Local area network (LAN)
Working documentation: from 22 days
Price from 50000 roubles
We design local area networks that ensure fast data transfer, information protection and stable operation of the IT infrastructure - from calculating bandwidth to choosing equipment and building a network architecture.
We design local computer networks for offices, factories, commercial infrastructure facilities and distributed workspaces. We build the LAN architecture taking into account the number of users, type of traffic and security requirements, select equipment and lay out optimal data transmission channels. A properly designed local area network ensures uninterrupted operation of the service, reduced downtime and high speed of information processing.
Why is a LAN not “just a network”, but a critical infrastructure of a facility?
Stopping the local network in a commercial building is not an inconvenience, but a financial loss: downtime of cash terminals in a shopping center, unavailability of building management systems, failure of IP video surveillance, inability to work with 1C or ERP in production. Every minute of downtime is translated into specific rubles - and the cause of most network failures is not equipment failure, but architectural errors at the design stage: incorrectly chosen topology, lack of redundancy at key nodes, underestimated bandwidth or ignoring the electromagnetic environment of the facility.
AYU-Project designs local area networks for office centers, manufacturing plants, retail facilities, medical institutions and data centers. We develop design documentation and working documentation with full engineering study: hierarchical architecture, bandwidth calculation, VLAN segmentation scheme, redundancy policy and selection of active equipment for specific customer tasks - not according to a catalog, but based on the results of a technical audit of requirements.
What is LAN and how is it different from SCS?
LAN (local area network) is an active data transmission layer implemented on top of the physical cabling infrastructure. If SCS is pipes and wires, then LAN is what moves along them and how it is controlled. Switches, routers, firewalls, wireless controllers, server nodes and traffic control policies are all elements of LAN. It is the active layer architecture that determines how fast, reliable and secure the network operates, not the number of ports on the switch.
Regulatory design basis LAN for buildings and structures - SP 134.13330.2022 “Telecommunication systems for buildings and structures”, which, in terms of data transmission, establishes requirements for topology, bandwidth parameters, redundancy and network controllability. Separate requirements for industrial LANs for facilities with automated process control systems are determined by the standards of the series IEC 62443 and industry regulations.
How is the LAN architecture built?
A properly designed LAN is built on a three-level hierarchical model, where each level performs a clearly demarcated function, which ensures scalability, manageability and predictable behavior of the network under load.
Access Layer - connection point for end devices: workstations, IP phones, Wi-Fi access points, IP cameras, ACS terminals, PoE devices. Access switches aggregate traffic and transport it to a higher level. Key requirements: support for PoE/PoE+ (802.3af/at) or PoE++ (802.3bt), a sufficient number of ports with room for growth, support for 802.1X for device authentication.
Distribution Layer - aggregates traffic from several access switches, provides intersegment routing (L3 switching), applies traffic control policies and access control lists (ACLs). At this level, logical network zoning is implemented through VLAN - separation of corporate traffic, the ASU transformer substation technological network, the security systems network and the guest segment.
Core Layer - a high-speed transport route between distribution levels, server segment and nodes connecting to external channels. At this level, performance and fault tolerance are critical: link aggregation (LACP, IEEE 802.3ad) and redundancy in a ring with the RSTP/MSTP protocols (convergence time - units of seconds) or ERPS/EAPS (convergence time - less than 50 ms).
For facilities with a small number of nodes, the core and distribution layers can be combined into a single core/distribution layer, reducing hardware costs without losing functionality.
What is a VLAN and why is it needed in a LAN project?
VLAN (Virtual Local Area Network) is a technology for logically dividing a physical network into isolated broadcast domains without laying separate cables. This is one of the key LAN design tools for commercial and industrial facilities, which solves several problems at once.
Security - separation of traffic of different systems in a physically unified infrastructure. Typical scheme for a business center: VLAN of a corporate network, VLAN of security systems (video surveillance, ACS), VLAN of BMS/dispatching systems, VLAN of guest Wi-Fi (isolated from corporate resources), VLAN of network equipment management (available only to the administrator). Each VLAN is a separate broadcast domain; traffic between them passes only through the router or firewall using ACLs.
Load controllability - limitation of broadcast storm within one segment; reduction of parasitic traffic not related to a specific node.
Flexibility - switching a workstation to another segment occurs on the switch without physical reconnection of cables; QoS policies are applied at the VLAN level.
The development of a VLAN segmentation scheme is an obligatory part of our LAN project: it is at this stage that the requirements for security, system interaction and network access policy are agreed upon.
How is LAN fault-tolerant?
Fault tolerance is not a property of the equipment, but the result of a design decision. The same switch in different architectures provides either instant redundancy or multi-minute downtime in the event of a failure, depending on how channel redundancy is organized and how recovery protocols are configured.
