Wireless & campus

Wireless that works, end to end

AP refresh, secure access and the campus network behind it, on the platform you run: Cisco, Meraki, Aruba or others.

Any enterprise platformSecure 802.1X accessEnd-to-end design, deployment and support
CAMPUS COREcore · collapsed core · fabric IDENTITYISE / CLEARPASS WAN /SD-WAN EDGE CLOUD ORCONTROLLER MGMT IDFIDFIDF WIRELESS ACCESS POINTS · ANY PLATFORM

The problem

Users blame the Wi-Fi. The cause is often somewhere else.

Slow or unreliable Wi-Fi usually comes down to four things. Here is what we find, what your users feel, and how we fix it.

The problem
What your users feel
How we fix it
End-of-life access points and controllers
Dead zones, dropped video calls, and hardware that no longer gets security patches.
New Wi-Fi 6E or Wi-Fi 7 access points on a supported controller or cloud platform
Access switches and uplinks that can't keep up
New APs plugged into old switches still run slow, and older PoE may not power them fully.
Refreshed access switching with modern PoE and uplinks sized to AP count and growth
Shared Wi-Fi passwords
Anyone with the password is on the network, including former employees and contractors.
802.1X identity-based access with Cisco ISE or Aruba ClearPass
Guests, IoT and staff on the same network
One compromised camera or guest laptop can reach payroll, file shares and business systems.
Segmented SSIDs and policies that keep guests, IoT and staff apart

Platforms

Your platform, our engineering

We design and deploy on the wireless and switching platform you already run, or help you move to a new one.

Cisco Catalyst

Catalyst wireless and switching, on-premises or cloud-managed.

Cisco Meraki

Cloud-managed APs, switches and security appliances.

HPE Aruba

Aruba wireless and switching with ClearPass access control.

Your platform

Other enterprise platforms, or a move from one to another.

Campus refresh

Choose the right campus architecture

Every campus refresh starts with the right design. We build and cut over all three.

SPINESPINELEAFLEAFLEAFLEAF VXLAN / EVPN OVERLAY

Campus fabric (VXLAN / EVPN)

Refresh into a spine-and-leaf campus fabric with a VXLAN / EVPN overlay, anycast gateways and segmentation built in.

Best for

  • Large or growing campuses
  • Strong segmentation and identity-based policy
  • One consistent design across buildings
CORECOREDISTDISTDISTDISTACCESSACCESSACCESSACCESS

Three-tier: core, distribution, access

Modernize a proven three-tier design: a redundant core, distribution pairs per building or zone, and new access stacks.

Best for

  • Multi-building campuses
  • Teams keeping a familiar operating model
  • Phased, building-by-building refreshes
CORE/DISTCORE/DISTACCESSACCESSACCESSACCESS

Collapsed core

Core and distribution combined into one redundant pair, with access switches homing directly to it.

Best for

  • Single buildings and smaller campuses
  • Lower cost and simpler operations
  • A clean path to a fabric later
Uplinks, port speeds and PoE are sized to your AP count, device mix and growth plan, not a one-size-fits-all number.

The layers behind the AP

Where a wireless-only vendor stops, we don't

Switching

Access and core sized for wireless traffic and PoE.

WAN edge

SD-WAN branch edge for site connectivity.

Security

Firewall and SaaS/web security policy.

Operations

Visibility and fault detection.

Secure wireless access

Every user and device in its place

Identity-based access with Cisco ISE or Aruba ClearPass, so each device lands in the right segment automatically.

Who connects
Access policy
Outcome
Corporate users & devices
802.1X on the corporate SSID
Seamless, secure access
IoT & building systems
Profiled and placed in an IoT segment
Contained risk
Guests
Isolated guest SSID, policy at the firewall
Internet-only access
Voice & collaboration
Prioritized end to end with QoS
Clear calls and meetings
Consistent coverage
Identity-based access
Operational visibility
Better user experience

Proof

Full campus lifecycle

Case study

Enterprise campus refresh

IDF switch replacement, core upgrades, wireless access point replacement and SD-WAN router upgrades, from discovery through hypercare.

Read the case →
Related

Network Access Control

802.1X, device profiling and segmentation with Cisco ISE or Aruba ClearPass, phased so you never lock out the business.

How it runs

How a refresh runs

Discovery

Site walk, coverage, cabling and closet discovery.

Design

Architecture, AP placement, SSIDs, segments and switching.

Staging

Hardware staged and configured before cutover.

Cutover

Building-by-building migration with backout plans.

Validation

Coverage, roaming and application testing, then hypercare.

Hand off

As-built documentation and runbooks.

Work with us

Start with a campus assessment

Begin with a campus and wireless assessment. Senior engineers and one point of contact from first call to final handoff.

THE AO
EXPERIENCE
Senior engineers, one point of contact and full documentation on every engagementStart a project