Home › Services › Greenfield network setup
Nobody ever gets a second greenfield
A new office, a new floor or a new entity, and the date is already out there. Every control that is painful to retrofit is nearly free while the floor is still empty. We survey it, design it to the controls a mid-size enterprise would be held to, roll it out, and stay on the hook for running it afterwards.
- Fee
- Fixed-fee design, then an AMC sized on the estate + GST
- Survey to handover
- 4–6 weeks
- Coverage
- On site anywhere in India
- Response times
- Agreed before the AMC starts, not after
Every control that is painful to retrofit is nearly free on a greenfield site.
Segmentation costs nothing to design in on day one and is a project once three hundred devices are already flat on one VLAN. The same is true of a management network kept off the user network, of switch configs under version control from the first commit, and of a guest network that was never quietly bridged to the corporate one because somebody needed a printer to work.
So we build a new site to the controls a mid-size enterprise would be held to, not to the controls a twenty-desk office can get away with, because the twenty-desk office becomes the hundred-desk office, and nobody ever gets a second greenfield.
Start with a survey, not a hardware quote
The fastest way to overspend is to buy the kit first.
Talk to us about thisThe fastest way to overspend on a network is to buy the kit first. We start with a site survey and a capacity plan: how many people, what they run, where the dead spots are, what the building will let you cable, and only then does anyone put a model number on paper.
- A firewall pair with a rule base somebody wrote deliberately, and a documented reason for every rule in it.
- Enterprise Wi-Fi from a coverage plan, sized for the density the floor will reach rather than the headcount on the day it opens.
- Switching and structured cabling co-ordinated with the fit-out, so the network is not the thing holding up the handover.
- Segmentation from the first day: corporate, guest, voice, cameras and building systems separated, and the management plane off the user network.
- Internet with a second path, and failover proven by pulling the cable before anybody moves in.
- Identity, DHCP, DNS and time services that are yours rather than a consumer router's defaults.
- An as-built (topology, addressing, VLANs, rule base, rack elevation), handed over current, and kept current afterwards.
Design and rollout
Proven by pulling the cable, not by reading the datasheet.
Talk to us about this- Routing and switching architecture, VLANs and segmentation designed to survive an audit rather than just to work.
- Enterprise Wi-Fi from a real coverage plan, including 6 GHz. Since 20 January 2026 the lower 6 GHz band (5925–6425 MHz) is licence-exempt in India for indoor low-power use: 500 MHz of clean spectrum that makes Wi-Fi 6E and Wi-Fi 7 worth specifying. If you have a refresh quote that doesn't mention it, ask why.
- SD-WAN, MPLS and broadband strategy, with failover proven by pulling the cable rather than by reading the datasheet.
- Perimeter and internal firewalls, VPN and secure remote access.
- Datacenter and rack build-out, structured cabling co-ordination, ISP liaison.
- Cloud interconnect: VPC and VNet design, direct connect, hybrid routing.
- Cutover run out of hours, with a rollback path agreed in writing.
- 24×7 monitoring on links, devices and throughput, with alerts tuned so that a page means something.
- An AMC with response and resolution SLAs, and people who know each site.
- Firmware, patch and configuration management under change control.
- Configuration backups and as-built documentation kept current, and kept yours.
- We chase the ISP and the OEM ourselves rather than forwarding you the ticket number.
- Moves, adds and changes: new floors, new sites, new headcount.
We take work wherever it is. Design, configuration, monitoring and out-of-hours support run remotely, so distance changes nothing about them. For work that needs hands on site we travel, and for a rollout we staff the site for its duration rather than flying in for a day.
On-site response times are agreed per site before an AMC starts. If your site is somewhere we can't reach in the time you need, we'll say so on the first call rather than write a number into a contract we can't honour.
Taking over a network you didn't build
Undocumented, lapsed contract, nobody wants to touch the firewall.
Talk to us about thisMost of what we adopt arrives undocumented, with a firewall rule base nobody wants to touch and a support contract that lapsed. The first thirty days are a documented as-is topology, a risk list, and the two or three changes worth making immediately. After that, business as usual.
What you walk away with
Yours to keep, and to hand to anyone else, including a provider that isn't us.
Talk to us about thisTopology, addressing, VLANs, firewall rules, documented, current, and handed over.
Proven by pulling the cable, not by reading the datasheet.
What to do now, next quarter and next year, with costs against each.
We chase the ISP and the OEM ourselves rather than forwarding you a ticket reference.
Asked before you ask
The ones that come up on nearly every first call.
Talk to us about thisDo you supply the hardware too?
Yes, and you buy it directly. Nothing routes through us and nothing is marked up. What you pay us is the work: a fixed fee for the sourcing exercise if you buy it on its own, or the engineering fee it already sits inside if this is part of a build. Never the box.
Which locations can you cover on-site?
Anywhere we can reach, in India or outside it.
Nothing about the work is regional: design, configuration and monitoring are remote, and for hands on site we travel or staff the site for the rollout. What does depend on location is the on-site RESPONSE time, so we agree that per site and write down the number we will hit rather than the one that reads well in a proposal. Ask us about a location and you will get a straight answer, not a postcode check.
We already have an AMC provider.
Then the useful thing is probably the two-week review rather than a pitch. You get a documented as-is topology and a risk list you can take to your existing provider. That is a perfectly good reason to buy it.
Can you work with our existing OEM relationships?
Yes. If you have standing agreements with a switch or firewall vendor, we'll design within them. We're not tied to any single OEM.
We're opening a new office. How early should we call you?
Before the fit-out contract is signed, if you can. Containment, riser access, room for a rack and where the ISP can physically terminate are all cheap to specify then and expensive to change later. A week of design at that point routinely saves more than it costs.
Not sure this is the one you need?
Tell us the symptom, not the service, and we'll say which of these applies, or that none of them do. A reply within one working day, from someone technical.
The rest of what we do
Most engagements start with one of these and grow into another.