The main fault tolerance mechanisms used in our projects:
- Link Aggregation (LACP/IEEE 802.3ad) - combining several physical channels into one logical one: if one port fails, traffic is automatically redistributed to the remaining sessions without interruption; at the same time, the summation of throughput is ensured;
- RSTP/MSTP (IEEE 802.1w/802.1s) - quick reconstruction of the logical topology when a link is broken; RSTP provides convergence in 1-6 seconds, MSTP allows you to balance the load between channels through independent trees for different VLANs;
- ERPS (ITU-T G.8032) / EAPS - ring backup with recovery time less than 50 ms; used at industrial facilities, where the delay in network restoration directly affects the technological process;
- Power Redundancy - switches of key levels are connected to uninterruptible power supplies (UPS) or through two independent inputs with automatic switching (ATS);
- Router Redundancy - VRRP/HSRP protocols provide automatic switching of the default gateway when the main router fails.
Industrial LAN and corporate: what is the difference?
Industrial LAN is a separate engineering discipline. An industrial network (TLAN - technological LAN) ensures data transfer between PLCs, USPDs, automated process control system servers, operator stations and telemechanics systems. The requirements for it are fundamentally different: deterministic delays, protection against electromagnetic interference, temperature range of industrial equipment, physical isolation from the corporate segment.
| Parameter | Corporate LAN | Industrial TLVS |
|---|---|---|
| Priority | Bandwidth, convenience | Determinism, reliability |
| Protocols | TCP/IP, STP, VLAN | Profinet, EtherNet/IP, IEC 61850, MODBUS TCP |
| Equipment | Commercial switches | Industrial version: IP54+, −40...+70°C |
| Topology | Hierarchical tree | Ring (ERPS/MRP) with <50 ms recovery |
| Insulation | VLAN | Physical + VLAN + Firewall |
| Downtime | Acceptable - seconds | Critical - milliseconds |
AYU-Project designs both corporate and industrial LANs, including the separation of corporate and technological segments and the organization of a demilitarized zone (DMZ) between them.
What is included in design documentation and working documentation on LAN?
Documentation for LAN is being developed in accordance with the requirements Government Decree of the Russian Federation No. 87 dated 16.02.2008 No. 87 (as amended on 21.10.2025) “On the composition of sections of project documentation and requirements for their content” and SP 134.13330.2022.
Design documentation stage includes:
- an explanatory note describing the architecture of LAN, justification of the topology and choice of hierarchy levels;
- a schematic diagram of the logical topology indicating the core, distribution and access levels;
- description of VLAN segmentation and intersegment interaction policy;
- justification for the choice of active equipment;
- description of reservation mechanisms.
Working Documentation Stage (WD) contains:
- a diagram of the physical topology of the LAN indicating the types and models of equipment, connection ports and cable types;
- logical topology diagram with VLAN segmentation, IP addressing, routes and reservation protocols;
- installation drawings for placing active equipment in telecommunication racks with patch cord layout;
- drawings for installing telecommunications equipment in premises (server room, data center, ERP);
- communication organization diagram;
- power supply circuit for active equipment, including UPS;
- VLAN table with network assignments, IP address ranges and policy descriptions;
- network monitoring and management scheme (NMS);
- specifications of equipment, products and materials;
- statement of quantities.
For which facilities do we design local area networks?
AYU-Project designs local area networks for a wide range of B2B facilities:
- Office and business centers - hierarchical LAN with VLAN segmentation by tenants and systems, managed Wi-Fi, IP telephony, integration with BMS;
- Shopping centers and retail - cash register networks, video surveillance networks and ACS, guest Wi-Fi, integration with ERP and cash register software;
- Industrial enterprises - separation of corporate and technological LAN, industrial switches for ASU transformer substation, TLVS in a ring topology with ERPS;
- Medical institutions - networks with high reliability and segmentation of MIS, medical monitors, IP radio communications and video surveillance systems;
- Data centers - high-density server networks with 40/100 Gbit/s channel aggregation, Spine-Leaf architecture, isolation of control and computing planes;
- Logistics and warehouse complexes - LAN for WMS, a network of RF terminals, PoE infrastructure for warehouse management systems.
Regulatory design basis LAN
Design is carried out in accordance with the following main documents:
- SP 134.13330.2022 “Telecommunication systems for buildings and structures. Basic principles of design" - regarding the requirements for data transmission networks of buildings;
- IEEE 802.1Q - VLAN virtual network standard;
- IEEE 802.1w (RSTP) / 802.1s (MSTP) - fast and multiple spanning tree protocols;
- IEEE 802.3ad (LACP) - channel aggregation;
- ITU-T G.8032 (ERPS) - ring redundancy Ethernet for industrial networks;
- IEC 62443 - cybersecurity of industrial networks and ASU transformer substation;
- GOST R ISO/IEC 27001 - information security management (in terms of requirements for network infrastructure segmentation);
- Government Decree of the Russian Federation No. 87 dated 16.02.2008 No. 87 (as amended on 21.10.2025) “On the composition of sections of project documentation and requirements for their content” - a mandatory section as part of the DD.
Cost and procedure for ordering design LAN
The cost of developing design documentation and working documentation is determined by the scale of the facility, the number of active devices and workstations, requirements for fault tolerance and security level, the presence of an industrial segment and the composition of integrated systems. Approximate calculation - using the online calculator on the website.
