Home首页Utama / IT & SecurityIT 与安防IT & Sekuriti / Networking网络部署Rangkaian
TP-Link Omada SDN · MCMC-licensed installer · Cat6A / OS2 fibre TP-Link Omada SDN · MCMC 认证施工 · Cat6A / OS2 光纤 TP-Link Omada SDN · MCMC · Cat6A

Networking that survives Monday morning. 扛得住周一早高峰。 Rangkaian yang tahan Isnin.

From the Unifi handoff into your premises through the firewall, switch fabric, Wi-Fi 6/7 AP, VLAN segmentation, guest captive portal, and the MCMC-compliant logging needed for the Communications & Multimedia Act 1998. Built on TP-Link Omada — a single dashboard for everything. 从 Unifi 入户、防火墙、交换机骨干、Wi-Fi 6/7 AP、VLAN 隔离、访客捕获门户,到符合 1998 年通讯与多媒体法令的 MCMC 日志保留 — 全建于 TP-Link Omada 单一仪表盘上。 Daripada serahan Unifi ke premis anda, melalui firewall, fabrik suis, AP Wi-Fi 6/7, segmentasi VLAN, portal tawanan tetamu, dan pengelogan patuh-MCMC yang diperlukan untuk Akta Komunikasi & Multimedia 1998. Dibina atas TP-Link Omada — satu papan pemuka untuk semuanya.

Five layers, one Omada controller.五层架构,一个 Omada 控制器。Lima lapisan, satu Omada.

Below is how we layer a Skudai / Iskandar SME network. Each row is a Bill-of-Materials line that survives audit and warranty claims.下面是我们为士姑来 / 依斯干达中小企业搭建的五层架构。每一行都是过得了审计与保修的 BOM 项目。Di bawah ialah cara kami melapis rangkaian PKS Skudai / Iskandar. Setiap baris ialah satu item Bil-Bahan yang lulus audit dan tuntutan waranti.

L1 · WAN

Internet handoff入户互联网WAN handoff

Unifi Business 500 Mbps / 1 Gbps fibre as primary. Maxis Fibre or 5G FWA (Yes / CelcomDigi) as automatic failover. Static IP for VPN tenants.主线:Unifi Business 500 Mbps / 1 Gbps 光纤;备线:Maxis Fibre 或 5G FWA(Yes / CelcomDigi)自动切换。可绑定固定 IP 给 VPN 租户。Utama: Unifi Business. Sandaran: 5G FWA.

Unifi BIZStatic IP5G FWA failover
L2 · GATEWAY

Firewall / VPN router防火墙 / VPN 路由Firewall / VPN

Omada ER605 (small) or ER7212PC (mid). Built-in IPS, content filter, IPsec / WireGuard. Site-to-site VPN to head-office or to your SG terminal. NAT loopback for self-hosted CRM.Omada ER605(小型)或 ER7212PC(中型)。内置 IPS、内容过滤、IPsec / WireGuard。可对接总部或新加坡端的站点对站点 VPN。NAT 回环支持自托管 CRM。Omada ER605 / ER7212PC. IPS, IPsec.

ER605ER7212PCIPsec / WireGuardIPS
L3 · SWITCH

PoE+ switch fabricPoE+ 交换机骨干Suis PoE+

Omada SG2210MP-M2 (10× 2.5G PoE+, 250W budget) is the workhorse — feeds all VIGI cameras, BenQ Boards over IP, and PoE APs. Stackable up to 4 units.Omada SG2210MP-M2(10×2.5G PoE+,250W)是主力 — 同时供电 VIGI 摄像、IP-BenQ Board 与 PoE AP。可堆叠 4 台。SG2210MP-M2 — 10× 2.5G PoE+, 250W.

SG2210MP-M22.5GbE250W PoEVLAN 802.1Q
L4 · WI-FI

Wi-Fi 6 / 6E / 7 access pointsWi-Fi 6 / 6E / 7 无线 APWi-Fi 6/6E/7

EAP773 (BE11000 tri-band Wi-Fi 7, 10G PoE port) ceiling AP for offices; EAP723 (entry Wi-Fi 7) or EAP615-Wall for retail; EAP772-Outdoor (IP68, AFC for outdoor 6 GHz) for car-park & courtyards. MLO + 4K-QAM, seamless roaming, 802.11k/v/r.天花板 AP:EAP773(BE11000 三频 Wi-Fi 7,10G PoE 口);零售:EAP723(入门 Wi-Fi 7)或 EAP615-Wall;停车场 / 庭院:EAP772-Outdoor(IP68,AFC 户外 6 GHz)。MLO + 4K-QAM,无缝漫游,802.11k/v/r。EAP773, EAP723, EAP772-Outdoor.

