Campus-Wide Network Transformation for India’s Largest Multi-National Lifestyle Organisation
How Frontier Business Systems designed and deployed a high-availability, multi-campus enterprise network serving 4,000+ users across two massive factory locations spanning over 250 acres each. How Frontier Business Systems designed and deployed a high-availability, multi-campus enterprise network serving 4,000+ users across two massive factory locations spanning over 250 acres each.
Situation
When one of India's most recognised multi-national lifestyle organisations decided to unify its sprawling manufacturing infrastructure under a single enterprise-grade network, the scale of the challenge was immediately apparent. The organisation operates two large factory campuses, each exceeding 250 acres, housing thousands of employees, operational technology systems, and critical business applications — all of which demand uninterrupted, high-speed connectivity. Prior to this engagement, network infrastructure across the two facilities had grown organically over years, resulting in a fragmented, vendor-inconsistent environment that struggled to keep pace with business demands. Increasing workforce density, digital factory initiatives, and the need for centralised Voice over IP communications across all internal users had pushed the legacy infrastructure to its limits. The organisation approached Frontier Business Systems with a clear mandate: design, supply, and deploy a modern, resilient, and scalable campus-wide network that could support over 4,000 users across both facilities without disruption to manufacturing operations during the transition.
“The brief was clear — no downtime on the factory floor, full redundancy, and a network capable of supporting the organisation for the next decade.” “The brief was clear — no downtime on the factory floor, full redundancy, and a network capable of supporting the organisation for the next decade.”
Key challenges the organisation faced
● Massive geographic spread: Each plant covering 250+ acres, requiring long-range optical fibre connectivity to reach every distribution block reliably.
● Zero downtime requirement: Active 24/7 manufacturing operations meant any cut-over had to be executed with surgical precision and full rollback capability.
● Legacy fragmentation: Inconsistent Layer 2 and Layer 3 configurations, no centralised policy enforcement, and gaps in network visibility across both sites.
● Voice infrastructure gap: No enterprise-grade VoIP solution in place, with internal communications relying on fragmented and unreliable alternatives.
● Security posture: No unified firewall strategy, leaving factory systems exposed and lacking clear traffic segmentation between operational and corporate networks.
Solution Architecture
Frontier Business Systems designed a hierarchical, high-availability campus network architecture spanning both factory locations. The solution leveraged Cisco for the switching and routing fabric and Cisco Call Manager for enterprise VoIP, while deploying Fortinet Next Generation Firewalls at each distribution block for granular security enforcement. At the heart of the design is a Core Switch Distribution (CSD) layer consisting of two redundant Cisco core switches connected via a 2x40G inter-switch link, providing the high-bandwidth backbone required to sustain thousands of concurrent sessions across both campuses. The core layer is further protected with an Always-On High Availability (HA) design, ensuring failover in the event of any single component failure.
Network Architecture Overview
The campus is divided into four distribution blocks — LU1, LU2, EW1, and EW2 — each serving a distinct section of the factory floor. Connectivity from the core to each distribution block is delivered via Port Channel bundles of 2x10G, providing 20G of aggregated bandwidth per uplink with link-level redundancy. Each distribution block houses redundant Cisco distribution switches interconnected at 10G, forming a local ring that eliminates single points of failure at the access tier. Fortinet firewalls are deployed at each distribution block in HA pairs, enforcing security zones between operational technology (OT) networks, internal corporate traffic, and internet-bound flows. This architecture ensures that a compromise or event in one zone cannot propagate laterally into adjacent segments — a critical requirement in a manufacturing environment. All campus inter-building connectivity is delivered over Optical Fibre Cable (OFC), with long-range OFC deployed where buildings are separated by distances that preclude standard short-range optics. Ethernet cable is used for final-leg access layer connectivity within each building.
