Network & WiFi from Zurich. Highest availability, performance and security.
We design, build and operate enterprise networks and WiFi solutions with vendors such as Cisco. WiFi 6 and WiFi 7, seamless roaming, segmented, monitored, with maintenance and updates on subscription. A network you are allowed to forget about, because it just works.
Slow WiFi does not cost seconds. It costs trust in the IT.
A good network is one you never notice.
From the patch panel to the access right, all from one hand.
Planning & RF survey
On-site RF measurement, cabling concept and capacity planning, before anything gets drilled. With heatmap and written concept.
WiFi 6, 6E and WiFi 7
Full-coverage WiFi with seamless roaming, even at high device and user density. WPA3 encryption, AD integration via RADIUS.
Switching & segmentation
Cisco switching with VLAN, 802.1X and zero-trust, cleanly separated zones for guests, production, administration and IoT.
Site interconnect
Multiple sites securely connected, via SD-WAN, IPsec VPN or dedicated links over our own backbone (AS49489).
24/7 monitoring
We see bottlenecks and outages before your staff report them. SNMP, flow data and syslog converge in our NOC.
Maintenance & support on subscription
Fully managed with updates, configuration upkeep and on-site service. Optionally with an uptime SLA up to 99.99 %.
What we typically deploy.
| Standard | WiFi 6 / 6E · WiFi 7 (802.11be) |
| Roaming | 802.11k / r / v · Cisco CleanAir, seamless |
| Security | WPA3 Enterprise · 802.1X · RADIUS · AD integration |
| Controller | Cisco Meraki (cloud) or Catalyst Center (on-prem) |
| Guest portal | captive portal · time-limited access |
| Survey | on-site measurement · heatmap · predictive survey |
| Switching | 1 / 2.5 / 10 / 25 GbE · PoE / PoE+ / PoE++ |
| Vendors | Cisco Catalyst · Cisco Meraki · Fortinet (security focus) |
| Routing | OSPF · BGP · EIGRP · static |
| Segmentation | VLAN · VXLAN · 802.1X · ACLs · port security |
| Redundancy | stacking · LACP · spanning-tree · HSRP / VRRP |
| Cabling | Cat 6A / fibre · certified measured and documented |
| Site coupling | SD-WAN · IPsec VPN · MPLS · dedicated link |
| Internet access | via ClearMedia Business Internet · AS49489 |
| Resilience | multi-uplink · BGP failover · 4G / 5G backup |
| Prioritisation | QoS for telephony, video and real-time data |
| Remote access | Cisco AnyConnect · WireGuard · IPsec |
| Monitoring | SNMP · NetFlow · syslog · 24/7 NOC |
We run your network, you have peace and quiet.
On a maintenance and support subscription, your network runs with us, monitored around the clock, with controlled updates and ongoing configuration upkeep. Anyone who needs a contractually guaranteed uptime can extend the SLA up to 99.99 % availability.
- 24/7 monitoring of switches, access points, firewalls and uplinks.
- Firmware and security updates applied in a controlled, traceable way.
- Configuration backup, versioning and documented changes.
- Device replacement included: faulty hardware is swapped without a cost debate.
- On-site service in German-speaking Switzerland, usually the same day.
- Optional uptime guarantee up to 99.99 % with a defined escalation matrix.
A flat network is an open door.
When guest devices, production machinery and accounting sit in the same segment, one compromised device is enough. We segment consistently, including retroactively, during normal operation.
- Guest, IoT, production and administration networks strictly separated.
- 802.1X with RADIUS and AD integration instead of open switch ports.
- Microsegmentation for especially sensitive systems.
- Documented firewall rules instead of historically grown sprawl.
- Port security, DHCP snooping and ARP inspection as hygiene standards.
Four steps to a network that holds.
Analysis
Current-state survey, RF measurement and requirements, on-site and measurable. Heatmap and needs report in writing.
Concept
Topology, segmentation and hardware selection with Cisco at the core, in writing and at a fixed price. You know what is coming before you order.
Rollout
Cabling done by our partner Elektropark, build and migration in your maintenance window, also outside business hours, without disruption.
Operation
Monitoring, updates and expansions on the fully-managed subscription, proactively run, optionally with an SLA up to 99.99 %.
Cisco at the core, Fortinet for security and SD-WAN.
Cabling & installation: our partner Elektropark.
For structured cabling, access-point mounting, rack installation, fibre and power, we have been working for years with Elektropark Installation & Design AG from Zurich. One point of contact for you, cleanly coordinated job sites for us.
Why small and medium businesses choose Cisco and ClearMedia.
