Satit Chula Network Overhaul Project
A comprehensive enterprise network infrastructure overhaul featuring migration from legacy Cisco equipment to modern FortiGate and MikroTik solutions. The project involved complete network redesign with OSPF multi-area routing, 100Gbps backbone implementation, Active Directory forest deployment, and centralized management of 65 switches across the campus network.
Infrastructure Transformation
See the dramatic improvement from the legacy disorganized infrastructure to the modern, professionally managed network installation.
Before: Legacy Infrastructure
Legacy Challenges
- • End-of-life devices with no security updates
- • Cisco ASA firewall with outdated threat signatures
- • Disorganized cable management
- • Mixed equipment from different vendors
- • Difficult maintenance and troubleshooting
- • No centralized management system
- • Aging hardware with limited capabilities
After: Modern Installation
Modern Improvements
- • Professional cable management and labeling
- • Standardized MikroTik equipment throughout
- • Easy maintenance and rapid troubleshooting
- • Centralized management and monitoring
- • Modern hardware with advanced capabilities
Transformation Impact
Project Gallery
Network Authentication Portal
Custom captive portal with successful authentication display
MikroTik Switch Stack
Multiple CRS units with organized cabling
Migration Overview
Legacy Infrastructure
- • Cisco ASA Firewall with outdated threat signatures
- • End-of-support devices lacking security updates
- • Cisco Catalyst Core Switch infrastructure
- • 65 aging network switches requiring replacement
- • Limited centralized management capabilities
- • Fragmented security and authentication systems
Modern Solution
- • FortiGate with current threat intelligence and signatures
- • Actively supported devices with regular security updates
- • MikroTik CCR2216 L3 Switch with 100Gbps backbone
- • Complete MikroTik switch deployment (65 units)
- • Centralized management and atomic upgrades
- • Integrated Active Directory authentication
Technical Implementation
Network Infrastructure
FortiGate Next-Generation Firewall
Primary network security with integrated threat protection and policy management
MikroTik CCR2216 Core Switch
High-performance L3 switching with 100Gbps backbone connectivity
OSPF Multi-Area Routing
Scalable dynamic routing protocol for efficient campus network traffic management
Authentication & Security
Active Directory Forest
Complete directory services with centralized user and computer management
Single Sign-On (ADFS)
Seamless authentication across all network services and applications
RADIUS WiFi Authentication
Enterprise wireless security through Network Policy Server integration
Key Features
Security & Compliance
Critical Security Upgrade
The legacy Cisco ASA firewall had reached end-of-support with outdated threat signatures unable to detect modern cyber threats. The FortiGate replacement provides current threat intelligence, automatic signature updates, and next-generation security features including SSL inspection, application control, and advanced malware protection. This upgrade was essential to maintain campus network security in today's threat landscape.
Compliance & Logging
FortiAnalyzer implementation ensures comprehensive logging and compliance monitoring across the entire network infrastructure. The system provides detailed audit trails, security event correlation, and compliance reporting capabilities required for educational environments.
Project Impact & Results
Successfully transformed the entire campus network infrastructure from legacy Cisco equipment to modern, centrally-managed FortiGate and MikroTik solutions. The overhaul provided enhanced security through integrated firewall and content filtering, dramatically improved performance with 100Gbps backbone (100x increase from 1Gbps legacy), simplified management through centralized administration, and comprehensive compliance logging capabilities.
Network Performance Improvements
Operational Efficiency Gains
Reduced Management Overhead
Centralized configuration management significantly reduces manual setup time and eliminates configuration drift across the 65-device network infrastructure.
Streamlined Upgrade Process
Atomic updates enable simultaneous deployment across all network devices, ensuring consistent firmware versions and reducing maintenance windows.
Result: Unified management platform enables rapid deployment and maintains consistent configuration across the entire campus network.
Security Enhancement
Modern threat protection, integrated content filtering, and comprehensive logging provide enhanced security posture compared to legacy infrastructure.
Scalability & Future-Proofing
100Gbps backbone and modular architecture provide extensive room for growth and integration of emerging technologies.
Technologies Used
Need Network Infrastructure Overhaul?
Contact us to discuss modernizing your network infrastructure with enterprise-grade solutions.
Contact Us