Architecture Component Summary
|
Layer
|
Technology
|
Specification
|
|---|---|---|
|
Core Layer |
Cisco Core Switches (x2 HA) |
2x40G Inter-switch Link, HA Design |
|
Core-to-Distribution Uplinks |
Port Channel (LAG) |
2x10G = 20G per uplink |
|
Distribution Blocks |
Cisco Distribution Switches |
LU1, LU2, EW1, EW2 — 10G ring |
|
Security |
Fortinet NGFW (HA Pairs) |
Per-distribution block, zone-based policy |
|
Long-Range Campus Links |
OFC (Single-mode) |
Core to remote distribution buildings |
|
Short-Range Links |
OFC (Multi-mode) |
Intra-building distribution to access |
|
Access Layer |
Cisco Access Switches |
Ethernet to end devices |
|
Voice |
Cisco VoIP / Call Manager |
All 4,000+ internal users |
By the Numbers
The scale of this deployment is best understood in numbers. Frontier Business Systems designed and executed the complete network transformation across both factory campuses:
● 2 factory locations: Both plants fully networked under a single unified architecture with centralised management.
● 250+ acres per plant: Long-range OFC deployed across the campus to bridge large inter-building distances reliably.
● 4,000+ internal users: Covered by the Cisco VoIP and CallManager solution for unified internal communications.
● L3 and L2 switching: Complete routing and switching fabric deployed with VLAN segmentation, inter-VLAN routing, and redundant Layer 3 paths.
● Zero unplanned downtime: Phased cut-over methodology ensured manufacturing operations continued without interruption throughout the deployment.
Outcomes & Benefits
The completed campus network transformation delivered measurable, lasting outcomes across operational efficiency, security posture, and workforce productivity:
- Unified, High-Availability Campus Fabric : Both factory locations now operate under a single, coherent network architecture with consistent policy enforcement and centralised visibility. The dual-core HA design eliminates single points of failure at the most critical layer, ensuring business continuity for 24/7 manufacturing operations.
- Dramatically Improved Network Performance : The deployment of 40G core interconnects and 20G Port Channel uplinks to each distribution block has eliminated the bandwidth bottlenecks that previously impaired application performance. Users experience consistently low-latency connectivity regardless of location on the campus.
- Enterprise-Grade Security at Every Segment : Fortinet NGFW deployment at each distribution block — in HA pairs — introduced zone-based security policy enforcement across the campus. OT/IT network segmentation significantly reduced the attack surface, protecting critical manufacturing systems from both internal lateral movement and external threats.
- Unified Internal Communications via Cisco VoIP : The deployment of Cisco CallManager across both campuses replaced fragmented communication tools with a single enterprise telephony platform. All 4,000+ internal users now benefit from high-quality voice, extension-based dialling, and the operational efficiencies that come with a centralised call management system.
- Future-Ready Infrastructure : The modular, hierarchical architecture is designed for scale. Additional distribution blocks, access switches, and wireless overlays can be added as the organisation grows — without requiring architectural redesign. The organisation now has the network foundation needed to support IoT, smart manufacturing, and digital transformation initiatives.
Technical Deep-Dive
- Core Switch Distribution (CSD) Design : The CSD layer forms the network’s nerve centre. Two Cisco core switches are deployed in a high-availability configuration, interconnected via a 2x40G Port Channel (80G effective bandwidth at the core). This active-active design distributes traffic load across both core devices while providing instantaneous failover should either device experience a fault. Each core switch services two distribution blocks — one core handling LU1 and LU2, the other handling EW1 and EW2 — with cross-connects ensuring that any core failure can be absorbed without traffic loss.
- Distribution Block Architecture (LU1, LU2, EW1, EW2) : Each of the four distribution blocks is built around a pair of redundant Cisco distribution switches interconnected at 10G, creating a local resilient ring. Uplinks to the core are delivered as 2x10G Port Channels, yielding 20G of aggregated bandwidth per block with link-level redundancy. Fortinet firewalls are deployed in HA pairs at each distribution block, providing stateful inspection and zone-based policy enforcement. Traffic between OT systems on the factory floor and corporate network segments is inspected and governed at this layer, preventing any unauthorised lateral movement.
