CIO / VP of IT
A network that stops being the suspect in every outage call, with one accountable partner from design through operations.
Network · Platforms we sell and architect
Data Center
Networking.
Networks fail at the seams: the undocumented uplink, the unmanaged closet switch, the renewal nobody co-termed. ModernOps designs campus and data center networks for segmentation, supportability and boring, uneventful uptime, then documents them so the design survives contact with staff turnover.
24/7 NOC
30-day onboarding
PA + AZ regions
Infrastructure / Network Director
A resilient target architecture, a controlled refresh path, and renewals consolidated into leverage instead of a drawer of surprises.
Network Engineering Lead
Real design work: port math, failure domains, fabric and wireless standards, delivered with configurations archived and topology documented.
Operations / NOC Lead
Monitored health, ticketed changes, documented escalation and a takeover path for the gear nobody remembers installing.
03The decision
Key design
considerations.
01 /
Collapsed core or three tiers.
Mid-market sites rarely need a dedicated aggregation layer. Collapsing core and distribution cuts hardware, licensing and failure domains, when the port math supports it. We run the port math first.
02 /
Cloud-managed or controller-led.
Meraki-style operations versus Catalyst-class capability is an operating-model decision, not a spec-sheet one. Who watches the dashboard decides more than the datasheet does.
03 /
The renewal pile.
Most environments carry a drawer of misaligned support contracts across OEM and third-party maintenance. Co-terming them into one event recovers real budget and turns renewal season into a negotiation.
04 /
Segmentation is the security budget you already own.
VLAN and policy design does more for lateral-movement risk than most tool purchases, and it has to be designed into the switching, not stapled on after.
05 /
Documentation is the difference between an incident and an outage.
Configurations archived, topology mapped, failover behavior written down. Tribal knowledge is a single point of failure with a badge.
04What we architect
Reference
architectures.
Pattern 01
Stacked Catalyst-class core pairs with lightweight access switching across closets: fewer boxes, fewer licenses, cleaner failure domains. Our standard mid-market pattern, and the one we spec repeatedly.
Pattern 02
Nexus-class leaf-spine and high-density 25 and 100 GbE designs for virtualization and storage traffic, sized for east-west reality instead of north-south nostalgia.
Pattern 03
Dedicated SAN fabric or converged 25 GbE for array traffic, designed with the storage practice rather than bolted on after. The array is only as fast as the path to it.
Pattern 04
Repeatable site kits: switching, access points and configuration templates that make the next office a shipment, not a project. Includes wireless assessments and surveys for warehouses and hard environments before anyone buys an AP.
Pattern 05
Networks we did not build, brought under management: configuration archives, topology mapping, monitoring onboarding and a findings list, so the environment stops being a mystery before anyone changes it.
Pattern 06
Support contracts co-termed across OEM and third-party maintenance, structured for leverage at renewal time and mapped against actual hardware lifecycle instead of autopilot.
05The platforms
Supported
platforms.
The deepest practice on this page: Catalyst campus and collapsed cores, Nexus data center fabric, MDS storage networking, Meraki cloud-managed sites and wireless across all of it, specified, deployed and supported in production. Plus Umbrella and Duo through the security practice.
Campus switching and access points deployed at branch scale, the strongest alternative pattern where Aruba operations fit the team.
Security-integrated networking: segmentation gateways and campus edge designed jointly with the switching architecture. Deep firewall, ZTNA and identity content lives on the Security & Identity page.
FortiGate as the branch and campus edge where price-performance decides, including SD-WAN patterns, designed with the same segmentation intent. Full security depth on the Security & Identity page.
Also on the line card
Arista, Juniper, Brocade, Riverbed.
