A jobsite trailer network usually starts life as a router plugged in by whoever arrived first. Over the course of a project it picks up laptops, tablets, printers, security cameras, a time clock, a few personal phones and maybe a subcontractor's equipment. By closeout, nobody remembers the router password, and the device list is anyone's guess.
A few hours of planning at mobilization can turn that into a network you can trust. Here is a practical setup guide that does not require deep networking expertise.
Design before you plug in
Decide who and what will connect:
- Company devices: laptops, tablets, printers
- Operational devices: cameras, time clocks, telematics gateways, door controllers
- Guest devices: subcontractors, inspectors, visitors and personal phones
These three groups deserve different treatment, because they have different trust levels.
Step 1: Choose proper equipment
Use a business-class router or firewall with support for multiple networks, regular firmware updates and central management. Consumer routers often lack these features and may stop receiving updates. If the router supports cellular or satellite internet, make sure it can fail over between them.
Step 2: Secure the router itself
- Change the default administrator password to a long, unique one stored in your password manager.
- Update the firmware before deployment.
- Disable remote administration from the internet unless it is needed, and protect it with multifactor authentication if it is.
- Turn off unused services and ports.
- Label the device with an asset tag, not the password.
Step 3: Separate networks
Create at least two or three separate networks, often called VLANs or SSIDs:
- Company network: for managed laptops and tablets, with access to company resources through a VPN or secure cloud tools.
- Devices network: for cameras, time clocks and printers, with no access to company laptops.
- Guest network: for subcontractors and personal devices, with internet only and no access to anything else.
If a subcontractor's infected laptop joins the guest network, it cannot see your systems. Likewise, if a camera is compromised, it cannot reach your accounting data.
Step 4: Protect Wi-Fi
Use WPA3 if supported, or WPA2 with a strong passphrase. Avoid posting the password on the trailer wall. Provide a rotating guest passphrase or a guest portal, and change company Wi-Fi credentials when crews change significantly.
Step 5: Lock down cameras and sensors
Security cameras and IoT devices are frequent targets because they are often left with default passwords and outdated software. Change defaults, update firmware, restrict their internet access to what they need and keep them on the devices network. Do not expose camera feeds directly to the internet through port forwarding.
Step 6: Use secure access to company systems
Do not rely on the trailer network for trust. Use multifactor authentication for cloud systems, a VPN or zero-trust access product for internal resources and device encryption on every laptop. Treat the trailer network like a public network that you happen to manage.
Step 7: Monitor and alert
If your router supports it, enable logging and alerts for failed administrator logins, new devices and loss of connectivity. Review the device list periodically. Unknown devices on the company network deserve a question.
Step 8: Plan for physical security
Place network equipment in a locked cabinet or inside the trailer, and consider tamper-evident seals. Power it through an uninterruptible power supply to ride out brief outages. Record serial numbers in case of theft.
Step 9: Document the build
Keep a one-page record for each site with the router model, network names, device list, internet provider details, administrator contact and installation date. This turns troubleshooting from detective work into a lookup.
Step 10: Demobilize cleanly
When the project ends:
- Remove the equipment's configuration, or factory reset it, before it goes to the next site
- Cancel or transfer service plans
- Remove devices from management
- Rotate any credentials used on the site
- Archive camera footage according to policy
- Update the asset list
Standard kits save time
Build a standard trailer kit with preconfigured equipment that can be installed in under an hour and shipped to any site. Consistency reduces mistakes and makes support easier.
Common mistakes
- Putting everything on one network
- Leaving default passwords on cameras and routers
- Sharing the company Wi-Fi password with subcontractors
- Forgetting to reset equipment between projects
How Ironfield Cyber helps
Ironfield Cyber builds and supports standardized trailer network kits for contractors, with security settings preconfigured and remote management available. If your jobsites each have a different setup, we can help you standardize.