- Optical Fibre Cabling Strategy: Given the scale of each campus — over 250 acres — optical fibre was the only viable medium for inter-building connectivity. Long-range OFC (single-mode) was deployed on spans where building-to-building distances exceeded the capability of multi-mode optics. Short-range OFC (multi-mode) was used within buildings and between adjacent structures. Both Cisco long-range and short-range CWDM/SFP modules, as well as Fortinet optical modules, are deployed to match transceiver specifications to span lengths.
- L3 and L2 Switching Fabric : The network implements a full L3 routing and L2 switching fabric. Layer 3 routing is handled at the distribution layer and above, with each distribution block functioning as the default gateway for its VLANs. OSPF or static routing (per site design requirements) is used to provide optimal path selection between distribution blocks. Layer 2 domains are constrained to individual distribution blocks to minimise broadcast domain size and improve network stability across the large campuses.
How We Did It
Deploying a campus-wide network across two 250-acre active manufacturing plants — without interrupting operations — requires more than technical expertise. It demands a disciplined methodology, deep stakeholder engagement, and a project governance model built for complexity.
- Discovery & Assessment : Frontier Business Systems conducted a detailed site survey across both campuses, documenting existing infrastructure, cabling routes, building layouts, and live traffic patterns. This assessment formed the foundation for the high-level and low-level design documents.
- Architecture Design & Validation : The campus network architecture was designed in our labs and validated against the client’s operational requirements before a single device was shipped to site. HA failover scenarios, bandwidth utilisation projections, and VoIP quality testing were all completed in a pre-deployment environment.
- Phased Deployment Approach: Rather than a single big-bang cut-over, the deployment was executed in phases — one distribution block at a time. Each block was built, tested, and verified before the next was activated. This phased approach eliminated the risk of campus-wide impact from any single deployment event.
- Zero-Downtime Cut-Over : All final cut-overs from legacy to new infrastructure were executed during scheduled maintenance windows, with full rollback plans in place. Manufacturing operations were never interrupted, and the transition was invisible to the factory floor.
- VoIP Integration & Testing: Cisco CallManager was deployed centrally and integrated with all distribution blocks. Dial plans, extension schemes, and call routing policies were configured and tested comprehensively before go-live, ensuring every internal user had working voice communication from day one.
- Handover & Knowledge Transfer: On completion, Frontier Business Systems conducted a structured handover to the client’s internal IT team — including documentation of the full architecture, operating procedures, and a knowledge transfer programme to ensure the team could manage and extend the network independently.
A Network Built for Scale, Security, and the Future
This deployment stands as a testament to what is possible when deep technical expertise, rigorous project discipline, and a genuine commitment to operational continuity come together on a project of significant scale. For the client, the result is more than a network refresh. It is a strategic foundation that can now support smart manufacturing initiatives, expanded digital services, and a workforce that demands reliable, high-quality connectivity across every square metre of both campuses. For Frontier Business Systems, it reinforces our position as the partner of choice for large-scale enterprise network transformations across manufacturing and industrial sectors in India.
Table of Contents
Explore Latest Posts
Technology Capabilities
Switching, Routing & Wireless
NGFW (Next Gen Firewall)
SDA (Software Define Access)
Data Center Switching
SIEM SOAR
SDWAN (Software Define WAN)
VOIP (Call Manager)
ACI (Application Centric Installation)
WAF/WAAP
NAC (Network Access Control)
Table of Contents
How Frontier Business Systems designed and deployed a high-availability, multi-campus enterprise network serving 4,000+ users across two massive factory locations spanning over 250 acres each. How Frontier Business Systems designed and deployed a high-availability, multi-campus enterprise network serving 4,000+ users across two massive factory locations spanning over 250 acres each.
