Cart is empty
View Cart
Subtotal: $0.00

What is the network layer?

The network layer holds the equipment and services you already know: switches for local distribution, routers for network boundaries, wireless access points for mobile devices, and internet gateways for secure remote connectivity.

In a zencontrol deployment, the network layer exists to do one job exceptionally well: deliver dependable, standards-based connectivity so controllers can share information, software can manage sites, and integrations can exchange data.

Because it is all standard IP, you can design the network the same way you design any modern building network: simple at small scale, and structured (segmented, routed, monitored) at large scale.

Typical devices in the network layer
Ethernet switches (PoE and non-PoE), routers, firewalls, wireless access points, internet modems, fibre uplinks between buildings, and secure WAN links between campuses and countries.

Alt Text

How industry-standard networking works (in plain terms)

Alt Text

Physical layer: copper, fibre, or wireless
On a floor, controllers and servers commonly connect via copper Ethernet (structured cabling). Between buildings, fibre is common. For mobility, wireless access points provide Wi-Fi coverage for phones, tablets and service tools.

Alt Text

Network layer: IP addressing + routing
IP addressing lets every controller and server be uniquely identified. Routers connect subnets and buildings, enabling clean boundaries, predictable performance, and controlled access between areas.

Alt Text

Operations: monitoring and resilience
Standard network tools (switch monitoring, firewall rules, DHCP reservations, port security) make the system easier to maintain across its lifecycle, and easier to troubleshoot when assets expand.

Compatibility: easy connectivity, low friction deployments

As the infrastructure to interconnect application controllers, software and external systems uses standard IP networking, you can integrate and scale using everyday IT practices.

You can deploy zencontrol on:

  • Dedicated Ethernet infrastructure (segregated) when an a standalone network is required.
  • Shared building IT infrastructure to reduce total cost of ownership (TCO) by leveraging existing switches, fibre runs, and wireless coverage.
  • Hybrid deployments where controllers sit in a dedicated segment, while software and integrations are routed in a controlled way.
Where segregation is required but shared cabling is desired, secure networks can be created using VLANs plus routing and firewall rules—keeping traffic separate while still using common physical infrastructure.
Alt Text

Expandability: from one building to global campuses

Alt Text

Multi-building campuses
Use fibre links between buildings, routed subnets per building or tenancy, and centralised services where appropriate. You can keep sites manageable while still enabling whole-of-campus behaviour and oversight.

Alt Text

WAN and remote sites
Standard WAN technologies (site-to-site VPN, SD-WAN, MPLS, or managed links) are natural fits because everything is IP. Even constrained links can be engineered for secure access and predictable performance.

Alt Text

Global portfolios
Standardised network design patterns make it repeatable: deliver each building as a “site”, then roll them up operationally via software and governance. This is how portfolios stay consistent while still allowing local differences.

Apps and mobility: connect locally or through the internet

Phones and tablets connect the same way any IP device does:

  • Locally via standard wireless access points (on-site Wi-Fi) to reach controllers on the LAN.
  • Remotely through an internet connection, leveraging secure connectivity and the cloud for access, synchronisation and oversight.

This flexibility is especially useful during commissioning or staged projects: authorised users can connect to the local area network via a wireless access point to communicate with application controllers even before the full building network or internet service is complete.

Security model: access is controlled by authorisation processes so only authorised users can connect, with time-limited authorisation that is renewed by syncing.
Alt Text

Bring lighting onto the network—without reinventing networking

The network layer is standard by design: switches, routers, Wi-Fi and secure internet connectivity. Deploy it dedicated, shared, or segmented with VLANs, then scale from a single floor to global campuses using the same proven IT patterns.

Software & network resources

Software overview (cloud + onsite)

Cloud platform, onsite head end, commissioning tools, dashboards, access control and analytics.

Cloud portal sign in

Manage sites, users, upgrades, diagnostics and reporting from a browser.

Local network connectivity (app)

How authorised users connect directly to the local area network via Wi-Fi access points.

Built with security

Authorisation workflows designed so only authorised users can access sites and controllers.

Integrations hub

Integration options such as BACnet, MQTT, DMX, and more over standard IP infrastructure.

Commissioning app (Google Play)

Commissioning and maintenance tooling designed for cloud-connected site workflows.

Are you ready to be part of our revolution?

Find a local supplier