REF-01Reference scenarioLogistics & Warehousing
Resilient multi-site network for a distribution group
A reference architecture for connecting three facilities with centrally managed security, Wi-Fi and failover.
Published
This is a planning example written by EngineSpire to show how we would approach the problem. It is not a completed client project, and its outcomes are design targets rather than measured results.
The challenge
A growing distribution organization needs dependable access to cloud ERP and warehouse systems across three sites. Independent circuits and inconsistent local configurations make outages difficult to diagnose and security policy difficult to maintain.
The solution pattern
The proposed design uses dual-carrier SD-WAN at critical sites, standardized switching, segmented enterprise Wi-Fi, high-availability perimeter security, site-to-site encryption, central configuration backup and service-level monitoring. A phased cutover and documented rollback plan protect warehouse operations.
How the work would be phased
- PHASE 01
Discover and baseline
Inventory circuits, devices, configurations and application paths at all three sites. Measure current performance and review outage records so the design fixes real failure points.
- PHASE 02
Design the standard
Define the address plan, the corporate, warehouse, CCTV and guest segments, SD-WAN path policies, firewall high availability and a Wi-Fi design based on surveys with stock on the shelves.
- PHASE 03
Pilot at one site
Stage equipment centrally, then prove carrier and device failover, scanner roaming and ERP access at the least critical facility before touching the others.
- PHASE 04
Cut over the remaining sites
Move each facility in an agreed change window with a written rollback plan and acceptance tests signed off by warehouse operations.
- PHASE 05
Hand over and operate
Deliver as-built diagrams, configuration backups, monitoring dashboards and runbooks, and schedule repeat failover tests.
Trade-offs and considerations
- Two carriers only add resilience if their cables take physically different paths into the building. Confirm the routes with both providers.
- SD-WAN licensing and support are recurring costs. A dual-link firewall can be enough for a small site with few cloud applications.
- Older warehouse scanners may support only certain Wi-Fi bands or security modes. Check device capabilities before fixing the wireless design.
- Failover that worked at handover can break after later changes. Repeat the tests on a schedule rather than trusting the first result.