Situation
When one of India's most recognised multi-national lifestyle organisations decided to unify its sprawling manufacturing infrastructure under a single enterprise-grade network, the scale of the challenge was immediately apparent. The organisation operates two large factory campuses, each exceeding 250 acres, housing thousands of employees, operational technology systems, and critical business applications — all of which demand uninterrupted, high-speed connectivity. Prior to this engagement, network infrastructure across the two facilities had grown organically over years, resulting in a fragmented, vendor-inconsistent environment that struggled to keep pace with business demands. Increasing workforce density, digital factory initiatives, and the need for centralised Voice over IP communications across all internal users had pushed the legacy infrastructure to its limits. The organisation approached Frontier Business Systems with a clear mandate: design, supply, and deploy a modern, resilient, and scalable campus-wide network that could support over 4,000 users across both facilities without disruption to manufacturing operations during the transition.
“The brief was clear — no downtime on the factory floor, full redundancy, and a network capable of supporting the organisation for the next decade.” “The brief was clear — no downtime on the factory floor, full redundancy, and a network capable of supporting the organisation for the next decade.”
Key challenges the organisation faced
● Massive geographic spread: Each plant covering 250+ acres, requiring long-range optical fibre connectivity to reach every distribution block reliably.
● Zero downtime requirement: Active 24/7 manufacturing operations meant any cut-over had to be executed with surgical precision and full rollback capability.
● Legacy fragmentation: Inconsistent Layer 2 and Layer 3 configurations, no centralised policy enforcement, and gaps in network visibility across both sites.
● Voice infrastructure gap: No enterprise-grade VoIP solution in place, with internal communications relying on fragmented and unreliable alternatives.
● Security posture: No unified firewall strategy, leaving factory systems exposed and lacking clear traffic segmentation between operational and corporate networks.
Solution Architecture
Frontier Business Systems designed a hierarchical, high-availability campus network architecture spanning both factory locations. The solution leveraged Cisco for the switching and routing fabric and Cisco Call Manager for enterprise VoIP, while deploying Fortinet Next Generation Firewalls at each distribution block for granular security enforcement. At the heart of the design is a Core Switch Distribution (CSD) layer consisting of two redundant Cisco core switches connected via a 2x40G inter-switch link, providing the high-bandwidth backbone required to sustain thousands of concurrent sessions across both campuses. The core layer is further protected with an Always-On High Availability (HA) design, ensuring failover in the event of any single component failure.
Network Architecture Overview
The campus is divided into four distribution blocks — LU1, LU2, EW1, and EW2 — each serving a distinct section of the factory floor. Connectivity from the core to each distribution block is delivered via Port Channel bundles of 2x10G, providing 20G of aggregated bandwidth per uplink with link-level redundancy. Each distribution block houses redundant Cisco distribution switches interconnected at 10G, forming a local ring that eliminates single points of failure at the access tier. Fortinet firewalls are deployed at each distribution block in HA pairs, enforcing security zones between operational technology (OT) networks, internal corporate traffic, and internet-bound flows. This architecture ensures that a compromise or event in one zone cannot propagate laterally into adjacent segments — a critical requirement in a manufacturing environment. All campus inter-building connectivity is delivered over Optical Fibre Cable (OFC), with long-range OFC deployed where buildings are separated by distances that preclude standard short-range optics. Ethernet cable is used for final-leg access layer connectivity within each building.
