Enterprise Network, Cisco Cat9300, Bosch IP CCTV, HID Access Control & Genetec VMS for BIAL — Bengaluru International Airport | Layerix Networking Experts
Client: BIAL — Bengaluru International Airport

Technologies Deployed
About BIAL — Bengaluru International Airport
Kempegowda International Airport, Bengaluru (BIAL) is one of India's busiest aviation hubs — handling tens of millions of passengers across domestic and international terminals each year. Behind every departures board, every boarding gate, and every retail concourse runs a physical infrastructure that most passengers never see: kilometres of structured cabling, dozens of IP CCTV cameras, access-controlled doors managing airside and landside boundaries, enterprise-grade wireless networks, and the servers and storage that record, store, and surface every security event.
In an airport, infrastructure failure isn't a Help Desk ticket. A single camera going offline is a surveillance gap in a regulated security zone. An access-controlled door failing open is an airside breach. A network outage affecting check-in terminals is a passenger operations incident. Every system must work — always — while 50,000 people move through the building, and every event must be logged, auditable, and reviewable on demand.
Layerix Networking Experts was engaged to design and deliver a complete aviation-grade enterprise IT security infrastructure across four sections — CommScope Cat6A LSZH structured cabling and 28km OFC fiber backbone, Bosch IP CCTV with Genetec VMS, HID-based access control with C·CURE 9000, and Cisco Catalyst enterprise switching with WiFi 6E. One partner. Four sections. Zero outsourcing.
The Challenge — Aviation-Grade Infrastructure Has No Margin for Error
Most enterprise IT infrastructure is forgiving. A misconfigured switch can be fixed remotely. A mislabelled cable can be traced later. A camera with a suboptimal angle can be repositioned. In an airport, none of that is acceptable after the fact. The five specific challenges at BIAL that shaped every decision in the BOQ:
- LSZH cabling mandatory throughout the terminal: Aviation fire safety regulations require Low Smoke Zero Halogen cable inside terminal buildings. Standard PVC cable emits toxic smoke in fire conditions and is simply not permitted. CommScope Cat6A LSZH ETL-verified cable was specified from the first line of the BOQ — not as an upgrade, but as a baseline requirement.
- 28km of OS2 armoured SMF fiber backbone required: Connecting terminal buildings, remote stands, cargo zones, and operational areas across BIAL's geographically distributed campus required armoured single-mode fiber at scale. Patch cords and standard indoor fiber don't survive the mechanical and environmental stresses of an airport campus backbone.
- Edge-AI-ready PTZ cameras for perimeter and vehicle tracking: Fixed dome cameras cover interiors effectively, but long airport perimeters and vehicle access zones require high-resolution PTZ IP CCTV cameras with built-in AI video analytics — specifically loitering detection, intrusion detection, and the infrastructure readiness for automatic number plate recognition (ANPR) at vehicle entry/exit points.
- 1,000-cardholder access management across 15 security doors: Airside/landside boundaries, staff-only operational zones, and restricted equipment areas each need specific access policies with anti-passback enforcement, time-attendance logging, and fire-alarm-triggered EM lock release. Managing this manually — or across fragmented systems — is a regulatory failure waiting to happen.
- Cisco DNA Advantage with 5-year SLA at the switching layer: Commodity switches are not appropriate for aviation infrastructure. The network layer needs embedded intelligence (Cisco ThousandEyes for network observability), long-term support agreements, and UPoE+ capacity to power cameras, access points, and access control hardware from the same switching layer.
Layerix responded with a single four-section BOQ covering every layer — passive infrastructure, active surveillance and VMS, physical access control, and enterprise networking — all sourced, installed, configured, tested, and commissioned by one in-house certified team with no subcontracting at any stage.
The Scope — Four Sections, Every System, One Accountable Team
Here is what Layerix designed, sourced, and delivered across all four sections of the BIAL airport network security infrastructure project.