Wi-Fi 7 · BE11000MLO · 4K-QAMWPA3Seamless roaming
L5 · CONTROL

Omada controller + Cloud AccessOmada 控制器 + 云访问Pengawal Omada

OC200 / OC300 hardware controller on-site (no licensing fees). Free cloud access via TP-Link ID — we manage your network from Skudai for routine changes, SLA upgrades on-call.本地 OC200 / OC300 硬件控制器(无许可费)。免费云访问 — 我们在士姑来远程做日常调整,SLA 升级现场到。OC200 / OC300 di tapak. Akses awan percuma.

OC200 / OC300Cloud-managedRBACFree updates
MCMC + CMA 1998 · WHAT YOUR NETWORK MUST LOG MCMC + CMA 1998 · 必须保留的网络日志 MCMC + CMA 1998

Public Wi-Fi in Malaysia is a regulated service.马来西亚公共 Wi-Fi 是受监管服务。Wi-Fi awam = perkhidmatan dikawalselia.

If you offer free guest Wi-Fi in a Skudai cafe, IOI Mall outlet, or office reception, the Communications & Multimedia Act 1998 applies. Omada captive portal handles consent, IC-binding, and the 3-month log retention MCMC expects on audit.在士姑来咖啡馆、IOI 商场门店、办公室前台提供免费访客 Wi-Fi,即受 1998 年通讯与多媒体法令约束。Omada 捕获门户内置同意、IC 绑定及 MCMC 审计要求的 3 个月日志保留。Wi-Fi tetamu di kafe Skudai = CMA 1998. Captive portal Omada uruskan.

3 months
Log retention min.日志保留下限Simpan log min.
IC / passport
Identity binding身份绑定Pengenalan IC
T&C consent
PDPA noticePDPA 告知Notifikasi PDPA
URL / NAT log
Audit trail访问轨迹Jejak audit

Three deployment packages.三套部署套餐。Tiga pakej.

All include site survey · cabling (Cat6A) · install · captive portal config · 12-month workmanship warranty. Excludes 8% SST.三套均含:现场勘测 · Cat6A 布线 · 安装 · 捕获门户配置 · 12 月人工保修。未含 8% SST。Tinjauan + Cat6A + pasang + portal.

HOME OFFICE · ≤ 5 USERS

SOHO / WFHSOHO / 居家办公SOHO / WFH

RM 2,800 · turnkey
  • ER605 router
  • 1× EAP723 Wi-Fi 7 AP
  • 5-port 2.5G switch
  • VPN to office (IPsec)VPN 接公司(IPsec)VPN ke pejabat
  • 3 SSIDs · guest portal3 SSID · 访客门户3 SSID
SME OFFICE · 10–40 USERS

Skudai SME Office士姑来中小企办公Pejabat PKS

RM 8,800 · turnkey
  • ER7212PC firewall
  • SG2210MP-M2 PoE+ switch
  • 3× EAP773 Wi-Fi 7 AP (10G PoE)
  • OC200 hardware controller
  • 5 VLANs · staff / guest / IoT / cam / mgmt5 VLAN · 员工 / 访客 / IoT / 摄像 / 管理5 VLAN
  • MCMC-compliant captive portal符合 MCMC 的访客门户Portal mematuhi MCMC
  • 90-day log retention90 天日志保留Log 90 hari
RETAIL / F&B CHAIN

Multi-site Chain连锁多门店Rangkaian cawangan

RM 18,500 · per site avg.
  • ER7212PC × multi-site
  • POS VLAN + PCI segregation
  • SD-WAN auto-failoverSD-WAN 自动切换SD-WAN auto failover
  • Centralised Omada Cloud Essentials集中 Omada Cloud 管理Pengurusan terpusat
  • Footfall analytics (Wi-Fi presence)客流分析(Wi-Fi 存在感知)Analitik trafik
  • 4-hour on-site SLA4 小时现场 SLASLA 4 jam

After go-live: three support plans.上线之后:三档运维方案。Selepas beroperasi: tiga pelan sokongan.