Architecture Component Summary
How Frontier makes it happen being a system integrator means something specific its not about selling boxes its about taking responsibility for the outcome making sure the technology actually works the way its supposed to for the people who depend on it every day Frontiers approach starts with listening we take time to understand both the business context and the technical requirements before we recommend anything from there we design infrastructure solutions tailored to each customers situation deploy and integrate systems with minimal disruption and stay involved through ongoing managed services and support that end-to-end involvement is what separates a real integration partner from a vendor customers dont just get new technology they get technology that performs delivers measurable value and continues to evolve alongside their needs
|
Layer
|
Technology
|
Specification
|
|---|---|---|
|
Core Layer |
Cisco Core Switches (x2 HA) |
2x40G Inter-switch Link, HA Design |
|
Core-to-Distribution Uplinks |
Port Channel (LAG) |
2x10G = 20G per uplink |
|
Distribution Blocks |
Cisco Distribution Switches |
LU1, LU2, EW1, EW2 — 10G ring |
|
Security |
Fortinet NGFW (HA Pairs) |
Per-distribution block, zone-based policy |
|
Long-Range Campus Links |
OFC (Single-mode) |
Core to remote distribution buildings |
|
Short-Range Campus Links |
OFC (Multi-mode) |
Intra-building distribution to access |
|
Access Layer |
Cisco Access Switches |
Ethernet to end devices |
|
Voice |
Cisco VoIP / Call Manager |
All 4,000+ internal users |
By the Numbers
The scale of this deployment is best understood in numbers. Frontier Business Systems designed and executed the complete network transformation across both factory campuses:
● 2 factory locations: Both plants fully networked under a single unified architecture with centralised management.
● 250+ acres per plant: Long-range OFC deployed across the campus to bridge large inter-building distances reliably.
● 4,000+ internal users: Covered by the Cisco VoIP and CallManager solution for unified internal communications.
● L3 and L2 switching: Complete routing and switching fabric deployed with VLAN segmentation, inter-VLAN routing, and redundant Layer 3 paths.
● Zero unplanned downtime: Phased cut-over methodology ensured manufacturing operations continued without interruption throughout the deployment.
Outcomes & Benefits
- The completed campus network transformation delivered measurable, lasting outcomes across operational efficiency, security posture, and workforce productivity:
- Unified, High-Availability Campus Fabric : Both factory locations now operate under a single, coherent network architecture with consistent policy enforcement and centralised visibility. The dual-core HA design eliminates single points of failure at the most critical layer, ensuring business continuity for 24/7 manufacturing operations.
- Dramatically Improved Network Performance : The deployment of 40G core interconnects and 20G Port Channel uplinks to each distribution block has eliminated the bandwidth bottlenecks that previously impaired application performance. Users experience consistently low-latency connectivity regardless of location on the campus.
- Enterprise-Grade Security at Every Segment : Fortinet NGFW deployment at each distribution block — in HA pairs — introduced zone-based security policy enforcement across the campus. OT/IT network segmentation significantly reduced the attack surface, protecting critical manufacturing systems from both internal lateral movement and external threats.
- Unified Internal Communications via Cisco VoIP : The deployment of Cisco CallManager across both campuses replaced fragmented communication tools with a single enterprise telephony platform. All 4,000+ internal users now benefit from high-quality voice, extension-based dialling, and the operational efficiencies that come with a centralised call management system.
- Future-Ready Infrastructure : The modular, hierarchical architecture is designed for scale. Additional distribution blocks, access switches, and wireless overlays can be added as the organisation grows — without requiring architectural redesign. The organisation now has the network foundation needed to support IoT, smart manufacturing, and digital transformation initiatives.
Technical Deep-Dive
- Core Switch Distribution (CSD) Design : The CSD layer forms the network’s nerve centre. Two Cisco core switches are deployed in a high-availability configuration, interconnected via a 2x40G Port Channel (80G effective bandwidth at the core). This active-active design distributes traffic load across both core devices while providing instantaneous failover should either device experience a fault. Each core switch services two distribution blocks — one core handling LU1 and LU2, the other handling EW1 and EW2 — with cross-connects ensuring that any core failure can be absorbed without traffic loss.
