Experience

The engineering that backs our work

Each engagement begins with an agreed scope and clear deliverables. Customers receive direct technical communication during the work and documentation they can use after the engagement is complete.

The examples below describe selected engineering work performed through independent consulting. Each project states its attribution; client and employer details are omitted or generalized where appropriate.

Success story 1

District-wide school modernization

Independent consulting engagement — anonymized for confidentiality.

The challenge

A district running an undocumented legacy Extreme Networks stack — switches, controllers, and access points — due for replacement.

The role

Senior network engineer, from full discovery through migration and documentation.

The scope

8 schools and the district office — roughly 65 switches and 380 access points; a FortiGate acting as controller for switches and APs; full discovery of the existing VLANs, inventory, and port configurations.

Technologies

Extreme Networks → Fortinet (FortiGate, FortiSwitch, FortiAP).

How we delivered it

  • 1
    DiscoverMapped the existing network: VLANs, switch inventory, port configurations, and the current Layer-2 topology.
  • 2
    DesignSpecified the Fortinet stack and the migration order, working with site IT.
  • 3
    MigrateImplemented the stack in stages: configuration, cutover, and troubleshooting through the transition.
  • 4
    DocumentDelivered complete Layer-2/Layer-3, port, and network documentation so site IT could run the network day to day.

The deliverable: a working, documented Fortinet estate across all 8 schools and the district office, with the Layer-2 documentation handed to the client.

Layer-2 reference topology (anonymized). Click a diagram to enlarge and zoom.

