LAN / WAN Design
Local and wide area networks designed for the way your teams work: sensible VLAN segmentation, redundant paths, tuned routing and documented topology for single sites and multi-site operations.
LAN/WAN · Fibre · Wi-Fi · Server Rooms · Security
Network Architecture & Fibre Infrastructure for South African Businesses
We design, install and secure business networks from a ten-person office to a multi-site enterprise: structured cabling, fibre backbones, enterprise Wi-Fi, firewalls, failover and tidy, well-documented server rooms. Based in Margate, KwaZulu-Natal, working on site across KZN and delivering designs and remote configuration nationwide.
Site survey and topology design
Load-shedding resilient
Surge and lightning conscious
Full documentation handed over
WHAT IS NETWORK ARCHITECTURE?
The plan behind every fast, reliable connection
Network architecture is the design of how a business’s devices, buildings and internet connections are linked: the cabling and fibre, switches, Wi-Fi, firewalls, routing and backup paths. A good design keeps data moving quickly, keeps staff, guests and equipment separated securely, and keeps working when a line, a switch or the power fails.
Most slow or unreliable business networks did not fail: they grew without a plan. A router in a cupboard, access points added where there was a spare socket, one internet line, and a server room nobody dares to touch. Designing the network first, then building to the design, removes those weak points.
In South Africa the design must also survive load-shedding and lightning. That is why we size backup power for the network core, use fibre between buildings, and plan cabling and surge protection together. See how we scale from small business to enterprise, or book a site survey.
Core Network Engineering Services
We design, deploy and secure the physical and logical layers of your network, from the cable in the wall to the firewall at the edge.
Server Rooms & Structured Cabling
Rack layout, Cat6/Cat6A structured cabling, patch panels, labelling, airflow, and UPS power distribution. We also remediate messy "spaghetti" server rooms without unplanned downtime.
Fibre Backbones & Links
Fibre trenching, ducting, blowing, splicing and termination for building-to-building and campus backbones, plus ISP fibre-to-the-business hand-off design.
Enterprise Wi-Fi
Site-surveyed access point placement, controller-managed roaming and separate staff, guest and IoT networks, so coverage holds up in offices, warehouses, schools and lodges.
Network Security
Next-generation firewalls, secure site-to-site and remote-access VPNs, VLAN isolation, intrusion prevention, logging and security hardening, built in from day one.
Failover & Power Resilience
Dual-WAN failover (fibre plus 5G/LTE), SD-WAN where it pays off, and UPS or battery backup sized for the exact draw of your core network during load-shedding.
EVERY SIZE OF ORGANISATION
Network Design from Small Business to Enterprise
The same engineering standards at every size. What changes is the hardware, redundancy and governance, and you only pay for what you need.
Small Business
Reliable, tidy and secure networking for offices, practices and retail, without enterprise complexity or cost.
- Neat structured cabling and wall points
- Business Wi-Fi without dead zones
- Router hardening and basic firewalling
- UPS backup for router, switch and fibre ONT
- Separate guest Wi-Fi
Often completed in days
Medium Business
Growing teams need managed switching, segmentation and resilience. We build the foundation that scales with headcount.
- Managed switches and VLAN segmentation
- Dual-WAN failover (fibre plus 5G/LTE)
- Dedicated server cabinet or room design
- Controller-managed Wi-Fi access points
- Site-to-site VPNs for branches
Typically one to several weeks
Campus & Industrial
Factories, schools, estates and hospitals need high-capacity backbones and engineered resilience across buildings.
- Fibre campus backbone, splicing and testing
- High-availability firewall pairs
- IDS/IPS and traffic shaping (QoS)
- Environmental monitoring for server rooms
- Network monitoring and alerting
Planned in phases over weeks
Enterprise & Data Centre
Complex estates with formal governance. Architecture, routing and security aligned to your policies and your existing IT team.
- SD-WAN architecture and rollout
- BGP routing and multi-carrier redundancy
- Zero-trust network access (ZTNA) design
- Data centre rack, power and cooling layout
- Security and POPIA-aware control mapping
Scoped in phases over months
CHOOSING THE RIGHT MEDIUM
Fibre, Copper, Wireless or 5G Failover?
