Skip to content

Enterprise experience.Delivered locally.

Network infrastructure designed and implemented on Bonaire for the Dutch central government's shared service organization, the island's local government and its public library. Delivered by CNSS founder and senior network engineer Patrick Meijer.

Environment sizes are approximate sizes of the environments, not performance figures. Architecture overviews are simplified and carry no identifiers. References are available on request.

Public sector / enterprise networking

Rijksdienst Caribisch Nederland

Shared service organization of the Dutch central government in the Caribbean Netherlands

Enterprise network infrastructure

~500-user environment

Implementation of a new enterprise network infrastructure supporting approximately 500 users, built around Cisco Catalyst switching, resilient wireless infrastructure and Fortinet security and management technologies.

  • Enterprise networking
  • Cisco and Fortinet
  • VXLAN EVPN Multi-Site
  • Wireless controller high availability

Key technologies

  • Cisco Catalyst 9500
  • Cisco Catalyst 9300
  • Catalyst 9800-L WLC HA
  • VXLAN EVPN Multi-Site
  • Fortinet firewall
  • FortiAnalyzer
  • FortiManager
InternetFortinet firewall · HASITE ASITE BVXLAN EVPN Multi-SiteCatalyst 9500 spineCatalyst 9500 spineCatalyst 9300 leafCatalyst 9300 leafWLCWLCCatalyst 9800-L wireless controllers · HAFortiManagerFortiAnalyzer
Simplified architecture overview. Identifiers removed.

Architecture overview

Two sites joined in a VXLAN EVPN multi-site fabric, with a Fortinet firewall pair at the edge, wireless controllers in high availability and central management for the security platform.

Public sector / network design

Openbaar Lichaam Bonaire

Public Entity Bonaire, the island's local government

Network design and implementation

~450-user environment

Design and implementation of a new network infrastructure supporting approximately 450 users, combining Cisco enterprise switching with Fortinet security technologies and centralized infrastructure monitoring.

  • Network design and implementation
  • Cisco and Fortinet
  • Web application firewall
  • Centralized monitoring

Key technologies

  • Cisco Catalyst 9500
  • Cisco Catalyst 9300
  • FortiGate 1800
  • FortiWeb
  • FortiAnalyzer
  • ManageEngine OpManager
InternetFortiGate 1800F · HA pairCatalyst 9500 coreport-channel uplinksDepartments · redundant10 Gbps dark fibre to the coreFortiWebFortiWebWeb application firewall · HATop of rackVMVMVMVirtualization hostsFortiAnalyzerMonitoring: OpManagerZones: departments · servers · Wi-Fi · voice · cameras · DMZ
Simplified architecture overview. Identifiers removed.

Architecture overview

A FortiGate pair in high availability in front of a Catalyst 9500 core, with each department connected over redundant dark fibre, a web application firewall pair, a virtualized server farm and central logging and monitoring.

Public sector / segmented LAN

Biblioteka Públiko Boneiru

The public library of Bonaire

Network design and implementation

Single-site public library

Design and implementation of a segmented network for the public library: a FortiGate SD-WAN internet edge with two providers, Cisco Catalyst switching, and separate network segments for staff, visitors, wireless, voice and cameras.

  • SD-WAN internet edge with two providers
  • Cisco and Fortinet
  • Visitor and staff separation
  • Documented VLAN design

Key technologies

  • FortiGate 60F
  • SD-WAN
  • Cisco Catalyst 9300
  • FortiAP wireless
  • VLAN segmentation
Provider 1Provider 2FortiGate 60F · SD-WAN edgeFirewall and routingLACP trunkCatalyst 9300core and accessStaffManagementWi-FiVoiceVisitorsCamerasDMZSeparate segments · unused ports isolated · DMZ reserved for future services
Simplified architecture overview. Identifiers removed.

Architecture overview

A FortiGate SD-WAN edge with two internet providers, trunked to a Catalyst 9300 that serves separate segments for staff, visitors, wireless, voice and cameras.

Additional experience

  • Public sector / application operations

    Immigratie- en Naturalisatiedienst

    Dutch Immigration and Naturalisation Service

    Research, maintenance and testing of applications, supervision of software upgrades, and operational reporting to management and stakeholders.

    • Application maintenance and testing
    • Upgrade supervision
    • Operational reporting

Planning something similar?

Whether it is a campus fabric for hundreds of users or a firewall migration for a single office, the approach is the same: assess, design, implement, support.

Request a network assessmentDiscuss your project