Managing networks across multiple locations

A network that works well in a single office starts to strain when a second and third location are added. As each location accumulates a different device, a different password and different settings, troubleshooting takes longer and security gaps become invisible.

A standard location template

Using the same configuration template for every location is the foundation of scalability. The template defines:

• The device types to use (firewall, switch, wireless access point).
• Network segments: users, guests, cameras, printers and the management network kept separate.
• An addressing plan: each location has its own address block, and blocks never overlap.
• Naming rules: a device’s name should show which location and role it belongs to.

When a new location opens, the template is applied and only the location-specific values change.

Connecting locations

How locations connect to the centre or to each other depends on where applications run. If most applications are in the cloud, a secure direct internet exit at each location may be enough. If access to an application running at the centre is needed, encrypted tunnels are set up between locations. Deciding this per application prevents unnecessary traffic from being routed through the centre.

Central monitoring

Across several locations, most problems appear in device logs before users notice them. With central monitoring:

• Connection drops and slowdowns are visible immediately.
• Whether device firmware is up to date can be tracked from a single screen.
• Configuration changes are recorded.

Access and permissions

Define who can access the devices at each location, and use personal accounts instead of shared passwords. Remote management should only be possible from the management network and with multi-factor authentication.

Documentation

Keeping a one-page document for each location saves a great deal of time when something goes wrong: the device list, address blocks, the internet provider and its support details, where the physical cabinet is and who is responsible. The document is updated whenever the configuration changes.

The result

The goal in multi-location network management is for every new location to look like the others. When a standard template, central monitoring and up-to-date documents come together, management effort does not grow at the same rate as the number of locations.