Most networks use a mix. We choose the medium for each link based on distance, bandwidth, power and surge risk.
| Option | Best for | Strengths | Watch-outs |
|---|---|---|---|
| Structured copper (Cat6 / Cat6A) | Desks, access points, cameras and in-building runs up to 100 m | Low cost, supplies PoE power, easy to terminate and maintain. Cat6A supports 10 Gbps over a full 100 m run. | Distance limit of 100 m, and copper between buildings can carry lightning-induced surges. |
| Fibre optic (single-mode / multi-mode) | Backbones, building-to-building links, long runs and high-bandwidth servers | Very high capacity over long distances, and no electrical conduction, which isolates buildings from surge and earth-potential problems. | Needs specialist splicing and test gear, and does not carry power. |
| Wireless links & Wi-Fi | Mobile devices, temporary sites and spans where trenching is not practical | Fast to deploy and flexible. Point-to-point links can bridge sites without digging. | Needs line of sight and a proper site survey, and shares spectrum with other users. |
| 5G / LTE failover | Backup internet when the primary fibre line fails | Independent of the fibre route, and quick to add to an existing router or firewall. | Coverage, data costs and latency vary by site and tower congestion. |
WHY NEXUS CORE
Networks Built for South African Conditions
Engineered, not just installed
Every network starts with a survey and a topology diagram, so cable runs, switch capacity and Wi-Fi coverage are designed against real requirements.
Load-shedding aware
Switches, firewalls, access points and the fibre ONT are powered through correctly sized UPS or battery backup, so the network outlasts the power cut.
Lightning and surge conscious
Coastal and Highveld storms destroy network gear. We use fibre between buildings, surge protection, proper earthing and sensible cable routing.
Security built in
Segmentation, hardened firewalls, secure VPNs and logging are part of the design, not an afterthought. General guidance on POPIA safeguards, not legal advice.
Documentation you own
Topology diagrams, port and patch schedules, IP plans and configuration backups are handed over so any competent engineer can support the network.
One team across IT and energy
Network, cloud, backup power and CCTV are planned together, which avoids finger-pointing between suppliers.
IS IT TIME?
Signs Your Network Needs an Upgrade
Wi-Fi drops or is slow in parts of the building
The server room is a tangle of unlabelled cables
One internet line failing stops the whole business
Load-shedding switches off routers, switches or servers
Guests, staff, cameras and tills share one flat network
Nobody can say what is plugged into which port
Buildings are linked by copper or ageing wireless bridges
A new branch, floor or warehouse is being fitted out
STEP BY STEP
Our Network Deployment Process
-
STEP 01
Site Survey & Audit
We inspect your premises, trace existing cabling, test current speeds and Wi-Fi coverage, and identify bottlenecks, single points of failure and security gaps.
-
STEP 02
Architecture & Design
You receive a topology diagram, hardware recommendations and a clear costed scope sized to your users, devices and growth plans.
-
STEP 03
Cabling & Deployment
We install structured cabling, splice fibre, mount cabinets and rack equipment neatly, working out of hours where needed to avoid disruption.
-
STEP 04
Configuration & Security
Firewalls are hardened, VLANs segregated, VPNs configured and Wi-Fi tuned for roaming and interference.
-
STEP 05
Testing & Handover
Every port is tested, failover is proven and you receive full documentation, labelling schedules and admin access.
AT HANDOVER
What You Receive
Topology & design pack
Logical and physical diagrams, IP and VLAN plan, hardware list and a clear budget.
Labelled, tested infrastructure
Every port is labelled, certified or tested, and failover is demonstrated before handover.
Configuration backups
Switch, firewall and controller configurations are exported and stored for fast recovery.
As-built documentation
Rack elevations, cable and patch schedules and admin credentials, handed over to you.
PROOF OF CAPABILITY
Recent Network Deployments
Enterprise Server Room & Fiber Backbone
View Project DetailsHOME PROVINCE
Network Engineers in KwaZulu-Natal
Our engineers are based in Margate on the South Coast and install on site across the province, from Port Edward and Port Shepstone to Durban, Ballito, Richards Bay and Pietermaritzburg. Local presence means faster surveys and faster fault response.
Network Services on the South Coast
MargatePort ShepstoneRamsgateShelly BeachUvongoSouthbroomPort EdwardHibberdeneScottburghAmanzimtoti
Network Services on the Durban Metro
DurbanUmhlangaPinetownWestvilleHillcrestChatsworthUmlazi
Network Services on the North Coast & Inland
BallitoRichards BayEmpangeniPietermaritzburgHowickNewcastle
NATIONWIDE
Network Design Serving All of South Africa
We deploy physical infrastructure on site in KwaZulu-Natal and arrange scheduled installation projects in Gauteng, the Western Cape and other provinces. Network design, firewall and VPN configuration, and remote monitoring are delivered securely online to every province.
Network Engineering in Eastern Cape
Gqeberha (Port Elizabeth)East LondonMthatha
Network Engineering in Free State
BloemfonteinWelkom
Network Engineering in Gauteng
JohannesburgPretoria (Tshwane)SandtonCenturionMidrandEkurhuleni
Network Engineering in KwaZulu-Natal
MargatePort ShepstoneRamsgateShelly BeachUvongoSouthbroomPort EdwardHibberdeneScottburghAmanzimtotiDurbanUmhlangaPinetownWestvilleHillcrestChatsworthUmlaziBallitoRichards BayEmpangeniPietermaritzburgHowickNewcastle
Network Engineering in Limpopo
PolokwaneTzaneen
Network Engineering in Mpumalanga
Mbombela (Nelspruit)eMalahleni (Witbank)Secunda
Network Engineering in North West
RustenburgPotchefstroom
Network Engineering in Northern Cape
KimberleyUpington
Network Engineering in Western Cape
Cape TownStellenboschPaarlGeorge
BEYOND SOUTH AFRICA
Network Consulting Across Africa
For selected projects we design and configure networks for organisations in other African countries, accounting for variable bandwidth, power reliability and local carriers, with local partners for physical installation where needed.
