Skip to content

Network Design, Setup & Support

Business networks designed, secured and supported by a local expert.

01 · Business networking

A network is a set of rules about who can reach what.

We design, install and support business networks on Cisco, HPE/Aruba and Ubiquiti gear, built so a problem with one device never becomes a problem for everything else.

Honest answer first, even when it is “you just need a configuration change”

Sample firewall rules, in plain English

Staff laptop to file server

Staff to servers

Allowed

Guest phone to file server

Guest to staff

Blocked

Camera to the open internet

Cameras to internet

Blocked

Desk phone to phone provider

Phones to provider

Allowed

Illustration, not a real configuration

02

How we design it

Every device lives in a zone, and zones stay in their lane

This is a typical small office. Your map will differ, but the principle is the same: a device can only talk to what it needs, so one compromised camera or one careless guest cannot reach your files.

Internet

Your provider

Firewall

Filters traffic, VPN, admin protected by MFA

Switches + Wi-Fi

Every device lands in one zone

bitnetica net zone staff icon

Staff

Laptops, desktops, printers, file server

Can reach Servers, printers, the internet

Cannot reach Guest Wi-Fi, cameras

bitnetica net zone guest icon

Guests

Visitors, customers, personal phones

Can reach The internet, nothing else

Cannot reach Every internal system

bitnetica net zone pay icon

Payments or patient records

POS terminals, or EHR workstations

Can reach Only the payment processor or EHR service

Cannot reach Guest Wi-Fi and every other zone

bitnetica net zone iot icon

Cameras and smart devices

Cameras, badge readers, TVs, thermostats

Can reach Their own recorder or controller

Cannot reach Staff computers, and the open internet

bitnetica net zone voice icon

Phones

Desk phones and the phone system

Can reach Your phone provider, with voice traffic prioritized

Cannot reach Other zones

Between zones, the default is no. Anything else is a written rule that we can explain to you in one sentence.

03

The front door

Attackers go straight for the firewall

The box between you and the internet is now one of the most targeted things on a small business network. Three questions tell you whether yours is a safe one.

22%

of exploited vulnerabilities in 2025 were in edge devices and VPNs, up from 3% the year before

32 days

median time organizations took to fix them, and only 54% were fully fixed

0 days

median time before those flaws were being mass-exploited

Source: Verizon 2025 Data Breach Investigations Report, as summarized by Censys.

In February 2026 CISA ordered federal agencies to find and retire unsupported edge devices, and said such devices should not stay on enterprise networks. Nextgov report on BOD 26-02

04

Wireless

Wi-Fi placed by measurement, not by hope

Four access points placed by measurement and four placed by guess look the same on the invoice. They do not feel the same on a Monday morning video call.

Predictive survey

Modeled from your floor plan

Software simulates coverage from wall types, room sizes and the access points chosen. Quick and remote, and enough for a small office of a handful of access points.

Estimates performance

On-site survey

Measured in your actual space

We walk the building with survey tools and record real signal, interference and roaming. This is what we do for warehouses, medical suites, thick walls and anywhere people move while on calls.

Measures performance

Newest is not the same as right

Wi-Fi 6

Still the right answer for most offices: proven, affordable, and fast enough for the devices people actually carry.

Wi-Fi 6E

Adds the quieter 6 GHz band. Helps in crowded buildings and dense areas where the older bands are noisy.

Wi-Fi 7

Worth it when your devices support it and the wired side can feed it: it wants 2.5 gigabit or faster cabling to each access point.

We match the Wi-Fi generation to your devices and your cabling, so you do not pay for speed the rest of the network cannot deliver.

05

Staying online

No single point of failure

Most offices go down at the same two weak spots: one internet line and one firewall. Here is how we remove each, and how far it makes sense to go for a business your size.

Your internet connection

Keeps you working

bitnetica net mode failover icon

Failover

The second line waits. When the main one stops, traffic moves over. Simple and affordable. Calls and transfers in progress on the failed line may need to reconnect.

Adds capacity

bitnetica net mode balance icon

Load balancing

Both lines carry traffic at the same time, each connection on one line. More total capacity, and if one line fails the other keeps going. One big download still uses a single line.

