Networking and Connectivity

Structured cabling, switching, Wi-Fi and routing designed as one system — not device installation in isolation.

The inside of a network cabinet, with blue ethernet patch leads dressed in parallel bundles from a patch panel into a rack-mounted switch, fibre leads entering from one side and port activity LEDs lit.
Enterprise network reference architectureInternet and leased-line services terminate on an edge router, which feeds a core switch. The core distributes over fibre to access switches in each floor or block, which in turn power Wi-Fi access points over PoE. Users, servers and CCTV sit on separate VLANs, and the core and edge are backed by UPS protection.SEGMENTED LANFibrePoEISP LINKSPrimary and backupEDGE ROUTERWAN terminationCORE SWITCHLayer 3 distributionUPSClean powerACCESS SWITCHFloor / block AACCESS SWITCHFloor / block BWI-FISurveyed coverage

Reference system

A labelled office or campus topology showing WAN, firewall, core, access, Wi-Fi, CCTV and guest segmentation.

Symptoms

When this matters

If any of these describe your environment, this is the conversation to have.

  1. 01Wi-Fi coverage is inconsistent and nobody has measured where it actually fails.
  2. 02CCTV, guest and corporate devices share the same flat network.
  3. 03Cabling was never labelled or documented, so faults take hours to trace.
  4. 04A new site or floor needs to be added without a clear standard to copy.
  5. 05Remote access exists but was never properly secured or reviewed.

Scope

What KINNEX delivers

A network is the foundation every other KINNEX layer depends on — CCTV, access control, servers and firewalls all sit on top of it. KINNEX designs the topology first, so segmentation, capacity and redundancy are planned before a single cable is run, not retrofitted afterwards.

  • Site survey, requirements, floor-plan review and wireless or cable pathway planning.
  • Structured cabling, CAT6 or CAT6A, fibre backbone, testing, labelling and as-built documentation.
  • Switching, routing, VLAN design, Wi-Fi, guest access, redundancy and secure remote connectivity.
  • Rack, patch panel, UPS and cable-management coordination.
  • Performance troubleshooting, heatmaps, capacity planning and multi-site standards.

Capability catalogue

Everything this covers

137 capabilities, scoped, sourced and delivered under one contract. Search for the exact term you use.

Campus and enterprise LAN20

Access, distribution and core designed for the traffic you actually carry, with headroom for what comes next.

  • Three-tier (access, distribution, core) and collapsed-core designs
  • Spine-leaf fabrics for data-centre and high-east-west traffic
  • Layer 2 and Layer 3 managed switches
  • Switch stacking and virtual chassis
  • MLAG, vPC and link aggregation (LACP)
  • STP, RSTP and MSTP loop prevention
  • VLAN design and inter-VLAN routing
  • Static, OSPF, EIGRP and BGP routing
  • HSRP, VRRP and first-hop redundancy
  • PoE, PoE+ and PoE++ (IEEE 802.3bt) power budgeting
  • Multigigabit access ports: 2.5G, 5G and 10GBASE-T
  • 10G, 25G, 40G and 100G uplinks with SFP+, SFP28 and QSFP optics
  • QoS and DSCP marking for voice, video and critical apps
  • Multicast: IGMP snooping and PIM
  • DHCP, DNS and IP address management (IPAM)
  • Port security, DHCP snooping, dynamic ARP inspection and storm control
  • 802.1X and network access control (NAC)
  • Zero-touch provisioning and configuration templates
  • Cloud-managed and on-premises controller models
  • Switch configuration backup and change tracking
Wi-Fi: design to validation19

Capacity first, coverage second, then measured after install. See the Wi-Fi tools below.

  • Wi-Fi 5, Wi-Fi 6, Wi-Fi 6E and Wi-Fi 7 (802.11ac, ax, be)
  • Predictive, passive and active site surveys
  • Post-installation validation survey and heat maps
  • High-density design: classrooms, auditoriums, canteens, stadiums
  • Indoor, outdoor and ruggedised access points
  • Directional, sector and omni antennas
  • Mesh and wireless backhaul
  • Controller-based, controllerless and cloud-managed WLAN
  • Guest Wi-Fi with captive portal: OTP, voucher, social and sponsor login
  • Guest user logging and retention as per Indian telecom guidelines
  • BYOD onboarding and device profiling
  • WPA2 and WPA3 Personal and Enterprise, RADIUS and 802.1X
  • Fast roaming (802.11r, k, v) for voice and video
  • Channel, width and power planning, DFS and 6 GHz
  • Band steering, airtime fairness and client load balancing
  • BLE, RTLS and Wi-Fi location analytics
  • IoT, scanner and handheld device segmentation
  • Hospital, warehouse, hotel and hostel Wi-Fi
  • Wi-Fi analytics, client health and capacity trends
WAN, internet and SD-WAN15

Links are bought from carriers; making several of them behave like one reliable network is engineering.

