What is the best and correct way to organize SCS?

Question

Computer networks

Comrades, tell me how to do it right, we have a building on the 4th floor in the form of the letter P, on the 3rd floor in one wing there is a server room, also on the 3rd floor in the other wing there is a 12U cabinet, done to reduce the length of the wires. all floors in both wings drilled 80mm holes for the wire. Now the question is, all floors should have Internet access through one Mikrotik rb2011uias-2hnd router and access to only one folder (share) how best to make a VLAN or just different subnets and resolve access rights through a firewall?

Answer 1

This mikrotik will choke on voip and mpeg. Set l3 switches for internal routing, Mikrotik only for users to access the Internet. Well, this, cameras in a separate vlan, phones in another, users in a third. If the budget allows you to buy several l3 switches, I would put the server part in a separate vlan (video controller, PBX, there are probably internal servers such as mail / dns / proxy / portal of some kind)

Answer 2

Well, such questions are not suitable for designing a network.
1. We always start from the L1 level: we take a copy of the building plan and draw utp routes on it, simultaneously calculating whether we fit within the allowable 100m and where it is convenient for us to put cross-country cabinets and how much can be saved by placing/breaking cross-countries in other places.
2. Put L2 switches of the required capacity, uninterruptible power supplies, Voip gateways, poe injectors, etc. into the cabinets.
3. Assemble all the cabinets and the server room into a ring or a star (whatever suits and is necessary for you according to the plan)
4. In the server room, preferably put a pair of L3 for aggregation and redundancy. You can even have a low-port or generally soft one by moving the servers to a separate access switch
5. Break everything into VLANs - cameras separately, voip separately, wlan, computers, again according to tasks / security
6. Actually stir up routing, management and protection of all this junk on L2-3 and DHCP

Answer 3

How many network users will there be? Will there be video surveillance on this network?

Answer 4

What is the size of the building? Otherwise, the Mikrotik may choke and it is better to lay the model more powerfully.