Combines lines

bitnetica net mode bond icon

Bonding

A single call or transfer is split across every line, so it gets their combined speed and survives a line failing. It needs a tunnel endpoint at the far end, so it is a managed service.

What the second line can be

  • A second wired provider: fast enough to use every day, and the right choice when you want to load balance or bond.
  • Cellular 5G or LTE: slower, but it travels a completely different path, so it is a strong backup.

Whichever you choose, check the route. Two carriers can share the same conduit, pole or building entrance, and then one cut takes out both. We ask where each line enters and runs before you pay for the second one. Why route diversity matters

This also protects your cloud phone system, which depends on the connection staying up.

06 · High availability

Two firewalls, so one can fail or be updated

A single firewall is a single point of failure: when it stops, so do the internet, the VPN and the links between your sites. In a high-availability pair, one firewall works while the other waits with a copy of the settings and of the connections in progress. If the first fails, the second takes over automatically. It also lets us update firmware one unit at a time with little or no downtime.

What it takes

  • Two matching firewalls, such as a pfSense pair, a FortiGate pair or a UniFi pair using Shadow Mode
  • A dedicated link between them to keep settings and connections in sync
  • Switches that cooperate with the failover, which is where most problems hide
  • Security subscriptions for each unit, because they are usually licensed per device

Sources: Netgate pfSense HA, Ubiquiti Shadow Mode.

Provider A

Wired

Provider B

Wired or cellular

↓

Firewall 1

Active

⇄ sync

Firewall 2

Standby, same settings

↓

Switches and Wi-Fi

Your network

How far should you go?

Step 1

A second internet line

Right for: Offices where phones, card payments or cloud apps stop the day when the internet does.

Step 2

Use both lines together

Right for: Busy or video-heavy offices, and anyone paying for two lines who wants to use both.

Step 3

Redundant firewalls

Right for: Businesses where an hour offline costs more than a second firewall, or that cannot schedule a maintenance window.

Where you stop depends on what an outage costs you. We will tell you plainly when step three is more than you need.

07 · Built for your business

The same principles, tuned to how you work

A dental office, a machine shop and a two-site retailer need different layouts. The questions are the same: what must stay up, what must stay private, and who or what should never be able to reach it.

Retail, restaurants, any business taking cards

Payment terminals on their own network, away from guest Wi-Fi. PCI guidance treats segmentation as a way to shrink the systems in scope and to stop an attacker pivoting from a weaker device. PCI SSC

Medical and dental offices

Clinical workstations and EHR traffic isolated from guest Wi-Fi and building devices. HHS has proposed making network segmentation mandatory under HIPAA; the rule is not final yet, but segmentation is already the sensible baseline. HIPAA Journal

Law, accounting and financial firms

Encrypted remote access with MFA, and client data on systems that guests and smart devices cannot touch.

Manufacturers and warehouses

Hardened wired and wireless across large floors, with production systems and IoT or OT devices on their own VLANs.

Hybrid and remote teams

Secure VPN access with MFA, designed so a remote connection never gets more reach than it needs.

Multiple locations

Buildings linked by point-to-point wireless, fiber or SD-WAN over existing internet, with one set of policies and one place to manage them.

08

How a project runs

No surprises, and nothing you cannot hand to someone else

1

Discovery call

Free. What is not working, what you need, and no jargon.

2

On-site assessment

Abe walks the space, tests Wi-Fi, reviews your gear and finds the gaps before recommending anything.

3

Plain-English proposal

Scope, flat-rate price and honest advice, even if that is “keep what you have”.

4

Install and handoff

Scheduled around your day, tested before we leave, documented before we go.

The handoff binder

Documentation you own

  • A network map
  • Labeled ports and cables
  • Device credentials, handed over securely
  • A plain-English summary of how it is set up and why

If a provider calls network documentation “proprietary”, they are holding your network hostage. Ours is yours from day one, so any future technician can support it without starting over.

09 · Free network review

Do you know what is on your network right now?

Most small networks grew one device at a time. A review shows what is connected, what is out of date and what should be separated, in plain language.