  • Internet leased line (ILL), broadband and FTTH
  • MPLS, VPLS and point-to-point or point-to-multipoint circuits
  • Dual-ISP load balancing and automatic failover
  • BGP multihoming and provider-independent IP space
  • 4G and 5G failover and primary links
  • VSAT and low-earth-orbit satellite for remote sites
  • SD-WAN with application-aware routing and templates
  • SASE and secure web gateway for branches
  • Site-to-site IPsec VPN, DMVPN and VXLAN overlays
  • Remote-access VPN, SSL VPN and ZTNA
  • Cloud on-ramps: AWS Direct Connect and Azure ExpressRoute
  • Link monitoring, jitter, latency and loss reporting
  • Carrier SLA tracking and fault escalation
  • Bandwidth planning and WAN optimisation
  • Static public IP, NAT, CGNAT workarounds and IPv6 readiness
Structured cabling and fibre20

The part of the network that outlives every switch. Built to standard, tested, labelled and documented.

  • Cat6, Cat6A and Cat8 copper, UTP and shielded
  • TIA-568, ISO/IEC 11801 and TIA-942 compliant design practice
  • OM3, OM4 and OM5 multimode and OS2 single-mode fibre
  • Fusion splicing, mechanical splicing and termination
  • OTDR, power-meter and Fluke DSX certification testing with reports
  • Permanent-link and channel testing
  • MPO and MTP trunks and pre-terminated assemblies
  • Patch panels, fibre enclosures (LIU) and ODFs
  • Horizontal, riser and campus backbone cabling
  • MDF, IDF and telecom room design to TIA-569
  • 42U and wall racks, cable management and cooling
  • Labelling and records to TIA-606
  • Containment: cable trays, trunking, conduit, HDPE duct, floor boxes
  • Underground fibre: trenching, duct blowing, manholes
  • Aerial and in-building riser fibre
  • Firestopping and LSZH, plenum and riser-rated cable
  • PoE-ready cabling: temperature rise and bundle sizing
  • Coax, CATV and Ethernet-over-coax retrofits
  • Passive optical LAN (GPON) for campuses and hospitality
  • As-built drawings and test-report handover
Voice, video and network services8
  • IP telephony, IP PBX and SIP trunking
  • Contact-centre and hunt-group routing
  • DNS, DHCP and NTP infrastructure
  • RADIUS and TACACS+ authentication, authorisation and accounting
  • Syslog, SNMP and NetFlow or sFlow collection
  • Load balancers and application delivery controllers
  • Web proxy and DNS filtering
  • Video conferencing network readiness
Data-centre and server-room networking7
  • Top-of-rack and end-of-row switching
  • Leaf-spine fabrics with VXLAN and EVPN
  • Fibre Channel and iSCSI storage networks
  • Out-of-band management networks and console servers
  • 10G, 25G, 40G and 100G server connectivity
  • Redundant power and dual-homed uplinks
  • Data-centre interconnect between sites
Multi-site and branch rollout19

Standardise once, deploy many times, track every site on one board.