- ▸1,500m CommScope Cat6A LSZH U/UTP ETL-verified cable — TIA-568 compliant, Fluke DSX certified, 40 data outlets
- ▸3 × CommScope 24-port loaded Cat6A patch panels
- ▸CommScope single & dual faceplates, RJ45 clips
- ▸28,000m CommScope OS2 OFC 12F armoured single-mode fiber backbone
- ▸2 × 24-port + 2 × 12-port CommScope OFC fiber patch panels
- ▸20 × CommScope FOSC-100 fiber optic splice closures — moisture and mechanical protection
- ▸20 × Cisco 10G LR SFP modules — 10Gbps per link across the SMF backbone
- ▸Netrack 15U rack + Netrack intelligent iPDU (8 × C13 metered)
- ▸150mm GI perforated hot-dipped cable tray, BEC MS pipes, flexible hose
- ▸Fluke certification testing — every copper and fiber run
- ▸22 × Bosch 2MP fixed dome IP cameras — NDI-3702-AL, 3.3–10.2mm varifocal IR lens, H.265 compression
- ▸3 × Bosch 4MP PTZ GenAI+ cameras — NDP-7803S-Z30L, 30× optical zoom, IP66, IR — edge-AI-ready for loitering & intrusion detection
- ▸Genetec Security Center 5.13 — Base Enterprise Package, 5-year Advantage per camera connection
- ▸Streamvault SV-2041E — 64TB RAID5 NVR appliance, Xeon processor, 32GB RAM, Windows Server 2025, 10G RJ45
- ▸3 × LG 55" displays (55UA831C) — central unified monitoring security operations centre
- ▸1 × HP workstation for CCTV & ACS operations
- ▸30 × HID card readers + 30 × HID RFID access cards
- ▸8 × iSTAR Edge G2 four-reader IP access control edge devices (GSTAR004+PSX-75-E1-E)
- ▸C·CURE 9000 access management & time attendance software — 1,000 card holders, anti-passback, full audit trail
- ▸15 × EM locks + break-glass emergency door releases + magnetic door sensors + exit push buttons
- ▸200m Polycab 8-core + 200m Polycab 4-core access control cabling
- ▸Cisco Catalyst C9300-48H-A — 48-port UPoE+, Network Advantage
- ▸Cisco DNA Advantage 48-port, 5-year + DNA Spaces Extend 5-year
- ▸ThousandEyes Enterprise Agent 5-year — embedded network observability
- ▸C9300-NM-8X — 8 × 10GE Network Module for fiber uplinks
- ▸1,100W primary PSU + SSD-240G storage
- ▸Cisco Catalyst C9300-24H-A — 24-port UPoE+, Network Advantage
- ▸Cisco DNA Advantage 24-port, 3-year + DNA Spaces Extend 3-year
- ▸ThousandEyes Enterprise Agent 3-year
- ▸Dual 1,100W PSUs — redundant power for high availability
- ▸50cm Type-1 stacking cables + stack power cables
- ▸Genetec Security Center 5.13 → 5.14 — GSC-Base-E Enterprise with Advantage subscriptions
- ▸Streamvault SV-2041E 1U appliance — 64TB RAID5, Xeon, 32GB RAM, Windows Server 2025
- ▸SV-E-ACC-SRV-10G-RJ45-D-LP — 10G RJ45 Streamvault connectivity module
- ▸Cisco Catalyst Wireless CW9162I-ROW — WiFi 6E access points, enterprise wireless coverage
- ▸Cisco DNA Essentials 3-year + Wireless DNA Essential 3-year
- ▸AIR-DNA-E-T Wireless DNA Tracker 3-year
- ▸SW9162-CAPWAP-K9 — CAPWAP software
- ▸AIR-AP-T-RAIL-R ceiling grid clips + AIR-AP-BRACKET-1 low-profile mount brackets
Phased Delivery — Aviation-Grade, Zero Operational Disruption
Unlike a corporate office — where you can pull cable on a Saturday and configure switches Monday morning — an airport operates 24 hours a day, 365 days a year. Every phase of the BIAL deployment was sequenced to work around live airside operations, passenger movement, and regulatory inspection windows. The cabling and fiber backbone went first — because every other system depends on it. Security systems came second. Active network infrastructure last.
The Physical Layer — LSZH Copper and Armoured Fiber, Fluke-Certified
Aviation infrastructure starts at the cable. Before a single Bosch IP camera recorded a frame or a HID card reader enrolled a credential, Layerix laid the physical layer that everything else depends on — CommScope Cat6A LSZH ETL-verified structured cabling to 40 data outlets across the terminal, and 28,000 metres of CommScope OS2 armoured single-mode fiber connecting every operational zone at 10Gbps. Every copper run was Fluke DSX CableAnalyzer certified to TIA-568 specification before any active device was connected — because in aviation, "it seems to work" is not a commissioning standard.
