Reference architecture

Reference architecture: hybrid network with FortiGate and Dell switches

The network around the cluster: a FortiGate edge, a redundant Dell PowerSwitch pair, segmented VLANs, tunnels to Azure and a separate out-of-band network.

What this architecture covers

Design decisions

  • FortiGate at the edge with redundant tunnels to Azure and dynamic routing
  • A VLT switch pair so any single switch can fail
  • Separate VLANs for management, workloads, storage and out-of-band access
  • Data center bridging on storage ports where storage is switched
  • Firewall policy scoped to the documented platform endpoints
What you receive
  • The architecture adapted to your site
  • Switch and firewall configurations
  • A failover test record

Billed at $150.00 per hour. Ask Keith for an estimate.

Diagram

The layers, top to bottom.

AzureVirtual networkVPN gatewayEdgeFortiGate pairInternet linksCorePowerSwitch APowerSwitch BSegmentsManagementComputeStorageHostsAzure Local machinesOut of bandManagement controllersConsole
Field notes

What we check first.

Out-of-band is separate

The management controllers must stay reachable when the production network is down.

Every link redundant

Each machine connects to both switches, and each switch has its own uplink.

Document every port

The port map is what the next engineer needs at two in the morning.

How an engagement runs

Four steps, written down.

I
Scope

A call with Keith

You describe the goal, the estate and the deadline. Keith turns it into a written scope with an hour estimate at the hourly rate.

II
Design

A written design by Gus

Gus reviews the environment and gives you a written design with each decision and its reason.

III
Build

Hands-on implementation

Gus implements in your tenant and your racks, remotely or on site, with every change logged as it is made.

IV
Hand over

Documents and a named contact

You receive the as-built record and the runbooks. Keith stays on as your account and project manager.

Questions

Asked before every engagement.

Does this require Dell and Fortinet?

No. The pattern applies to other vendors. These are the ones we configure hands-on.

Where does SD-WAN fit?

At sites with more than one link, SD-WAN replaces the single edge path. See the SD-WAN page.

What does the consulting cost?

Consulting is billed at $150.00 per hour. Keith sends a written hour estimate after the scoping call, and work starts when you approve it.

Rate and contacts

One rate. Two people.

Consulting is billed at $150.00 per hour. Keith runs sales, project management and your account. Gus does the architecture, the design and the implementation.

Hourly rate
$150.00

per consulting hour, for every consulting service

Sales, project management and account management

Keith

keith@apexvanguard.ai
Architecture, design and implementation

Gus

gus@gusitllc.com

Independent practice, not affiliated with Microsoft. Azure Local consulting is part of the infrastructure consulting practice of Gus IT LLC, an independent firm. It is not affiliated with, endorsed by or sponsored by Microsoft Corporation, Dell Technologies, Fortinet or any other vendor named on this site. Microsoft, Azure, Azure Local, Azure Stack HCI, Azure Arc, AKS, Azure Virtual Desktop, Hyper-V and Windows Server are trademarks of Microsoft Corporation. Dell, PowerEdge, PowerSwitch and iDRAC are trademarks of Dell Inc. Microsoft Entra, Active Directory, SQL Server, FSLogix and BitLocker are also trademarks of Microsoft Corporation. Fortinet and FortiGate are trademarks of Fortinet, Inc. VMware and vSphere are trademarks of Broadcom Inc. Kubernetes is a registered trademark of The Linux Foundation. PostgreSQL is a trademark of the PostgreSQL Community Association of Canada. Linux is the registered trademark of Linus Torvalds. All other marks belong to their respective owners and are used for description only. Product capabilities follow each vendor's documentation and change between releases; we confirm the current state during scoping.