  • Standard branch design with a golden configuration and single-line diagram
  • Branch-in-a-box and rack-in-a-box kits staged and tested before dispatch
  • Staging, configuration and burn-in at a central warehouse
  • Zero-touch and template-driven provisioning at scale
  • IP addressing plan with summarisation, naming and VLAN conventions
  • Master bill of quantities and per-site BOQ variants
  • Site-readiness checklists: power, rack space, cooling, ISP hand-off, access
  • Logistics, delivery tracking and receiving at each site
  • Parallel multi-crew execution with regional field teams
  • ISP circuit ordering, tracking and acceptance
  • Per-site acceptance testing and signed completion
  • Central monitoring cut-in and handover to operations
  • Phased go-live, change windows and rollback plans
  • Rollout dashboard: status, risks and blockers per site
  • Programme governance: PMO, weekly reviews, risk and issue logs
  • Per-site as-built documentation and asset tagging
  • Spares strategy by region and AMC onboarding per site
  • Post-rollout audit against the standard design
  • Pan-India delivery through local specialist teams under one contract
Outdoor, campus and special environments9
  • Campus-wide fibre rings and outdoor Wi-Fi
  • Point-to-point and point-to-multipoint wireless bridges
  • Hostel, hotel-room and residential-community networks
  • Warehouse and yard Wi-Fi for scanners and vehicle terminals
  • Hospital networks with clinical segmentation
  • Manufacturing and industrial networks (see Industrial and OT)
  • Event, stadium and temporary-site connectivity
  • Smart-city, smart-pole and township networks
  • Construction-site temporary networks
Assessment, design and documentation12
  • Network health check and architecture assessment
  • Topology discovery and asset inventory
  • Capacity, utilisation and bottleneck analysis
  • Single-point-of-failure and redundancy review
  • Cabling audit and re-certification
  • High-level and low-level design (HLD and LLD)
  • IP plan, VLAN plan and addressing documentation
  • BOQ, vendor comparison and migration plan
  • Cutover plan, rollback plan and change records
  • Performance baselining and iperf testing
  • Packet capture and root-cause troubleshooting
  • Factory and site acceptance testing
Operations and lifecycle8
  • 24x7 or business-hours monitoring under SOP and SLA
  • Configuration backup, change control and audit trail
  • Firmware and patch management
  • Capacity trending and growth planning
  • End-of-life and end-of-support planning
  • Critical spares and OEM back-to-back support
  • Wireless re-survey and optimisation
  • Annual network review and roadmap

The site, in 3D

One network from the riser to every floor

Fibre backbone up the building, structured cabling across each floor, Wi-Fi where people work, and links between buildings.

  • Fibre risers
  • Floor distribution
  • Wi-Fi
  • Site-to-site links

Real-time 3D illustration of a typical site, not a specific client project.

Use cases

Where this shows up

Typical situations that lead an organisation to this work.

01

A new office fit-out that needs cabling, Wi-Fi and switching designed from a blank floor plan.

02

An existing network being segmented so CCTV and guest traffic no longer share a VLAN with finance systems.

03

A multi-site business standardising network design so every branch is built the same way.

Planning tool

How many access points will the building need?

A first estimate from floor area, construction and the people using it, showing whether coverage or capacity sets the number.

The building
m²

Walls set how far each access point reaches.

The people and devices

Laptop, phone, tablet; add scanners or IoT.

%

Estimate

Access points

16APs

Set by coverage: the walls and floor area.

Needed for coverage16
Needed for capacity5

Active devices

210

Peak demand

630Mbps

PoE budget

320W

PoE+ (802.3at)

AP uplink

1 GbE

2.5 GbE preferred

How this is calculated

A wireless design must satisfy two limits, and the access point count is the larger. Coverage: each AP serves a cell sized for a usable 5 GHz signal (about −67 dBm, the usual target for voice and video), from roughly 110 m² behind brick and concrete to 420 m² on an open floor. Capacity: devices active together, against comfortable clients and realistic throughput per AP (Wi-Fi 5 30 clients / 250 Mbps; Wi-Fi 6 50 clients / 400 Mbps; Wi-Fi 6E 60 clients / 550 Mbps; Wi-Fi 7 75 clients / 800 Mbps).

These are conservative rule-of-thumb figures for budgeting. Ceiling height, glass, metal racking, lifts and neighbouring networks change the answer.

A predictive design on your floor plans, or an on-site survey, replaces the estimate with measured placement before any hardware is ordered.

Next: placement

See the signal on your own floor plan

Walls by material, access points where you put them, and a predicted heat map with coverage and roaming overlap.

Open the Wi-Fi heat map planner

Delivery method

How the work runs

Architecture before equipment. Validation before handover.

  1. Stage 01 of 6

    Assess

    Site survey, floor plans, device density and existing cabling condition.

  2. Stage 02 of 6

    Design

    Topology, VLAN segmentation, cabling routes and Wi-Fi coverage plan.