  • Firewall support and firmware status
  • Which devices share a network and should not
  • Wi-Fi coverage where your team works

Sample network review findings

Firewall model and firmware

Out of support

Replace

Guest Wi-Fi

Shares staff network

Separate

Back-office Wi-Fi

Weak signal

Survey

Switches

Healthy

Leave alone

Illustration with made-up results

FAQ

Network Design, Setup & Support: common questions

What types of businesses do you set up networks for?

BitNetica works with small and mid-sized businesses across McHenry County, Lake County, and the surrounding area — including medical and dental offices, law firms, accountants, manufacturers, warehouses, retail locations, and professional services firms. If you need a reliable, secure business network, we can help regardless of industry or building type.

What networking brands and equipment do you work with?

We design and deploy networks using Cisco, HPE/Aruba, and Ubiquiti UniFi equipment for switching, routing, and wireless. For firewall and security appliances, we work with pfSense, Fortinet FortiGate, and Cisco ASA. The right choice depends on your budget, environment, and long-term needs — we’ll recommend what actually makes sense for your situation, not what has the best margin.

Can you connect multiple buildings or office locations as one network?

Yes, we connect multiple buildings and sites into one network. Depending on your locations and requirements, we can connect them via point-to-point wireless links (ideal for buildings within line of sight), dedicated fiber runs, or SD-WAN over existing internet connections. The result is a unified network with consistent security policies and centralized management across all your locations.

Do you offer ongoing support and monitoring after the network is installed?

Yes. BitNetica offers proactive monitoring, firmware and security patch management, and ongoing support — on either a retainer or as-needed basis. We monitor your network and alert you when something needs attention. And if something breaks, you call Abe directly.

How much does business network setup cost?

It depends on the size and complexity of your environment. A single-floor office with 20 users is a very different project from a multi-building campus with 150. After a free on-site assessment, we provide a detailed, flat-rate proposal — no hourly estimates that balloon into surprise invoices. We’ll also tell you honestly if there’s a simpler solution that costs less than you might expect.

Can you work with existing equipment, or does everything need to be replaced?

Often we can. We’ll assess your existing equipment during the site visit and give you an honest evaluation of what’s worth keeping, what needs reconfiguration, and what genuinely needs replacing. We’re not in the business of recommending new hardware just to sell hardware — if your switches are solid and just misconfigured, we’ll say so.

Do we need Wi-Fi 7?

Usually not yet. Wi-Fi 7 only pays off when your devices support it and the cabling behind each access point can carry 2.5 gigabit or more. For many offices, a well-placed Wi-Fi 6 or 6E network is faster in practice than a badly placed Wi-Fi 7 one.

Can you check our existing firewall without replacing it?

Yes. We check whether the model is still supported, whether the firmware is current, and who can log in to it. If it is healthy, we leave it alone and tell you so.

Do we need a second internet connection?

It depends on what stops when the internet does. If phones, card payments or cloud apps stop your day, a second line, either another wired provider or a cellular link, is inexpensive insurance. We also check that the two lines do not share the same route into your building.

What is the difference between failover, load balancing and bonding?

Failover keeps a second line in reserve. Load balancing uses both lines at once, with each connection on one line. Bonding splits a single connection across all lines so it gets their combined speed and survives a line failing, but it needs a service at the far end to put the pieces back together.

Do we need two firewalls?

Only if an hour offline costs you more than a second firewall, or you cannot schedule a maintenance window. A redundant pair takes over automatically if one fails and lets us update one at a time. For many small offices, a second internet line and a pre-configured spare are the better value, and we will tell you which applies.

Service area

Network Design, Setup & Support across our region

We deliver this service on-site and remotely throughout McHenry County, the NW suburbs, and SE Wisconsin.

Related services

Businesses often pair this with

Structured Cabling

Structured Cabling

Clean, certified low-voltage cabling for offices, warehouses, and new builds — the foundation everything else runs…

Learn more

Cybersecurity

Cybersecurity

Layered protection against ransomware and phishing: MFA, endpoint security, email defense, and backups you can restore…

Learn more

Ready to make your technology an advantage?

Free consultation, honest answers, no obligation.