Upstream LAN / WAN 10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax FortiGate-600F203.0.113.10 Fortigate FG-600F X2 CORE-Firewall10.88.1.2 Fortiswitch FS-648F-FPOE Port49 Port4 Port2 ELEMENTARY-MDF-1 Port50 CORE-Aggregation10.88.1.1 Fortiswitch FS-1024E Port2 Port3 Port13 HIGHSCHOOL-MDF-1 Port49 HIGHSCHOOL-TECHCENTER-IDF-210.88.1.3t> Fortiswitch FS-148F-FPOE Port48 Port49 Port14 To CAMPUS-EAST-MDF-1 Port53 Port16 To CAMPUS-NORTH-MDF-1 Port49 Port18 To CAMPUS-WEST-MDF-1 Port53
HIGHSCHOOL-Sci-IDF-110.88.1.18 Fortiswitch FS-648F-FPOE HIGHSCHOOL-AUD-IDF-110.88.1.14 Fortiswitch FS-648F-FPOE HIGHSCHOOL-Lib-IDF-110.88.1.21 Fortiswitch FS-648F-FPOE HIGHSCHOOL-IDF184-110.88.1.15 Fortiswitch FS-648F-FPOE HIGHSCHOOL-MDF-110.88.1.5 Fortiswitch FS-648F-FPOE HIGHSCHOOL-Lib-IDF-210.88.1.12 Fortiswitch FS-148F-FPOE HIGHSCHOOL-IDF184-310.88.1.17 Fortiswitch FS-148F-FPOE HIGHSCHOOL-IDF184-210.88.1.13 Fortiswitch FS-148F-FPOE HIGHSCHOOL-Lib-IDF-310.88.1.10 Fortiswitch FS-148F-FPOE HIGHSCHOOL-Sci-IDF-210.88.1.19 Fortiswitch FS-148F-FPOE HIGHSCHOOL-Sci-IDF-310.88.1.20 Fortiswitch FS-148F-FPOE HIGHSCHOOL-AUD-IDF-210.88.1.16 Fortiswitch FS-148F-FPOE HIGHSCHOOL-MDF-410.88.1.9 Fortiswitch FS-148F-FPOE HIGHSCHOOL-MDF-310.88.1.7 Fortiswitch FS-148F-FPOE HIGHSCHOOL-MDF-210.88.1.8 Fortiswitch FS-148F-FPOE HIGHSCHOOL-Lab250-110.88.1.4 Fortiswitch FS-148F-FPOE Port50 Port49 Port42 Port48 Port49 10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax HIGHSCHOOL-TECHCENTER-IDF-2 Port49 MDF HIGHSCHOOL-Lib-IDF HIGHSCHOOL-AUD-IDF HIGHSCHOOL-Sci-IDF HIGHSCHOOL-IDF184 HIGHSCHOOL-Lab250 Port1 Portx Port50 Port49 Port50 Por50 Port56 Port51 Port52 Port51 Port55 Port54 Port56 Port51 Port52 Port51 Port53 Port48 Port48 Port51 Port52 Port56 Port51 Port53 Port56 Port51 400 400 400 400 400 400
ELEMENTARY-MDF-110.88.1.22 Fortiswitch FS-148F-FPOE ELEMENTARY-MDF-310.88.1.26 Fortiswitch FS-148F-FPOE ELEMENTARY-MDF-210.88.1.27 Fortiswitch FS-148F-FPOE ELEMENTARY-RM89-210.88.1.11 Fortiswitch FS-148F-FPOE ELEMENTARY-RM89-310.88.1.23 Fortiswitch FS-148F-FPOE ELEMENTARY-MDF-410.88.1.25 Fortiswitch FS-148F-FPOE ELEMENTARY-RM89-110.88.1.24 Fortiswitch FS-648F-FPOE Port52 Port51 Port52 Port51 Port52 Port51 Port49 Port50 Port53 Port55 Port52 Port51 Port52 FSXXXXXXXXXXXXXX Port13 10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax 120 120 ELEMENTARY-MDF ELEMENTARY-RM89
CAMPUS-EAST-MDF-110.88.1.32 Fortiswitch FS-648F-FPOE CAMPUS-EAST-IDF-110.88.1.34 Fortiswitch FS-648F-FPOE CAMPUS-EAST-MDF-210.88.1.35 Fortiswitch FS-148F-FPOE CAMPUS-EAST-MDF-410.88.1.33 Fortiswitch FS-148F-FPOE CAMPUS-EAST-MDF-510.88.1.37 Fortiswitch FS-148F-FPOE CAMPUS-EAST-MDF-310.88.1.36 Fortiswitch FS-148F-FPOE CAMPUS-EAST-IDF-210.88.1.38 Fortiswitch FS-148F-FPOE Port56 Port49 Port49 Port49 Port49 Port54 Port53 Port50 Port50 Port50 10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax Port55 Port56 Port51 To CORE-Aggregation Port14 CAMPUS-EAST-MDF CAMPUS-EAST-IDF
CAMPUS-NORTH-MDF-110.88.1.39 Fortiswitch FS-648F-FPOE CAMPUS-NORTH-IDF-110.88.1.40 Fortiswitch FS-148F-FPOE CAMPUS-NORTH-IDF-210.88.1.41 Fortiswitch FS-148F-FPOE CAMPUS-NORTH-IDF-310.88.1.42 Fortiswitch FS-148F-FPOE Port49 Port56 Por51 Port52 Port51 Port52 Port51 10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax To CORE-Aggregation Port16 CAMPUS-NORTH-MDF CAMPUS-NORTH-IDF
CAMPUS-WEST-MDF-110.88.1.28 Fortiswitch FS-648F-FPOE CAMPUS-WEST-IDF-110.88.1.55 Fortiswitch FS-648F-FPOE CAMPUS-WEST-MDF-310.88.1.30 Fortiswitch FS-148F-FPOE CAMPUS-WEST-IDF-210.88.1.56 Fortiswitch FS-148F-FPOE CAMPUS-WEST-IDF-310.88.1.57 Fortiswitch FS-148F-FPOE CAMPUS-WEST-MDF-210.88.1.31 Fortiswitch FS-148F-FPOE CAMPUS-WEST-MDF-410.88.1.29 Fortiswitch FS-148F-FPOE To CORE-Aggregation Port18 Port53 Port54 Port55 Port51 Port52 Port51 Port52 Port51 10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax Port53 Port55 Port52 Port51 Port52 CAMPUS-WEST-MDF CAMPUS-WEST-IDF
Hostnamex.x.x.x Fortigate FG-600F Hostnamex.x.x.x Fortiswitch FS-1024E Hostnamex.x.x.x Fortiswitch FS-648F-FPOE Hostnamex.x.x.x Fortiswitch FS-148F-FPOE 10G LR Fiber 10G SR Fiber Copper WAN Hostnamex.x.x.x Fortiswitch FS-648F-FPOE

Sanitized reference diagram · shown for public reference.