Network Consultants for Southern Africa
NamibiaBotswanaZimbabweZambiaMozambiqueEswatiniLesotho
Network Consultants for East & West Africa
KenyaTanzaniaUgandaNigeriaGhana
Industries We Connect
Corporate OfficesManufacturing & WarehousingSchools & UniversitiesHospitals & ClinicsHotels, Lodges & ResortsRetail & MallsMining & EngineeringLogistics HubsEstates & Body CorporatesAgriculture & Agri-businessLocal Government & Public SectorData Centres & Server Rooms
QUESTIONS
Network Architecture FAQ
What does a network architect or network engineer do?
A network architect designs how your devices, sites and internet connections fit together: cabling, switches, Wi-Fi, firewalls, routing and redundancy. A network engineer builds and configures it. We do both, so the design that is drawn is the network that is delivered.
Do you design networks outside Margate and KwaZulu-Natal?
Yes. Our head office is in Margate on the KZN South Coast, and we deploy on site across KwaZulu-Natal. We design and configure networks remotely for clients in all nine provinces, with scheduled site visits for cabling, fibre and installation work in Gauteng, the Western Cape and beyond.
What is the difference between standard Wi-Fi and enterprise Wi-Fi?
Consumer routers struggle with many devices and cannot hand a device smoothly from one access point to the next. Enterprise Wi-Fi uses site-surveyed, centrally managed access points that support roaming, handle many simultaneous users, and keep staff, guests and devices on separate networks.
Can you fix our messy server room?
Yes. We remediate server rooms in planned stages: documenting what is connected, installing patch panels and cable management, labelling, improving airflow and rationalising power. Work is scheduled out of hours where needed to avoid downtime.
Do you install fibre optic cable?
Yes. We provide ducting, blowing or pulling, splicing, termination and testing for building-to-building and campus backbones. Fibre between buildings also isolates them electrically, which helps protect equipment from lightning-induced surges. Trenching is arranged through our civil partners where required.
Fibre or copper cabling: which should we use?
Use structured copper (Cat6 or Cat6A) for desks, access points and cameras within 100 m of a switch, and fibre for backbones, long runs and links between buildings. Most business networks use both.
How do you keep the network running during load-shedding?
A network is only as reliable as its power. We calculate the draw of your router, fibre ONT, switches, firewall and access points, then size UPS or battery backup for the required runtime. For longer outages, see our solar and hybrid energy work. Remember that your ISP’s equipment and neighbourhood fibre network also need power.
What is SD-WAN and do we need it?
SD-WAN intelligently steers traffic across multiple internet links, such as fibre and 5G, based on quality and policy. It is most valuable for multi-branch businesses and those relying on cloud applications. Smaller single-site businesses are often well served by simple dual-WAN failover.
Do you configure firewalls and secure remote access?
Yes. We deploy and configure business-grade firewalls from established vendors, set up secure site-to-site and remote-worker VPNs, segment the network with VLANs, and enable intrusion prevention and logging. Ongoing monitoring and support can be agreed separately.
Can you help us move to the cloud and keep the network fast?
Yes. A cloud migration depends on a solid network, so we size your internet links, failover and firewalls alongside the move. See our cloud infrastructure services.
How long does a network project take?
A small office can often be completed in days, a medium business in one to several weeks, and campus or enterprise projects are planned in phases. Your proposal includes a realistic timeline after the site survey.
How much does a network design and installation cost?
It depends on the number of cabling points, the equipment, distances, and whether fibre or trenching is involved. We quote after a site survey with an itemised scope, so you can compare it fairly with other suppliers. Book a site survey to get started.
Do you work with other African countries?
For selected projects, yes. We can design and configure networks remotely for organisations in countries such as Namibia, Botswana, Zimbabwe, Zambia, Mozambique, Kenya and Nigeria, with local partners for physical installation where needed.
Can you assess network damage after a surge or lightning strike?
Yes. We test switches, routers, PoE equipment, ONTs and cabling, and can provide a written damage report for your insurer. See our insurance assessments service.
RELATED SERVICES
A network works best with cloud, power and planning
Does Your Network Need an Upgrade?
Stop living with slow Wi-Fi, dropped connections and a messy server room. Book a site survey and we will show you what a properly engineered network looks like for your business.
Book a Site SurveyCloud Infrastructure IT Consultancy Solar & Backup Power Project Gallery All Services Contact Us