Ban Chi Huy Quan Su Phuong - Network Topology
About This Architecture
Enterprise network topology with Fortigate 60F firewall, Cisco L3/L2 switching, and six segmented VLANs serving 45 users across leadership, administration, secure printing, camera, guest, and management zones. Traffic flows from ISP WAN through perimeter security with FortiGuard WAF/IPS/IDS, then through core L3 routing to access layer PoE switches and UniFi WiFi 6 APs. Windows Server 2025 provides AD/DNS/DHCP, file services via DFS, print isolation on VLAN30, and NVR camera recording on VLAN40, while Synology NAS handles backup and FortiAnalyzer logs security events. This architecture demonstrates defense-in-depth with VLAN isolation, role-based access control, and centralized management—critical for protecting sensitive operations in government or enterprise settings. Fork and customize this diagram on Diagrams.so to adapt IP ranges, add redundancy, or integrate additional security appliances. Consider adding a secondary WAN link and HA firewall pair for production deployments requiring 99.9% uptime.
People also ask
How do I design a secure enterprise network with VLAN segmentation, firewall policies, and centralized management for 45 users?
This diagram shows a complete enterprise topology using Fortigate 60F firewall with FortiGuard WAF/IPS/IDS, Cisco Catalyst 3650 L3 core switch for VLAN routing, and six isolated VLANs (VLAN10 leadership, VLAN20 admin, VLAN30 print, VLAN40 camera, VLAN50 guest, VLAN99 management). Windows Server 2025 provides AD/DNS/DHCP, file services, and print isolation, while Synology NAS handles backup and For
- Domain:
- Networking
- Audience:
- Network administrators and IT architects designing enterprise VLANs and multi-zone security topologies
Generated by Diagrams.so — AI architecture diagram generator with native Draw.io output. Fork this diagram, remix it, or download as .drawio, PNG, or SVG.
