Place building controls, access control, cameras, tenant networks and guest internet on separate VLANs or physical segments. Use a firewall to allow only required protocols between them, and keep router and switch management on a dedicated administration network.
The cellular connection should not create a shortcut around the building’s security policy. Remote maintenance users should enter through a controlled VPN or management platform and reach only the systems assigned to them. Document ownership of each segment, because unclear responsibility is a common cause of open access.
Public Q&A
How should building systems, tenant networks and general internet traffic be separated from one another?
Useful next steps
Use this answer as a practical starting point. Current scope, specifications, compatibility, availability, pricing, timing and next steps should be confirmed directly with Comset where they affect a decision.
Related visual examples
A short visual sample connected to this answer or its topic.