  3. Stage 03 of 6

    Implement

    Cabling, switching, routing and access point deployment.

  4. Stage 04 of 6

    Validate

    Cable testing, Wi-Fi heatmap verification and failover checks.

  5. Stage 05 of 6

    Document

    As-built diagrams, labelling schedule and VLAN reference.

  6. Stage 06 of 6

    Support

    Performance monitoring, capacity review and phased expansion planning.

How we take this on

One contract. The right specialist for every part

Your project is wider than any single team. We scope all of it, source all of it and carry the responsibility for all of it.

  1. 01

    Scope

    We survey, size and specify against standards and your operating reality, not against a brochure.

  2. 02

    Source

    Any make, any model, from the manufacturer, distribution or registered importers. GST-compliant invoicing, warranty and returns handled for you.

  3. 03

    Deliver

    KINNEX engineers do the work we do every day. Where a job needs a specialist, we bring in the right expert team as a sub-order under your single contract.

  4. 04

    Own

    One scope, one SOP, one SLA and one point of accountability, whoever is on site.

Standards and terms

Standards we design to, and the terms you will hear

Specifications are written against recognised standards. Here is the vocabulary, in plain language.

  • IEEE 802.3 (Ethernet)
  • IEEE 802.11 a/b/g/n/ac/ax/be (Wi-Fi)
  • IEEE 802.1Q (VLAN), 802.1X (port access), 802.1D/w/s (spanning tree)
  • IEEE 802.3ad (LACP) and 802.3af/at/bt (PoE)
  • TIA-568 and ISO/IEC 11801 (cabling)
  • TIA-569 (pathways), TIA-606 (labelling), TIA-942 (data-centre cabling)
  • IEC 61935 (cabling test methods)
  • ITU-T G.652 (single-mode fibre) and G.984 (GPON)
  • WPA3 (Wi-Fi security)
  • OSPF and BGP (IETF RFCs)
  • MEF carrier Ethernet
  • ISO/IEC 27001 aligned operating practices
Access, distribution, core
The three layers of a campus network: switches users plug into, the layer that aggregates them, and the backbone that joins everything.
PoE budget
The total power a switch can give to cameras, phones and access points. Exceed it and devices drop out.
VLAN
A way to split one physical network into separate logical ones, for example staff, guests, CCTV and servers.
LACP
Link aggregation: several cables used together as one faster, more resilient link.
SD-WAN
Software that steers traffic across several internet and private links, picking the best path for each application.
ILL vs broadband
A leased line has a guaranteed, symmetric bandwidth and a contracted repair time. Broadband is shared and best-effort.
MPLS
A carrier-managed private network joining your sites, with predictable performance.
BGP multihoming
Connecting to more than one ISP and advertising your own IP addresses to both, so a single failure does not drop you.
Wi-Fi 6 / 6E / 7
Wi-Fi generations. 6E adds the 6 GHz band; 7 adds wider channels and multi-link operation for lower latency.
OFDMA / MU-MIMO
Wi-Fi techniques that let one access point serve many devices at once, which is what makes dense rooms work.
RSSI and SNR
Signal strength, and how far that signal sits above background noise. Both matter for real throughput.
802.1X / NAC
Devices must prove who they are before the network lets them on, and are placed on the right VLAN automatically.
OM and OS fibre
OM3, OM4, OM5 are multimode fibre grades for short links; OS2 is single-mode for long distance.
OTDR
An instrument that sends light down a fibre and maps every splice, connector and fault along its length.
Certification testing
Testing cabling against a published standard and printing a pass or fail report, rather than only checking that it carries a signal.
Permanent link vs channel
Permanent link is the fixed cabling alone. Channel includes the patch cords at both ends.
SPOF
Single point of failure: one device or link whose loss takes the network down.
SOP and SLA
The documented procedures for running the network, and the response and restoration targets agreed for it.

Brands

Any make. Sourced, supplied and supported

We specify against your requirement and standards, then source the right product from the manufacturer, distribution or registered importers. Delivered, installed and supported under one contract.

Networking, Wi-Fi and SD-WAN

Switching, routing, wireless, SD-WAN and application delivery.

