We design, configure and maintain business computer networks — from a single office to distributed locations. We specialise in MikroTik devices and also work with Cisco, Ubiquiti and other vendors: router and firewall configuration, managed switches, VLAN segmentation and company Wi-Fi.
MikroTik configuration — from basics to advanced
MikroTik offers an excellent capability-to-price ratio, but it demands knowledge — badly configured it can be both a bottleneck and a security hole. We cover the full range:
- MikroTik router configuration from scratch — addressing, NAT, routing, port forwarding, QoS and bandwidth limits.
- Firewall — rules based on least privilege, protection for services exposed to the internet, blocking scanners and brute-force attacks.
- Wi-Fi and CAPsMAN — central management of access points, one seamless network across the office with smooth roaming, a separate guest network.
- Tunnels between branches — IPsec, WireGuard, EoIP: joining company locations into one network.
- Backup links and LTE — automatic failover to a second link, LTE modems configured as backup.
- Hotspot — a network for guests or customers with separate access, limits and terms of use.
VLAN segmentation — why it matters
In many companies everything sits in one flat network: staff computers, printers, CCTV cameras, the server, guest Wi-Fi and phones. That is convenient until one infected device gains access to everything else — and that is exactly how ransomware spreads.
VLAN segmentation splits the network into isolated zones and defines what may talk to what. Cameras cannot reach the document server, guests see only the internet, and production devices are isolated from the rest. It is one of the cheapest things you can do for company security — it needs no new hardware, only correct configuration.
Wi-Fi that works across the whole office
Typical problems are dead spots, dropped connections when walking between rooms, and “slow internet” caused not by the link but by congested radio channels. We solve them by planning access point placement, selecting channels and power levels, managing APs centrally and separating the guest network from the company one.
Monitoring and documentation
A network without documentation is a network you have to rediscover at every failure. When the work is done we leave a description: addressing, what sits in which VLAN, firewall rules and where cables physically run. Plus monitoring that alerts on a dropped link or congestion — usually before employees report it.
When it is worth getting in touch
- “The internet is slow” and nobody knows why — the network needs diagnosis, not a more expensive link.
- All devices sit in one network, without segmentation or traffic control.
- You are opening a new office, relocating, or connecting several locations.
- The router was configured by someone who is no longer around — and nobody knows the passwords or the rules.
- You need a backup link because downtime means real losses.
- Employees must connect securely to the company network from home.
Frequently asked questions
Is MikroTik suitable for a small company?
Yes, and it is often the optimal choice. For the price of an ordinary consumer router you get business-class equipment with full control over traffic, VLANs, VPN tunnels and a firewall. There is one condition: it must be configured properly — and that is the part we take care of.
Do we have to replace all the network hardware?
Usually not. In most companies we take over, the hardware is sufficient and the problem is configuration or a lack of segmentation. We start with a review and say plainly what can be reused and what genuinely limits the network and is worth replacing.
Do you configure networks remotely?
Configuration, rule changes, tunnels between branches and diagnostics we handle remotely — including for companies outside Warsaw, anywhere in Poland. Physical presence is usually needed only for the first setup of new equipment, cabling work or mounting access points.
What happens to the network if we change internet providers?
With your own router, changing operator is a matter of reconnecting the link and a small configuration tweak — everything else (VLANs, Wi-Fi, rules, tunnels) stays as it is. That is incidentally one of the strongest arguments for owning your router rather than using the operator’s device.
Book a network review
We will check what really slows your network down and where the security gaps are. No obligation.
See also: business VPN · server administration · IT support for business