Success story 2

Public transit authority network migration

Independent consulting engagement — anonymized for confidentiality.

The challenge

A multi-site transit authority running a Cisco network needed to modernize routing, switching, security, and wireless across its operational footprint.

The role

Senior network engineer, from current-state discovery through migration and documentation.

The scope

Migrating the authority's sites from Cisco to a cloud-managed Meraki stack, and documenting the result at Layer 2 and Layer 3.

Technologies

Cisco (legacy) → Meraki (MX, MS, MR) and SD-WAN.

How we delivered it

  • 1
    DiscoverMapped the current Layer-2 and Layer-3 topology across the sites.
  • 2
    DesignPlanned the Meraki stack, VLAN/subnet layout, and migration order.
  • 3
    MigrateImplemented the stack in stages, with cutover and troubleshooting.
  • 4
    DocumentDelivered Layer-2 and Layer-3 as-built documentation for the operations team.

The deliverable: the migrated, documented Meraki network, with Layer-2 and Layer-3 documentation handed to operations.

Layer-2 and Layer-3 reference topology (anonymized). Click a diagram to enlarge and zoom.

10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax CENTRAL-FW-PRIMARY203.0.113.243 Meraki MX105 CENTRAL-FW-SPARE203.0.113.244 Meraki MX105 CENTRAL-CORE-110.131.126.25 Meraki C9300X-24Y CENTRAL-CORE-210.131.126.25 Meraki C9300X-24Y Port25 Port26 Port26 Port25 Port23 Port24 LAN 9 Port9 Port24 Port23 Port10 Port10 WAN 1 WAN 2 Port3 Port4 WAN 1 Port3 Port4 Access 110.131.126.6 Meraki MS130-48X Access 210.131.126.7 Meraki MS130-48X Access 710.131.126.4 Meraki MS130-48X Access 510.131.126.10 Meraki MS130-48X Access 610.131.126.5 Meraki MS130-48X Access 410.131.126.9 Meraki MS130-48X Access 310.131.126.8 Meraki MS130-48X Access 810.131.126.3 Meraki MS130-48X Port1 Port2 Port8 Port3 Port4 Port7 Port6 Port5 Port1 Port2 Port8 Port3 Port4 Port7 Port6 Port5 Port49 Port50 Port49 Port50 Port49 Port50 Port49 Port50 Port49 Port50 Port49 Port50 Port49 Port50 Port49 Port50 CENTRAL-LEGACY-SW01.example.net10.131.199.5 Cisco WS-C3850-48P Port19 Port19 Gi6/0/1 Gi7/0/1 Media unverified
10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax NORTH-FW-PRIMARY198.51.100.19 Meraki MX105 NORTH-FW-SPARE198.51.100.20 Meraki MX105 Core 110.132.126.237 Meraki C9300X-24Y Core 210.132.126.237 Meraki C9300X-24Y Stack1 Stack2 Stack2 Stack1 Port23 Port24 Port6 Port5 Port24 Port23 Port5 Port6 WAN 1 WAN 2 Port3 Port4 WAN 1 Port3 Port4 NORTH-ACCESS-01.example.net10.132.199.6 Cisco WS-C3850-48P Port1 Port1 Gi5/0/2 Gi1/0/2 Media unverified
10G LR Fiber 10G SR Fiber Copper DAC/Twin-ax EAST-FW-PRIMARY192.0.2.244 Meraki MX85 EAST-FW-SPARE192.0.2.243 Meraki MX85 EAST-CORE-110.133.126.16 Meraki C9300X-12Y EAST-CORE-210.133.126.16 Meraki C9300X-12Y Stack1 Stack2 Stack2 Stack1 Port11 Port12 Port5 Port5 Port12 Port11 Port6 Port6 WAN 1 WAN 2 WAN3 WAN4 WAN 1 WAN3 WAN4 EAST-ACCESS-110.133.126.4 Meraki MS130-48X EAST-ACCESS-2-WEST10.133.126.3 Meraki MS130-48X EAST-ACCESS-3-PARTS10.133.126.2 Meraki MS130-48X Port1 Port2 Port3 Port1 Port2 Port3 Port49 Port50 Port49 Port50 Port49 Port50 Planned: Core 2 Port1-3 to access Port50 (not connected)

Sanitized reference diagram · shown for public reference.

