The corporate headquarters baseline architecture for the office building, plus a hardened IT/OT boundary separating it from a plant-floor industrial network sized, secured, and made redundant on its own terms.
The project brief: a manufacturing facility with a 40,000 sq ft office building running this program's baseline architecture, and a 220,000 sq ft, 12-line production floor running an entirely separate OT network behind a Purdue Model industrial DMZ. This module walks the VLAN and IP addressing plan across office and OT zones, two worked calculations — sizing the OT VLAN directly from a fixed per-line device count, and industrial wireless coverage split between ceiling-level and line-level RF zones — plus the IT/OT boundary's controlled data flows, a jump-host-based remote access design for vendors, and ring-topology redundancy fitted to how devices are physically arranged along a production line.
It closes by naming exactly how the plant floor's design decisions each trace back to the industrial environment's own constraints, layered on top of — not replacing — the baseline office network. The full worked numbers, bill of materials, and design reasoning are part of the unlocked module below.