Enterprise Networking Guide

Opening a New Office: How to Connect an Existing Office to Reuse Headquarters and Business Entry Points?

When opening a new office in the same or another city while your existing office continues running, we deploy physical or virtual gateways over existing broadband at both locations to link the new and old offices, routing traffic for headquarters intranets, data centres, or allowlisted client systems through the existing site entry point while keeping local internet breakout at the new office; if existing site bandwidth headroom or external licensing is constrained, the new office can also join the same cross-region enterprise network directly.

When an enterprise opens a second office in the same city, a regional R&D branch, or a project site while its existing office continues normal operations, we can use the existing broadband at both locations to deploy preconfigured physical access appliances (or virtual gateways where virtualisation environments already exist), connect the internal networks of the new and existing offices over a cross-region transmission channel, and forward traffic for designated headquarters or client application addresses from the new office to the business entry points already running at the existing office.

We provide the inter-site interconnection channel and policy-based traffic forwarding coordination, so your enterprise does not need to relocate carrier dedicated lines from the existing office or wait for new physical dedicated line construction at the new site. The existing office's headquarters internal network tunnel, data centre link, or fixed public IP entry point on a client allowlist stays intact; employees at the new office reach those designated systems via the existing site, while routine web browsing, standard email, and public video calls break out locally over the new office's own broadband.

Link the new and existing offices over existing broadband and forward designated business traffic to the existing site entry point

As long as the new office has standard broadband and basic power ready, we can ship a physical gateway preconfigured with access parameters and forwarding policies to the site; if the existing office or new site server room already has a virtualisation platform, we can deploy a virtual gateway directly or peer with the existing office firewall gateway over IPSec. Once appliances at both ends are in place and online, they establish a stable inter-site internal network connection over our cross-region transmission channel, provisioning faster than installing a new traditional carrier physical dedicated line.

For traffic routing, we configure precise forwarding paths and access controls by target system subnet or domain name: only when staff at the new office access the overseas headquarters internal network, a remote data centre, or designated external client systems does the gateway send that traffic across the inter-site channel to the existing office, which then forwards it upstream through its established headquarters tunnel, data centre dedicated line, or fixed public IP egress. High-volume daily public internet traffic at the new office breaks out directly over local broadband, neither consuming inter-site channel capacity nor adding load to the existing office's outbound bandwidth. During daily operations, our network also provides DNS query records and 5-tuple connection logs to help administrators distinguish traffic destinations by the private subnets of the new and existing offices.

Routing, allowlist, and link coordination requirements when integrating with an existing site entry point

Delivering traffic from the new office to the existing office is only half the path; for upstream headquarters systems or external client platforms to respond properly, gateways at both ends must also align routing, source addresses, and upstream permissions—you cannot simply assume all legacy resources will work automatically once the two internal networks are linked:

  • Distinguish forwarding configurations for private internal network sources vs. public IP allowlist egress: If you are reusing an internal network tunnel from the existing office to headquarters or a data centre, the existing site gateway and headquarters administrator need to allow the new office's private subnet and configure return routes back to the new office. If you are reusing a fixed public IP at the existing office that has been added to an external client system's allowlist, the egress gateway at the existing site must perform source network address translation (SNAT) or proxy forwarding on traffic arriving from the new office so the external client system continues to see the approved public IP address of the existing office as the source.
  • Confirm shared-use permission with headquarters, external clients, and existing carrier contracts: Before enabling forwarding, we recommend that enterprise administrators confirm with headquarters or external clients that staff at the new office are permitted to access upstream systems through the existing site entry point, and check any terms in the existing office's carrier dedicated line contract regarding cross-site traffic aggregation. We provide inter-site interconnection and gateway routing coordination, and do not act as an agent for carrier dedicated line relocation or legacy contract modifications.

At the same time, reusing an existing site entry point creates a daisy-chained path: if power, access broadband, or the egress firewall carrying that path at the existing office goes down for maintenance, access from the new office through that entry point will pause as well. Although our cross-region transmission channel supports on-demand bandwidth scaling without waiting for physical construction, actual usable bandwidth when two locations share an entry point remains bounded by the new site's local broadband, the existing site's access link and remaining dedicated line headroom, and gateway processing capacity at both ends. Where multiple broadband links are available on site, we can also help plan multi-link load balancing or automatic failover.

How to connect the new office directly to the same enterprise network when routing through the existing office is impractical

If the new office has a small headcount or is a short-term project site, and the existing office has ample channel headroom with upstream approval for unified forwarding, reusing the existing site entry point is a convenient choice. However, if the new office houses a long-term core R&D or business team with frequent large file syncs and real-time collaboration that could saturate the existing office's outbound bandwidth—or if external clients or legacy carrier contracts explicitly prohibit cross-site hair-pinning, or the new team cannot afford downtime during power maintenance at the old building—there is no need to force traffic through the existing office.

In those cases, we can use the new office's existing local broadband and a preconfigured access appliance to connect the new site directly to our cross-region and cross-border transmission network, establishing direct peer connections from the new office to overseas headquarters, public cloud private networks, or data centres while still keeping internal network connectivity between the new and existing offices. If an external client system requires the new office to register an independent source public IP on its allowlist, we can also provision a dedicated fixed public IP egress for the new site (with egress region, dedicated vs. shared use, and failover behaviour confirmed prior to activation) so the new office can connect directly once the new address is allowlisted.

Basic information to share in an initial consultation

  • The cities where your existing and new offices are located, expected headcount at the new site, and the specific business entry points at the existing office you want to reuse (such as an internal network connection to overseas headquarters, a dedicated line to a data centre, or a client system with an IP allowlist).
  • Primary business applications used daily by staff at the new office, along with an overview of existing broadband and egress gateway equipment at both locations.
  • Whether headquarters, external clients, or existing carrier contracts place explicit restrictions on sharing an entry point across sites, and whether you are also considering direct independent access for the new office.
  • Sharing the overview above in an initial consultation is enough to work out an interconnection and forwarding plan together—no need to prepare complete network topology diagrams or routing tables upfront, and please do not send device passwords, keys, or sensitive business data.
Outline requirements and get in touch

Discuss a solution based on your current network and test records

Sharing your site locations, target workloads, existing troubleshooting data, and change constraints helps us confirm as quickly as possible whether a network solution fits and what changes it requires. Never submit passwords, private keys, access tokens, or regulated sensitive business data in forms or emails.

Outline requirements and get in touch