the office: we discuss the business, the key systems, and the incidents that hurt last year. We sign an NDA.
2
Technical audit and risk map
1–2 weeks. Equipment inventory, checks on servers, network, backups, security, 1C/UNA, licensing. The outcome is a report with a risk map and priorities.
3
Work plan and contract
We build the plan: what gets fixed right away (P1 risks), what in the first month, what in the first quarter. We lock the SLA, hours, channels, price. We sign the contract.
4
Onboarding and infrastructure handover
We take over the access via a secure password manager, deploy our monitoring, plug in the ticket system, train the employees. The previous admin (if any) hands off by the playbook.
5
Ongoing operations and reporting
Monthly report: incidents, planned work, new risks, recommendations. Quarterly review with the CEO/CFO: strategy, budgets, major changes.
Merging 5 branches and 2 warehouses into one network with SD-WAN
Logistics group, 100+ vehicle fleet, Moldova
Задача
Each branch on its own MikroTik with chaotic VPNs, 1C kept dropping, providers had regular outages.
Решение
Deployed SD-WAN on top of two providers with automatic failover, moved everything to FortiGate with centralized FortiManager, enabled QoS for 1C and SIP.
- −95%1C drops caused by network
- <10 secondsProvider failover time
- MOS ≥ 4.2SIP quality
Frequently asked questions about this service
We're on MikroTik — do we urgently need to move to Cisco?
No. MikroTik RouterOS is a great fit for SMB and mid-market. We change gear only when we hit performance or security limits — not out of fashion.
Do you do corporate Wi-Fi for the whole office?
Yes. RF survey, AP placement plan, Ubiquiti UniFi / MikroTik CAPsMAN / Ruckus depending on the job. Separate SSIDs for staff, guests and IoT.
What about WireGuard — is it safe for corporate VPN?
Yes, paired with centralized key distribution and MFA. A good fit for personal remote access. For site-to-site we usually pick IPsec — better compatibility with corporate gear.
Dual provider redundancy — is that SD-WAN or is simple failover enough?
Depends on traffic. Voice and 1C need SD-WAN with classification — otherwise switching breaks sessions. For plain internet access, failover is fine.
What does setting up an office LAN include?
We design the network and own all the active gear: router, switches, VLANs, Wi-Fi with a separate guest network, VPN for remote staff and link monitoring. We don't pull the cable or fit the outlets ourselves; a cabling contractor does the structured cabling and we coordinate their work. Equipment is ordered through a reseller in your company's name. You end up with one party accountable for the network working.
How long does a network and structured cabling project take?
It depends on the office size, the number of workstations and whether there's cabling in place already. The cabling work and equipment delivery usually take longer than the configuration. We set the timeline in the plan once we've seen the space. The cutover to the new network happens in the evening or over a weekend, so the office simply starts the morning on it with no downtime.
We're moving offices. What do we do about the network?
Start before the move. We look at the new space, run an RF survey for Wi-Fi and plan access point placement, and work with the contractor on the cabling. Order the internet line for the new office early, and if 1C and phones matter, consider a second provider. We configure the gear ahead of time, move it over a weekend, and on Monday people sit down at desks that work.
Let us talk about your IT
The first meeting — 30 minutes, free, no strings attached. We will tell you whether we are the right fit and what is worth doing first.