A network is only as good as the day it breaks. Pick the response time that matches your downtime cost — all plans include remote monitoring from our Skudai desk and firmware patching.网络的价值在它出故障那天才显现。按你的停机成本选择响应时长 — 三档均含我们士姑来端的远程监控与固件更新。Rangkaian hanya sebaik hari ia rosak. Pilih masa tindak balas mengikut kos gangguan anda — semua pelan termasuk pemantauan jauh dari pejabat Skudai dan tampung perisian tegar.

Plan方案Pelan Response响应Tindak balas Remote monitoring远程监控Pemantauan jauh On-site visits上门次数Lawatan tapak From起价Dari
EssentialsNBDBusiness hours工作时间Waktu pejabat2 / yrRM 1,200/yr
Business4-hour24×74 / yrRM 3,600/yr
Critical2-hour24×7 + alerts告警amaranMonthly每月BulananRM 8,400/yr

NBD = next business day. All plans cover Johor Bahru, Iskandar Puteri, Kulai & Skudai. Prices indicative, exclude SST.NBD = 次个工作日。三档均覆盖新山、依斯干达公主城、古来与士姑来。价格为示意,未含 SST。NBD = hari bekerja seterusnya. Semua pelan meliputi Johor Bahru, Iskandar Puteri, Kulai & Skudai. Harga anggaran, tidak termasuk SST.

Networking FAQ.网络常见问题。Soalan rangkaian.

Why not Unifi Business as router too?为何不用 Unifi BIZ 路由器?Kenapa bukan router Unifi?+
Unifi's ONT routes fine for <10 users but lacks VLAN, IPS, and VPN concentration. We bridge the Unifi modem and put Omada ER as the gateway — you keep your Unifi line, gain enterprise features, and the Omada controller logs MCMC-compliantly.Unifi ONT 在 <10 人时勉强可用,但缺 VLAN、IPS 与 VPN 聚合。我们把 Unifi 设为桥接,再由 Omada ER 做网关 — Unifi 线路保留,企业功能齐全,Omada 控制器按 MCMC 要求保日志。Unifi ONT kurang VLAN/IPS. Bridge Unifi, jaga ER sebagai gateway.
SST-39 on cross-border data transfer — affects me?跨境数据传输 SST 影响我吗?SST rentas sempadan?+
If you push data to a Singapore HQ via VPN, the 8% Digital Service Tax may apply to SG SaaS billing — but the VPN traffic itself is not taxed. We set the data residency split at the firewall so the audit trail is clean.通过 VPN 把数据送到新加坡总部 — 8% 数字服务税适用于新加坡 SaaS 计费,但 VPN 流量本身不征税。我们在防火墙上做数据驻留区分以便审计。VPN traffic tidak dicukai. SST hanya pada SaaS SG.
5G FWA replace fibre?5G FWA 能代替光纤吗?5G FWA gantikan fiber?+
In Skudai / Iskandar Yes 5G median is now ~280 Mbps down, 40 Mbps up. Good as failover; not yet as primary for >10 users — upload is the bottleneck for cloud backup and Zoom. We dual-WAN it.士姑来 / 依斯干达 Yes 5G 中位数下行约 280 Mbps,上行 40 Mbps。作备线很好;>10 人时主线尚不够 — 上行是云备份与 Zoom 的瓶颈。我们做双 WAN。5G median ~280 Mbps. Sandaran ok, utama belum.
Why VLANs at all in a 20-person office?20 人的办公室也需要 VLAN 吗?Perlukan VLAN di pejabat 20 orang?+
Yes — separating IoT (CCTV, Tapo, BenQ Board) from staff PCs is the single highest-ROI security control. PDPA breach exposure drops sharply. Cost: nothing, once Omada is in place.需要 — 把 IoT(CCTV、Tapo、BenQ Board)与员工电脑分隔是最高性价比的安全控制。PDPA 泄漏面大幅下降。Omada 已部署后,成本为零。Ya — pisahkan IoT dari PC. PDPA terlindung.
Site survey · free in Johor柔佛境内免费勘测Tinjauan percuma

Bring us your Unifi bill. We'll show you what you're not using.把 Unifi 账单发过来 — 我们告诉你哪些功能还没用上。Bawa bil Unifi anda.

15-minute heat-map sketch on your floor plan. Then a one-page quote.15 分钟在你的平面图上画好热力图,再附一页报价。15 min lakar peta haba di pelan lantai.