299-Routing - 10.132.199.0/24 226-Meraki-Mgt - 10.132.126.0/24 215-Replication - 10.132.115.0/24 211-BYOD - 172.21.112.0/24 210-Guest_Wifi - 172.21.101.0/24 209-Building - 10.132.109.0/24 208-CCTV - 10.132.108.0/24 206-VMotion - 10.132.106.0/24 205-Management - 10.132.105.0/24 204-Voice - 10.132.104.0/24 202-North_PC - 10.132.102.0/24 202-Legacy_Network - 172.21.0.0/16 200-North_Servers - 10.132.100.0/24 150-Legacy_Tr - 10.132.150.0/29 1-Default - 172.21.128.0/24 Meraki MX105 NORTH-FW-SPARE Firewall HA Meraki MX105 NORTH-FW-Primary .254 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .10 .1 .1 .1 201-DMZ - 10.132.101.0/24 .1 Telstar Fiber Meridian Net Subnet: 198.51.100.16/28HA Address: 198.51.100.18Gateway: 198.51.100.17 Subnet: 198.51.101.40/29HA Address: 198.51.101.42Gateway: 198.51.101.41
250-Legacy_Tr - 10.131.250.0/29 220-Vehicle-WiFi - 172.22.0.0/21 136-Central_AP - 10.131.136.0/24 133-Central_IoT - 172.21.78.0/24 126-Meraki_Mgt - 10.131.126.0/24 115-Replication - 10.131.115.0/24 110-Leg_Guest - 172.21.101.0/24 109-Building - 10.131.109.0/24 108-CCTV - 10.131.108.0/24 106-ESX-Vmotion - 10.131.106.0/24 105-Management - 10.131.105.0/24 104-Voice - 10.131.104.0/24 103-Vehicle-Tracking - 10.131.103.0/24 102-Central_PC - 10.131.102.0/24 100-Servers - 10.131.100.0/24 99-Routing - 10.131.199.0/24 1-Default - 172.21.128.0/24 Meraki MX105 CENTRAL-FW-PRIMARY Meraki MX105 CENTRAL-FW-SPARE Firewall HA .1 .2 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .2 .1 121-DMZ-INSIDE - 10.131.121.0/24 .1 111-BYOD - 172.21.111.0/24 .1 101-DMZ - 10.131.101.0/24 .1 Meridian Net Meridian Net Subnet: 203.0.113.240/28HA Address: 203.0.113.242Gateway: 203.0.113.241 Subnet: 203.0.114.184/29HA Address: 203.0.114.186Gateway: 203.0.114.185
333-East_IoT - 172.21.77.0/24 326-Meraki_Mgt - 10.133.126.0/24 315-Replicatio - 10.133.115.0/24 311-BYOD_East - 172.21.113.0/24 310-Guest_East - 172.21.103.0/24 309-Building - 10.133.109.0/24 308-CCTV - 10.133.108.0/24 306-VMotion - 10.133.106.0/24 305-MANAGEMENT - 10.133.105.0/24 304-VOICE - 10.133.104.0/24 302-East_PC - 10.133.102.0/24 301-DMZ - 10.133.101.0/24 300-East_Servers - 10.133.100.0/24 1-Default - 172.21.3.0/24 Meraki MX85 EAST-FW-PRIMARY Meraki MX85 EAST-FW-SPARE Firewall HA .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 .1 SkyWave Broadband Meridian Net Subnet: 192.0.2.240/28Primary IP: 192.0.2.244Spare IP: 192.0.2.243Gateway: 192.0.2.241 Subnet: 192.0.3.40/29Primary IP: 192.0.3.43Spare IP: 192.0.3.44Gateway: 192.0.3.41

Sanitized reference diagram · shown for public reference.

Platforms we know well

Platforms we know well

Fortinet, Cisco, Meraki, Aruba, Ruckus, UniFi, WatchGuard, pfSense — and the ability to step into other enterprise environments and deliver.

Honest and anonymized

Honest and anonymized

These projects are presented without client names or identifying detail. Netsera Technology's own client work begins now; no testimonials or unverified outcome claims are made.