A Secure Jobsite Network Setup Checklist for Trailers and Yards

When a project mobilizes, getting internet to the trailer is a priority. Superintendents need email, drawings, daily logs, and video calls. Too often, the quickest setup, a consumer router with default settings and a shared Wi-Fi password written on the wall, becomes the most vulnerable part of the company's network.

A jobsite network does not need to be complicated. It needs to be set up consistently, with a handful of security settings that take minutes. Use this checklist when you stand up a new site.

Before you ship anything

1. Choose the connection type. Cellular (LTE or 5G), satellite, fixed wireless, or fiber, depending on coverage and the duration of the project. Plan a backup path for critical sites.
2. Standardize the equipment. Use the same router model and configuration approach on every site, so support is predictable.
3. Preconfigure in the office. It is much easier to apply security settings at a desk than from a trailer over the phone.
4. Record the details. Site name, location, equipment serial numbers, SIM or account information, and who is responsible.

Router and firewall settings

• Change the default administrator password to a unique, strong one stored in your password manager. Never leave factory credentials.
• Disable remote administration from the internet unless it goes through a managed, authenticated method.
• Keep firmware current. Check for updates before shipping and on a schedule.
• Turn off features nobody uses, such as unneeded port forwarding and UPnP.
• Enable the firewall and keep default inbound blocking.
• Use a managed router or central dashboard so IT can see status and push changes.

Wi-Fi design

Separate networks for separate purposes

Create at least these:

1. Company network. For company laptops and tablets. Strong WPA2 or WPA3 security, with a unique passphrase per site.
2. Guest network. For subcontractors, inspectors, and visitors, isolated from the company network.
3. Devices network. For cameras, printers, and sensors, kept apart from laptops where possible.

Passphrase practices

Use a long passphrase and change it when the project ends or when a trusted person leaves the project. Do not post it where it can be photographed from outside the trailer.

Subcontractors and guests

Offer a guest network so that subs do not ask for the company password. Limit bandwidth if necessary and block access to internal resources. Do not allow unknown personal devices on the company network.

Cameras and IoT

Jobsite cameras, access control, and sensors are often installed by third parties and left with default settings.

• Change default passwords on every device.
• Place them on their own network.
• Disable features such as direct internet exposure and unneeded remote viewing.
• Update firmware where possible.
• Know who has access to the footage and for how long it is retained.

Protect the connection itself

• For laptops, use a company VPN or secure access service when reaching internal systems.
• Make sure devices have endpoint protection, encryption, and automatic updates.
• Block known malicious sites with DNS filtering where available.

Physical protection

Mount routers and modems inside the locked trailer, out of reach and sight, with power protection. Satellite dishes and cellular antennas should be secured against theft and weather. A simple label with a support number saves time later.

Monitoring and support

• Set up alerts for the connection going down or the router going offline.
• Have a documented process for site issues, with a phone number that crews can call.
• Keep spare equipment ready for quick replacement.

Closeout

When the project ends:

1. Collect the equipment.
2. Reset it to factory settings and wipe stored configuration.
3. Cancel or reassign service plans, so you stop paying for idle lines.
4. Remove the site from your management console and password manager.
5. Document lessons learned for the next mobilization.

A one-page summary for superintendents

• Do not share the company Wi-Fi password.
• Do not plug unknown devices into the network.
• Report outages and unusual behavior right away.
• Do not move or reconfigure the router without calling IT.

Help standing up sites

Ironfield Cyber provides preconfigured jobsite routers, Starlink and cellular setups, and ongoing monitoring for contractors and energy services firms. If you mobilize several projects a year, a standard kit saves time and closes common security gaps.