Business Wi-Fi
Access points placed from an actual survey, so coverage holds up in a full building rather than an empty one.
Networking & Infrastructure
Networks people stop thinking about.
Wi-Fi that holds up when the building is full, networks separated so one problem is not everyone's problem, and infrastructure documented well enough that the next change is straightforward.
- Designed, then documented
- Single and multi-site
- On-site in the Algarve & Alentejo
- Business Wi-FiSurveyed, not guessed
- Switching & VLANsTraffic kept where it belongs
- Managed firewallsRules reviewed, not accumulated
- Multi-siteSites that behave like one network
Technologies we work with
- Microsoft
- SOPHOS
- Acronis
- HPE
- 3CX
- UBIQUITI
- veeam
What we do
From the socket in the wall to the office in another country
We design, install, monitor and support business networks — and we document them, so the next person to touch it is not starting from scratch.
Structured cabling
Cabling, patching and cabinet work done properly and labelled, in partnership with local installers where needed.
Switching
Managed switches sized for what the site actually runs, with power over Ethernet where it saves separate supplies.
VLANs & segmentation
Staff, guests, payment systems and equipment on separate networks so one incident stays contained.
Firewall management
Firewalls configured, patched and reviewed — including removing the rules that stopped being needed years ago.
VPN & secure access
Remote access for staff and suppliers, scoped to what each actually needs to reach.
Network monitoring
Continuous monitoring of connectivity, devices and capacity, so faults are usually seen before they are reported.
Multi-site networking
Several sites linked and managed as one estate, with consistent policy across all of them.
Failover connectivity
A second line or mobile failover, so a broadband fault is an inconvenience rather than a closed day.
Guest networks
Guest and customer Wi-Fi with its own limits and branding, fully separated from the business network.
Office moves & fit-outs
Planning and delivery of the network for a new or refitted space, sequenced around the trades and the opening date.
Infrastructure refreshes
Replacing equipment that has gone out of support, planned in stages rather than all at once.
Segmentation
Most network problems are really one flat network.
Guest devices, staff laptops, the card terminal, the printers and whatever the building contractor plugged in last year frequently all sit on the same network. It works, right up until it does not — and then everything is affected at once. Separating them is neither expensive nor disruptive when it is planned.
- Guests get internet access and nothing else
- Payment and point-of-sale systems sit on their own isolated network
- Printers and shared equipment cannot be reached from the guest network
- Supplier and building systems are contained rather than trusted
- Remote access is scoped per person and per purpose
- The whole design is documented, so the next change is safe to make
One site, separated properly
example-office · 10 devices
Contained
Full access
Staff & company devicesVLAN 10
On one flat network none of these rules exist: anything here can reach all 10 devices.
What lives here
- Finance laptop
- Sales laptop
- Manager’s laptop
Allowed to talk to
- The internet
- Printers and the shared drive
Blocked from
- Guest Wi-Fi
- The payment network
- Building & supplier systems
Internet only
Guest & visitor Wi-FiVLAN 20
On one flat network none of these rules exist: anything here can reach all 10 devices.
What lives here
- Visitor’s laptop
- Visitor’s phone
Allowed to talk to
- The internet, and nothing else
Blocked from
- Staff devices
- The payment network
- Printers & shared equipment
- Building & supplier systems
- Other guests on the same Wi-Fi
Isolated
Payment & point of saleVLAN 30
On one flat network none of these rules exist: anything here can reach all 10 devices.
What lives here
- Card terminal
Allowed to talk to
- Its payment provider, and nothing else
Blocked from
- Staff devices
- Guest Wi-Fi
- Printers & shared equipment
- Building & supplier systems
Restricted
Printers & shared equipmentVLAN 40
On one flat network none of these rules exist: anything here can reach all 10 devices.
