Services / Network and infrastructure
Network and infrastructure.
Segmented and documented.
Firewalls, network segmentation, VPN and server environments: from a redundant OPNsense firewall pair and VLANs to Windows Server, virtualisation and backup.
01
What I set up
A network where systems are separated by function, traffic is allowed deliberately and remote management is secure.
Including
- Firewalls, including OPNsense in high availability (CARP)
- VLAN segmentation and switch configuration
- Site-to-site and remote-access VPN (WireGuard, OpenVPN)
- Windows Server, Active Directory, VMware and Hyper-V
- Backup with Veeam and monitoring with PRTG or Zabbix
- External vulnerability scans
02
How I approach it
First I map the current environment and its dependencies: which systems talk to each other, and what should not? Based on that I draw up an IP and VLAN plan and make changes in agreed maintenance windows, with a fallback scenario.
Steps
- Inventory of systems and traffic flows
- IP and VLAN plan
- Changes with impact analysis and fallback scenario
- Documentation of the setup and decisions
03
From practice
For an organisation with its own server environment, I set up two redundant OPNsense firewalls and five VLANs for servers, virtual machines, storage, backup and remote access, with VPN for remote management. For an IT service provider, I ran an external vulnerability scan on 40 IP addresses.
Frequently asked questions
Good to know.
Why split my network into VLANs?
So systems only communicate when they need to. If one segment is compromised or misconfigured, the damage stays within that segment.
What does a redundant firewall pair give me?
If one firewall fails or is under maintenance, the second takes over traffic automatically. The configuration stays synchronised between both.
Can you assess an existing environment first?
Yes. I can start with an inventory or an external vulnerability scan, so you know where you stand before anything changes.
Your next step
What does your
IT environment need?
For a project or a one-off assignment, tell me about the problem and what you want to achieve. We can then discuss the approach and scope.