Network & Physical Infrastructure

Standardized Meraki-based network architecture deployed across 6 sites. Every site follows the PR reference model — same components, same firewall ruleset, same AutoVPN topology. Centrally managed via Meraki Dashboard.

Deployed Sites

Site	Status
Puerto Rico (PR)	✅ Reference site — fully hardened
Newark, DE	🔄 Pending physical reconnection + static IP
Seaford, DE	⏳ Replication queued
Milford, DE	⏳ Replication queued
New York Site 1	⏳ Topology verification required
New York Site 2	⏳ Topology verification required

Core Architecture Per Site

Verizon Business ISP gateway (wireless radios disabled)
Cisco Meraki MX75 — routing, stateful firewall, AutoVPN termination, IDS
Business-class PoE switches
Meraki 150AX wireless access point
UPS battery backup
Private subnet: 172.31.x.0/24 per site
DHCP and NAT centralized via MX appliance
UPnP disabled at gateway level

Firewall Hardening — PR Reference Standard

All sites replicated from the PR hardening template:

L3 Outbound Deny Rules (9 rules):

Port 23 (Telnet)