How to order the design of LAN: stages of work
-
Submit an enquiry - the consultation is free
Form on the website or phone: +7 (383) 375-73-77 / +7 (923) 743-73-77. Indicate the type of facility, estimated number of jobs, and whether there is an industrial or technology segment. -
Receive a Commercial Proposal Within 1 Business Day
CP with the scope of work, cost and timing. When ordering LAN together with SCS, FOCL or other sections of communication networks, there is a discount. -
Approve the ToR and sign the contract
We clarify the stage of documentation (DD, WD or technical working draft), the composition of VLAN segmentation, requirements for redundancy and security, the presence of an industrial segment and deadlines. The contract fixes the composition and cost. -
Technical audit of requirements and analysis of source data
We study architectural plans, the number and location of active devices, bandwidth and redundancy requirements. If there is an existing network, we conduct a topology audit and identify architectural errors. If necessary, we go to the site. -
Development of LAN architecture and VLAN segmentation
We design a three-level hierarchy (Core-Distribution-Access). We develop a VLAN segmentation scheme. For industrial facilities - TLVS with physical isolation and DMZ according to IEC 62443. We calculate the PoE budget for each switch cabinet. We develop an IP addressing scheme with reserve according to RFC 1918. -
Design Documentation (DD) Development
Set of DD for Government Decree of the Russian Federation No. 87 (as amended on 21.10.2025) and SP 134.13330.2022: explanatory note, schematic diagram of logical topology, description of VLAN and redundancy mechanisms. We eliminate the expert's comments free of charge. -
Preparation of Working Documentation (WD) and Delivery to the Client
Complete installation kit: physical and logical topology diagrams, rack installation drawings, power supply diagram (UPS/ATS), VLAN table with IP addresses, NMS diagram (SNMPv3/NetFlow), specifications with articles, bill of quantities. PDF and DWG formats.
To receive an accurate commercial proposal, leave a request: indicate the type and purpose of the facility, the approximate number of workstations and active devices, the available initial data - architectural solutions, design assignment, security requirements. The initial consultation is free, and we work remotely across Russia.
Our Advantages
How We Work
Projects
Frequently Asked Questions
For a standard office or retail facility - 2-4 weeks for the design documentation stage, 3-5 weeks for detailed design documentation. For industrial facilities with technological networks or data center infrastructure - individually. The terms are fixed in the contract.
Yes, a network monitoring and management scheme (NMS) is a mandatory component of a LAN design for facilities with a developed network infrastructure. Management protocols (SNMPv3, NetFlow/sFlow), monitoring platform, failure and overload notification policies are described. For industrial facilities, the LAN monitoring scheme is integrated into the overall dispatch system.
When developing a LAN architecture, a calculated scaling horizon is laid down - as a rule, 3-5 years. Free ports are reserved in access switches (20-25%), in patch panels - free positions, in racks - space for additional equipment. The IP addressing scheme is designed with a reserve of address space in each VLAN according to RFC 1918.
PoE (Power over Ethernet) is a technology for powering devices over a twisted pair cable: IP cameras, Wi-Fi access points, IP phones, ACS terminals. When designing LAN, the total power of the PoE load on each access switch must be calculated: incorrect calculation leads to overheating of the Cat 6A cable bundle or insufficient power of the switch power supply. We calculate the PoE budget for each switch cabinet as a mandatory part of the project.
Yes, for facilities with technological processes, complete physical or at least logical isolation of the automated process control systems and corporate segment networks is recommended. The demarcation requirements are determined by industry regulations and IEC cybersecurity standards 62443. Our project includes the development of an architecture with a DMZ zone and a firewall between the technological and corporate segments.
No. SKS - physical cabling infrastructure (cables, sockets, patch panels, cable trays): it determines which devices can be connected and at what distance. LAN is the active layer on top of SKS (switches, routers, firewalls, traffic control policies): it defines how these devices communicate. They are designed jointly, but represent independent engineering sections of PD.
Yes. If the design documentation is approved and has passed the examination, we develop only working documentation based on it. An approved set of design documentation will be required with a schematic diagram of the logical topology, a description of VLAN segmentation and justification of the equipment. Cost and terms are calculated individually.
State expert review is mandatory for capital construction projects with state funding and facilities under the influence of the Town Planning Code of the Russian Federation. For commercial properties without a building permit, a technical working design is sufficient. AYU-Project accompanies documentation through state or independent expert review and eliminates comments free of charge.
To get started, all you need is: architectural floor plans or general plan (PDF/DWG); approximate number of workstations and active devices (IP cameras, access points, PoE terminals); security and segmentation requirements (if TZ is available); information about the presence of ASU TP or industrial segment. We will clarify the missing data during a free initial consultation.
Yes. If the network was built without a design, this means there was no documented VLAN segmentation scheme, IP addressing and redundancy points. When expanding, replacing equipment or eliminating accidents, the administrator works blindly. In addition, for capital construction projects and facilities with government funding, the LAN section is mandatory as part of the design documentation for the Russian Government Resolution No. 87 (ed. from 21.10.2025). We also carry out retro-design - development of documentation for an existing network.
Licences and Certificates