- Distribution Block Architecture (LU1, LU2, EW1, EW2) : Each of the four distribution blocks is built around a pair of redundant Cisco distribution switches interconnected at 10G, creating a local resilient ring. Uplinks to the core are delivered as 2x10G Port Channels, yielding 20G of aggregated bandwidth per block with link-level redundancy. Fortinet firewalls are deployed in HA pairs at each distribution block, providing stateful inspection and zone-based policy enforcement. Traffic between OT systems on the factory floor and corporate network segments is inspected and governed at this layer, preventing any unauthorised lateral movement.
- Optical Fibre Cabling Strategy: Given the scale of each campus — over 250 acres — optical fibre was the only viable medium for inter-building connectivity. Long-range OFC (single-mode) was deployed on spans where building-to-building distances exceeded the capability of multi-mode optics. Short-range OFC (multi-mode) was used within buildings and between adjacent structures. Both Cisco long-range and short-range CWDM/SFP modules, as well as Fortinet optical modules, are deployed to match transceiver specifications to span lengths.
- L3 and L2 Switching Fabric : The network implements a full L3 routing and L2 switching fabric. Layer 3 routing is handled at the distribution layer and above, with each distribution block functioning as the default gateway for its VLANs. OSPF or static routing (per site design requirements) is used to provide optimal path selection between distribution blocks. Layer 2 domains are constrained to individual distribution blocks to minimise broadcast domain size and improve network stability across the large campuses.
How We Did It
Deploying a campus-wide network across two 250-acre active manufacturing plants — without interrupting operations — requires more than technical expertise. It demands a disciplined methodology, deep stakeholder engagement, and a project governance model built for complexity.
- Discovery & Assessment : Frontier Business Systems conducted a detailed site survey across both campuses, documenting existing infrastructure, cabling routes, building layouts, and live traffic patterns. This assessment formed the foundation for the high-level and low-level design documents.
- Architecture Design & Validation : The campus network architecture was designed in our labs and validated against the client’s operational requirements before a single device was shipped to site. HA failover scenarios, bandwidth utilisation projections, and VoIP quality testing were all completed in a pre-deployment environment.
- Phased Deployment Approach: Rather than a single big-bang cut-over, the deployment was executed in phases — one distribution block at a time. Each block was built, tested, and verified before the next was activated. This phased approach eliminated the risk of campus-wide impact from any single deployment event.
- Zero-Downtime Cut-Over : All final cut-overs from legacy to new infrastructure were executed during scheduled maintenance windows, with full rollback plans in place. Manufacturing operations were never interrupted, and the transition was invisible to the factory floor.
- VoIP Integration & Testing: Cisco CallManager was deployed centrally and integrated with all distribution blocks. Dial plans, extension schemes, and call routing policies were configured and tested comprehensively before go-live, ensuring every internal user had working voice communication from day one.
- Handover & Knowledge Transfer: On completion, Frontier Business Systems conducted a structured handover to the client’s internal IT team — including documentation of the full architecture, operating procedures, and a knowledge transfer programme to ensure the team could manage and extend the network independently.
A Network Built for Scale, Security, and the Future
This deployment stands as a testament to what is possible when deep technical expertise, rigorous project discipline, and a genuine commitment to operational continuity come together on a project of significant scale. For the client, the result is more than a network refresh. It is a strategic foundation that can now support smart manufacturing initiatives, expanded digital services, and a workforce that demands reliable, high-quality connectivity across every square metre of both campuses. For Frontier Business Systems, it reinforces our position as the partner of choice for large-scale enterprise network transformations across manufacturing and industrial sectors in India.
Explore Latest Posts
The Infrastructure That Powers Everything You Build.
Organizations today operate across hybrid environments where employees, data, and applications are scattered across multiple locations — often simultaneously. Next-generation servers, modern storage, and AI capabilities form the intelligent backbone that modern businesses actually need.
The Infrastructure That Powers Everything You Build.
Organizations today operate across hybrid environments where employees, data, and applications are scattered across multiple locations — often simultaneously. Next-generation servers, modern storage, and AI capabilities form the intelligent backbone that modern businesses actually need.