
Networking Blueprint
Networks supplied and connected.

Networking Blueprint
Networks supplied and connected.
What to ask every vendor.
What to specify for enterprise campus, branch and data-center networks, how it recovers from each failure, and how to test it.
1,500
Users at head office
10G
To every Wi-Fi 7 access point
1 Tb/s
Stack bandwidth at access
2 × 100G
Uplinks per access stack
99.99% target
Campus core availability
< 1 s target
Convergence, one link or core loss
All three documents, in one place.
Ask AI about this blueprint
All three documents, in one place.
Ask AI about this blueprint

Who it is for.
For the head of infrastructure of an organization with one head office, one to three branches and two data centers. The campus network predates Wi-Fi 6E, the WAN predates SD-WAN, and the design has to survive a procurement review and an audit. Sized for 1,500 users at head office, three branches of 100 to 250 users, two data centers 40 km apart, cloud services in two hyperscalers.
What is in, what is out.
In: campus access, distribution and core; Wi-Fi 7; branch SD-WAN; data-center interconnect over dark fiber or leased wavelength; out-of-band management; the handover documents. Out: data-center leaf-spine fabrics, zero-trust policy design and AI compute fabrics, each covered by its own design.
Tested at the first build.
Five principal architects write the designs. Each name is on the document.

Cisco
for campus and WAN
Two-tier campus,
collapsed distribution
Catalyst 9300X-48HX
at the access layer
A fixed Catalyst 9500X pair
at the core
Wi-Fi 7 on the CW9178I
access point
2 × 400GbE, encrypted,
between the data centers
Where it applies.
Questions about this design.
Talk to an expertCisco Catalyst 9300X and 9500X switches, CW9178I Wi-Fi 7 access points, a CW9800M controller pair, and NCS 1014 chassis for the data-center interconnect.
Data-center leaf-spine fabrics (Data Center Blueprint), zero-trust and NAC policy design (Security Blueprint) and AI compute fabrics (AI & Data Blueprint).
Mark Winston, Principal Network Architect.
No. It names rules it helps a buyer meet, such as PCI DSS v4.0.1. The buyer's assessor decides compliance, and Symbeeo holds no certification.


