Expertise
Industrial and corporate networks
A plant network that does not stop production: segmented, redundant, documented.
What the solution consists of
We build a plant network as a system: from the cabinet on the shop floor to the server room and remote sites, with redundancy at every level.
Industrial segment
Switches in shop-floor and substation cabinets: ring topology, dual power feeds, industrial temperature range, DIN-rail mounting.
OT and IT segmentation
The process network is separated from the office network by a firewall; data is exchanged only under agreed rules through a DMZ.
Backbone
Fibre links between shops, substations and the server room: link aggregation, redundant routes, patch panels with records.
Core and server room
Redundant core switches; SCADA and metering servers connected by two links to different switches.
Remote sites
VPN and IPsec over carrier links, a backup link of a different physical type, routing with automatic failover.
Documentation
L1/L2/L3 diagrams, address plan, VLAN tables, configurations and a change log in a version-controlled repository.
How it works: a scenario
A link failure in a ring of industrial switches: the standby link opens within a fraction of a second and the PLCs stay connected to the control room.
Normal operation
PLC data reaches the control room over the working side of the ring; the standby link is blocked by the ring protocol.
Link failure
A damaged cable between two switches: the working path disappears and the ring detects the break.
Standby path
The ring protocol opens the blocked link and traffic takes the detour; the control room sees the event and the new path on the diagram.
Recovery
The maintenance team repairs the break, the ring closes and the standby link goes back to waiting.
What we do
- Network survey: topology, link utilisation, points of failure, equipment out of vendor support
- L2/L3 architecture: VLAN, OSPF and BGP routing, QoS for telecontrol and voice
- RSTP, MRP and ERPS ring redundancy; industrial switches for DIN-rail and rack mounting
- LACP link aggregation, dual connection of servers and controllers
- OT and IT segmentation, firewalling, a DMZ for data exchange
- VPN and IPsec to remote sites and contractors, backup links of a different physical type
- Structured cabling: copper and fibre, patch panels, labelling, records
- Wireless segments on the industrial site: Wi-Fi and radio bridges where cable is impossible
- Network monitoring: availability, utilisation, events; alerts to the control room
- Documentation: diagrams, address plan, configurations, change management procedure
How the work goes
Survey
We capture the actual topology and configurations, measure utilisation and record the points of failure. The result is a report and as-is diagrams.
Design
Target architecture, address plan, equipment specification, a switchover plan by maintenance windows.
Supply and installation
Equipment to the specification; configurations are assembled and checked on a test bench before the site visit.
Switchover and testing
Work in agreed windows with a rollback option. Test programme: failure of a link, a node and a power feed.
Support
Monitoring, upkeep of configurations and the change log, scheduled maintenance under the contract.
Typical tasks
A shop-floor network without redundancy
We build a ring on industrial switches, add a second path to the control room and verify failover by taking a link down.
Subnets cannot reach each other
We tidy up the address plan and configure routing and firewall rules.
No diagrams or credentials
We capture the actual topology and configurations, restore access to the equipment and hand over the documentation.
Telecontrol is sluggish on a shared network
We move process traffic into separate VLANs with QoS priority and eliminate broadcast storms.
A remote site on a single link
We add a backup link of a different physical type and automatic route failover.
Equipment is discontinued
Step-by-step replacement without stopping production: a new ring next to the old one, migration section by section.
What the customer receives
Diagrams and address plan
As-is and to-be L1/L2/L3 diagrams, VLAN and address tables, port labelling.
Specification and configurations
Equipment list, configurations of all nodes, description of redundancy and firewall rules.
Test reports
Switchover test programme and reports, acceptance reports, instructions for the operations team.
Result: a redundant network accepted after testing, and a full set of documentation for the operations team.
Questions
Can a network be modernised without stopping production?
Yes. New nodes are assembled next to the existing ones; the switchover proceeds section by section in agreed windows with a rollback option.
Do you work with equipment from different manufacturers?
Yes. We design on standard protocols: RSTP, MRP, OSPF, LACP, IPsec. The manufacturer is agreed with the customer according to their standards and the availability of spare parts.
What do you need from the customer for a survey?
Access to the site and the equipment, any existing diagrams and a contact in the operations team. If there are no diagrams, we capture the topology ourselves.
Does a small network need segmentation?
Yes, if controllers and office workstations share one network: separating the process segment with a firewall is a basic protection measure. More in the cybersecurity section.
09Contacts
Let us discuss your engineering task
Describe the site and the task: survey, modernisation, integration or support. We will reply and propose a format of work.
What happens after you get in touch
- Phone
- +7 777 824 89 99 (WhatsApp)
- info@net-core.kz
Contact us directly
Call us, message us on WhatsApp or send an e-mail — tell us about the site and the task.