06The old model vs ModernOps
The ModernOps
difference.
| Dimension | The old model | ModernOps |
|---|---|---|
| Design | Boxes replaced like-for-like at refresh time | Port math, failure domains and segmentation designed before the bill of materials exists |
| Capacity | Sized by what was there before | Sized by measured traffic, east-west patterns and storage and virtualization demand |
| Operations | Tribal knowledge and an unmanaged closet switch | Configurations archived, topology documented, health monitored, changes ticketed |
| Renewals | A drawer of misaligned contracts on autopilot | Co-termed across OEM and third-party maintenance, negotiated as one event |
| Multi-site | Every location is a bespoke project | Repeatable site kits with templates, staged and shipped |
| Segmentation | A firewall at the edge and a flat network behind it | VLAN and policy design built into the switching with the security practice |
| Accountability | Reseller ships it, integrator leaves, your team inherits it | One team designs, sources, deploys, documents and can operate under 24/7 NOC |
07The first 30 days
The first
30 days.
| Phase | What happens | What you hold at the end |
|---|---|---|
| Assess and baseline · Days 0 to 10 | Discover the estate: inventory, configuration archives, topology mapping, lifecycle and support status, renewal inventory, utilization and wireless coverage where in scope. | A documented current state, a risk and lifecycle findings list, and a renewal map with co-term opportunities. |
| Design and quote · Days 10 to 24 | Produce the target architecture and standards: core and access design, fabric, wireless, segmentation intent. Register and price the bill of materials, sequence around lead times, land quick wins like monitoring onboarding. | A defensible design, a real quote, and visibility into the network you already own. |
| Validate and roadmap · Days 24 to 30 | Validate the plan against change windows and dependencies, finalize the phased rollout, deliver documentation and the cutover approach. | An executable refresh roadmap with documented rollback thinking, ready for procurement and scheduling. |
Scope control
Thirty days delivers the baseline, the design and the plan. Hardware lead times and multi-site rollouts then run in phases on their own schedule, which is how a forty-closet refresh happens without a forty-closet outage.
08Two paths, one team
Engagement
models.
This page is the assess, design, procure and deploy motion. Managed Network and the 24/7 NOC carry the daily discipline: monitoring, alert triage, ticketed changes and escalation, on networks we built or networks we inherited. Observability adds the visibility layer across all of it.
09Proof
Proven
results.
The collapsed core we keep speccing.
Stacked core pairs plus lightweight access has become our standard mid-market answer because it keeps surviving production: fewer failure domains, fewer licenses, cleaner troubleshooting at 2 a.m.
Site kits, not site projects.
Multi-location rollouts shipped as repeatable packages: switching, wireless and templates staged per site, deployed in waves across states without flying an engineer to every closet.
Renewals turned into leverage.
Co-terming support across OEM and third-party maintenance is a standing motion here, converting a drawer of surprise invoices into one negotiated event.
10FAQ
Frequently asked
questions.
01 /Collapsed core or three-tier: how do we know which we need?
Port count, closet distribution and east-west traffic decide. Most mid-market campuses collapse cleanly; large multi-building estates may still earn an aggregation layer. We show the math either way.
02 /Catalyst or Meraki for a growing campus?
It is an operating-model question. Meraki wins on dashboard simplicity for lean teams; Catalyst wins on depth and advanced capability. Mixed estates are common and legitimate.
03 /Do we really need 25 GbE for storage?
If flash arrays or hyperconverged storage ride the network, usually yes. The array is only as fast as its slowest path, and we design storage networking with the storage practice, not after it.
04 /Can you take over a network you did not build?
Yes. Takeover starts with configuration archives, topology mapping and monitoring onboarding, so the environment is documented before anyone changes it.
05 /Can you co-term our support renewals and mix in third-party maintenance?
Yes. We consolidate OEM and third-party contracts into one negotiated event and map coverage against actual hardware lifecycle, so nothing critical rides uncovered and nothing retired keeps billing.
06 /How do you handle multi-site rollouts?
Repeatable site kits: standardized switching and wireless configurations, staged and shipped per location, deployed in waves with remote hands where it makes sense.
07 /Do you do wireless surveys?
Yes, including warehouses and difficult RF environments, before hardware is purchased. Coverage math first, access points second.
08 /What documentation do we receive?
Configuration archives, topology diagrams, VLAN and segmentation design, failover behavior, as-built documentation and the runbooks to operate it.
09 /Do you run what you sell?
Yes. Managed Network and the 24/7 NOC operate networks we deployed and networks we inherited, under the same monitoring and ticketed-change discipline.
10 /How does this connect to our firewall project?
Segmentation intent is designed into the switching here and enforced at the edge there. The firewall, ZTNA and identity depth lives on the Security & Identity page, built by the same team so the two designs actually meet.
11Direct to an engineer
Tell us about
your network.
Topology, closets, renewals: whatever you have. We will baseline it and price the refresh honestly.