An enterprise network is not an end in itself. It is the foundation on which telephony, cloud, file shares, backups and every line-of-business application runs. When it stands still, the business stands still. That is exactly why we build networks and WiFi solutions for the highest availability, performance and security, with enterprise components from Cisco at the core, complemented by Fortinet for security and SD-WAN.
WiFi 6, WiFi 6E and WiFi 7, the right standard for every use case
WiFi 6 (802.11ax) brings higher capacity, lower latency and WPA3 encryption. WiFi 6E extends the spectrum into the less-crowded 6 GHz band, ideal for dense offices with many concurrent connections. WiFi 7 (802.11be) adds Multi-Link Operation and data rates up to 46 Gbit/s, for sites that already want to plan for the next few years. We pick the right standard based on what your devices and applications actually need, not on marketing.
Seamless WiFi roaming, because standing still costs money
When the phone call drops in the lift or the MS Teams session stalls when you change rooms, that is not a WiFi problem, that is a roaming problem. With 802.11k, r and v as well as Cisco technologies like CleanAir, access points and clients jointly decide when a switch makes sense, and complete it without dropping the connection. We configure this so that it simply works in everyday use, not just on the data sheet.
Fully managed with maintenance, monitoring and updates on subscription
A network is not finished when it has been built. Firmware updates, configuration changes, new access points, modified VLANs and increasingly also security patches are the ongoing tasks. On the fully-managed subscription, we take this on completely: 24/7 monitoring, updates rolled out under control, configuration backup, device replacement and on-site service, all included. Anyone who needs a contractually assured uptime extends the SLA up to 99.99 % availability.
Cabling and installation with Elektropark
Cleanly routed cables, correctly mounted access points and properly labelled patch panels are the basis for a network that is still maintainable in five years. For the physical installation we have been working for years with Elektropark Installation & Design AG from Zurich, a specialised electrical-installation company with long experience in commercial and data cabling. You still have one point of contact for the overall project, we coordinate the interfaces.
One provider for the whole IT, not just for the network
A network does not end at the switch. It hangs on business internet, is coupled to firewall and VPN, carries your telephony, connects your server and storage and is the basis for any private cloud connection. With us, all of that comes from one hand, looked after by the same team in Zurich that actually knows your environment. Single point of contact, not as a slogan but as everyday practice.
Who this fits
Our profile best fits SMEs with 5 to 50 employees in the greater Zurich area, but we also look after larger sites and specialised setups. If you are building a network from scratch, consolidating a setup that has grown over time or simply want to hand over operations to reliable hands, get in touch. The initial site assessment is free.
Common questions before a network project.
Because Cisco has proven itself in the enterprise space for decades, both in terms of stability and security and in vendor support. For security and SD-WAN we complement with Fortinet, where it fits. Our engineers work on both platforms every day, with the same tools the vendor uses in support.
Yes, where it makes sense. WiFi 7 is particularly worthwhile in dense setups with modern end devices and high bandwidth requirements. For many SMEs, WiFi 6 or 6E is currently the more economical choice, and we advise honestly on this.
We implement 802.11k, r and v on all access points, combined with Cisco roaming technologies such as CleanAir. WiFi calls and video sessions survive the switch between access points without interruption, in the lift, in the corridor, in the meeting room.
24/7 monitoring of all network components, firmware and security updates rolled out under control, configuration backup and versioning, device replacement in case of defects and on-site service in case of incidents. Optionally extended with a contractual uptime guarantee up to 99.99 % with a defined escalation matrix.
The physical installation, that is structured cabling, access-point mounting, rack assembly, fibre connections and power, is carried out by our long-standing partner Elektropark Installation & Design AG from Zurich. You still only have one point of contact: ClearMedia coordinates the interfaces.
Often yes. We assess existing switches and access points honestly and only replace what no longer holds up technically or in terms of security. Where possible, we integrate existing gear step by step into a new topology, instead of changing everything at once.
For a typical site with 20 to 80 employees, we plan two to four weeks from the survey to production operation; the changeover itself usually happens over a weekend.
Yes. We migrate flat networks step by step into a segmented structure, during normal operation, with a clear fallback path at every step.
Yes. We couple sites via SD-WAN, IPsec VPN or dedicated links over our own backbone (AS49489) and operate them as one coherent network, including central monitoring.
Yes. Once the build and cabling are in place, we take on monitoring, maintenance and support as a pure operations contract, with or without an SLA.
WiFi that annoys? A network that just grew?
We will take a look and tell you what it needs, honestly, at a fixed price, no sales pressure.