What lives here
- Office printer
- Shared drive
Allowed to talk to
- Staff devices, when they print or save
- Manufacturer updates
Blocked from
- Guest Wi-Fi
- The payment network
- Building & supplier systems
Contained
Building & supplier systemsVLAN 50
On one flat network none of these rules exist: anything here can reach all 10 devices.
What lives here
- Heating controller
- Door entry panel
Allowed to talk to
- The supplier’s remote access, scoped to these devices
Blocked from
- Staff devices
- Guest Wi-Fi
- The payment network
- Printers & shared equipment
0/9
other devices reached
Contained to the guest Wi-Fi. Nothing else was reached.
Illustration with sample devices. Click a zone to see what it can reach.
How we work
Surveyed, designed, installed, supported.
-
Survey
We walk the site, measure coverage, look in the cabinet and find out how the space is really used.
-
Design
A design with equipment, placement, segmentation and cost set out before anything is ordered.
-
Install
Installation scheduled around your trading hours, with the old kit removed and the new kit labelled.
-
Monitor
The network joins your managed service: monitored, patched, documented and reviewed.
More than one site
Several locations, one way of doing things.
Multi-site businesses usually end up with as many network designs as they have sites, each set up by whoever was available at the time. Standardising them makes every subsequent change cheaper, and means a fault at one site is diagnosed by someone who already understands it.
What standardising gives you
- The same design everywhereA new site is a repeat, not a project.
- One monitoring viewEvery site visible in the same place.
- Consistent securityNo location quietly weaker than the rest.
- Faster diagnosisFamiliar layout, quicker fix.
Why CaminhoIT
We have to live with it afterwards.
An installer is finished when the equipment is on the wall. We are the ones supporting it for the next five years, which is a strong incentive to label the cabinet, document the design and specify equipment that will still be supported when you need to extend it.
- Documented designshanded to you, not kept from you
- Vendor-neutralspecified to fit the site
- On-site coverageAlgarve and Alentejo
- Monitored continuouslyfaults seen before they are reported
- Security by designsegmentation from the start
- Used to busy siteshospitality, retail, multi-office
Questions
Networking questions
Our Wi-Fi is fine in the morning and unusable by the afternoon. Why?
Usually because the network was set up against an empty building. Wi-Fi capacity is about how many devices are competing for the same airtime, not simply about signal strength, and full rooms behave very differently from empty ones. Consumer equipment, access points placed for convenience rather than coverage, and everything sharing one network all make it worse. A survey under realistic conditions normally identifies the cause quickly.
What is a VLAN and why would we want one?
A VLAN is a way of running several logically separate networks over the same physical equipment. In practice it means guest Wi-Fi cannot reach your file server, the card terminal is isolated from everything else, and a compromised device is contained rather than free to move around. It costs nothing extra in equipment if the switches already support it, which most business switches do.
Do you install CCTV, door entry or alarm systems?
No. We work on the business network those systems often depend on, and we will make sure they are connected safely and kept separate from your business data. For the systems themselves you will need a specialist installer, and we are happy to work alongside one.
Can you help with an office move?
Yes, and the earlier the better. Connectivity is usually the longest lead time in the whole move — a new business line can take weeks — so it is worth confirming before the fit-out is scheduled. We plan cabling, cabinet, Wi-Fi and the cutover, and coordinate with the other trades so the network is ready when you are.
What happens when our internet connection fails?
With failover configured, the firewall switches to a second connection — a different provider or a mobile connection — normally within seconds to a minute. Most people notice a brief interruption to calls and nothing else. Without failover, a broadband fault outside your control can close a site for a day or more, which is why we recommend it for any business that cannot trade offline.
Do we need to replace everything at once?
Rarely. Most refreshes are staged: the firewall and switches first because they carry the most risk, then access points, then cabling where it is genuinely limiting. We would rather agree a two or three year plan that fits your budget than present a single large number.
Want someone to look at the site properly? Arrange a site survey →
Ready to get started?
Let us come and look at the site.
A survey tells you far more than a quote does. We will walk the building, test what is there, and come back with a design and a cost.