Back to engineering
Enterprise network architecture
Corporate Multi-Zone Network
A four-zone enterprise network lab built around dual-hub DMVPN, segmentation, redundancy, and shared services.
I built this project to work through how headquarters, a DMZ, operations, finance, and marketing could stay separated while still using shared management and security services.
View the repository
What I used
Tools and technologies
Cisco ASADMVPNIPsecOSPFHSRPVLANZBFNAT
What it covers
The main parts of the project
- Dual-hub encrypted connectivity across four enterprise zones
- Gateway and switching redundancy through HSRP
- Central services, DMZ, management, and security boundaries
- Operational services for NTP, SYSLOG, DNS, DHCP, and identity
Design notes
Why I made these choices.
Segmentation
Departments, services, management, and public-facing systems remain separated by explicit network boundaries.
Resilience
Dual hubs and redundant gateways keep the architecture useful beyond a single-path lab.
Operational visibility
Central NTP and SYSLOG provide a consistent foundation for troubleshooting and auditing.