  • Cisco
  • Aruba
  • Juniper Networks
  • Ubiquiti
  • TP-Link
  • D-Link
  • Netgear
  • Cambium Networks
  • Fortinet
  • Huawei
  • MikroTik
  • Arista Networks
  • Dell Technologies
  • Zyxel
  • Cisco Meraki
  • Alcatel-Lucent Enterprise
  • Allied Telesis
  • Array Networks
Show 19 more brands
  • F5
  • Citrix
  • Radware
  • HPE
  • VMware
  • Palo Alto Networks
  • Tejas Networks
  • Nokia
  • Ericsson
  • Ruckus Networks
  • Extreme Networks
  • Ruijie Networks
  • Juniper Mist
  • Digisol
  • A10 Networks
  • Versa Networks
  • Peplink
  • Cradlepoint
  • Teltonika

Structured cabling and passive infrastructure

Copper, fibre, patching, racks, enclosures and test equipment.

  • Belden
  • TE Connectivity
  • Molex
  • Siemon
  • Nexans
  • Finolex
  • D-Link
  • Schneider Electric
  • HellermannTyton
  • Corning
  • Fluke Networks
  • Prysmian
  • Amphenol
  • Havells
  • Leviton
  • Hubbell
  • Krone
  • Rittal
Show 20 more brands
  • VIAVI
  • Fujikura
  • Tyco
  • Panduit
  • CommScope
  • Legrand
  • R&M
  • Polycab
  • KEI
  • RR Kabel
  • Sterlite Technologies
  • Systimax
  • Anchor
  • Optical Cable Corporation
  • Dintek
  • Netrack
  • Valrack
  • EXFO
  • Fibrefab
  • Lapp Group

Carriers and internet service providers

Leased lines, MPLS, broadband, SD-WAN underlay, 4G/5G and satellite.

  • Airtel
  • Jio
  • Vodafone Idea
  • BSNL
  • Hathway
  • Starlink
  • Hughes
  • Airtel Business
  • Jio Business
  • Cisco Meraki
  • Netgear
  • TP-Link
  • Huawei
  • Tata Communications
  • ACT Fibernet
  • Sify
  • Tata Tele Business Services
  • Spectra
Show 15 more brands
  • You Broadband
  • Excitel
  • Tikona
  • Alliance Broadband
  • Railtel
  • PowerGrid
  • Lumen
  • Nelco
  • Vi Business
  • GTPL
  • Den Networks
  • SITI Networks
  • Peplink
  • Teltonika
  • Cradlepoint

Firewalls and network security

Next-generation firewalls, UTM, VPN, secure web and zero trust access.

  • Sophos
  • Fortinet
  • Palo Alto Networks
  • WatchGuard
  • Barracuda Networks
  • Cisco Secure
  • Juniper Networks
  • SonicWall
  • Cloudflare
  • pfSense
  • OPNsense
  • Forcepoint
  • Netgear
  • Huawei
  • Ubiquiti
  • Tailscale
  • OpenVPN
  • WireGuard
Show 14 more brands
  • Array Networks
  • Kerio
  • Cisco Umbrella
  • Akamai
  • Imperva
  • F5
  • Radware
  • Check Point
  • Zscaler
  • Cato Networks
  • Netskope
  • Versa Networks
  • Stormshield
  • Untangle

Product names, logos and brands are property of their respective owners and are used for identification only. Don't see what you need? We can usually source it, including through registered importers.Ask us.

Technology fit

The technology categories this work draws on.

  • Enterprise switching and routing platforms
  • Managed Wi-Fi and access-point systems
  • Structured cabling and fibre-optic standards
  • VPN and secure remote-access gateways

Questions

Frequently asked questions

CAT6A suits higher-bandwidth runs and longer cable lengths than CAT6; fibre is used for backbone links between floors, buildings or racks where distance or interference rules out copper. The right choice depends on distances and future bandwidth needs, assessed during the site survey.

Through a heatmap survey after deployment, measuring signal strength and capacity across the actual floor plan rather than assuming coverage from access-point placement alone.

Yes. Networks are commonly upgraded floor by floor or site by site against a documented standard, so disruption is contained and each phase is validated before the next begins.

Through VLAN segmentation and firewall policy, so each traffic class is isolated and a compromise in one segment does not expose the others.

As-built network diagrams, a VLAN and IP addressing reference, cable labelling schedule and Wi-Fi coverage report.

Request a network assessment

Tell us the site, the constraint or the outcome you need, and we will come back with the right next step.