CommScope Cat6A LSZH — ETL Verified, TIA-568 Compliant
1,500m of CommScope Cat6A U/UTP Low Smoke Zero Halogen cable installed to 40 data outlets. ETL-verified, TIA-568 compliant, 10GBase-T ready. LSZH is mandatory inside aviation terminal buildings — standard PVC cable emits toxic halogen gases under fire conditions and is not permitted. Fluke DSX CableAnalyzer certification report delivered for every copper run.
28km CommScope OS2 Armoured SMF — 10G LR per Link
CommScope OS2 OFC 12-fibre armoured single-mode fiber pulled across 28,000 metres of campus backbone — connecting terminal buildings, operational zones, and remote equipment rooms. 20 × Cisco 10G LR SFP modules terminate each fiber link at 10Gbps. Armoured construction protects against mechanical damage in an active airport environment.
FOSC-100 Splice Closures & CommScope Fiber Panels
20 × CommScope FOSC-100 fiber optic splice closures protect every spliced joint from moisture ingress and mechanical damage — critical in an airport where cable routes pass through areas exposed to ground equipment and weather. Terminated at 2 × 24-port and 2 × 12-port CommScope OFC fiber patch panels.
Netrack 15U Rack, Intelligent PDU & Cable Infrastructure
Netrack 15U rack with intelligent metered PDU (8 × C13 outlets) for power distribution monitoring at the main IDF. GI perforated hot-dipped galvanized cable tray, BEC MS pipes, and flexible hose throughout — every cable run routed, dressed, and labelled at both ends. D-Link horizontal cable manager for clean patch panel presentation.
See Every Zone. Record Every Event. Control Every Door.
With the cabling backbone commissioned and Fluke-certified, Phase 2 brought the security intelligence layer online. The IP CCTV installation covered the terminal with 22 Bosch dome cameras for interior coverage and 3 Bosch 4MP PTZ GenAI+ cameras for active perimeter monitoring — all feeding into Genetec Security Center 5.13 unified VMS on a Streamvault 64TB RAID5 appliance. Simultaneously, 30 HID card readers secured 15 access-controlled doors — every reader connected to an iSTAR Edge G2 IP access control edge device and managed centrally by C·CURE 9000 access management software.
Bosch 2MP Fixed Dome IP Cameras — NDI-3702-AL
22 × Bosch fixed dome IP cameras with 3.3–10.2mm varifocal IR lens deployed across terminal interiors, check-in areas, corridors, and operational zones. 2MP resolution with H.265 compression for efficient NVR storage. PoE powered over Cat6A drops from the Cisco Catalyst switching layer.
Bosch 4MP GenAI+ PTZ — Edge-AI-Ready for Loitering & Intrusion Detection
3 × Bosch NDP-7803S-Z30L PTZ cameras — 4MP resolution, 30× optical zoom, IP66 weatherproof, IR illumination, and built-in GenAI+ video analytics engine. Positioned at perimeter monitoring points and vehicle access zones. These cameras are edge-AI-ready: loitering detection, intrusion detection, and ANPR-integration-capable without a separate analytics server.
Genetec Security Center 5.13 VMS — 64TB Streamvault
Genetec Security Center 5.13 unified VMS with Base Enterprise Package, camera connections, and 5-year Advantage subscriptions. Recording and storage on a Streamvault SV-2041E 1U appliance — 64TB RAID5, Xeon processor, 32GB RAM, Windows Server 2025, 10G RJ45 connectivity. Three LG 55" displays drive the central unified monitoring security operations workstation.
HID Card Readers + iSTAR Edge G2 + C·CURE 9000 Access Management
30 × HID card readers with 30 × HID RFID access cards deployed across 15 airport security doors — each door fitted with an EM lock, break-glass emergency door release, magnetic door sensor, and exit push button. 8 × iSTAR Edge G2 four-reader IP access control edge devices manage every door. C·CURE 9000 governs 1,000 card holders with anti-passback enforcement, time-attendance audit trail, and fire-alarm EM lock release.
Enterprise Network Intelligence — Cisco DNA Advantage, ThousandEyes, WiFi 6E
The final phase activated the active network layer — Cisco Catalyst 9300 UPoE+ switches with DNA Advantage licensing and ThousandEyes Enterprise Agent for embedded network observability, then Cisco Catalyst CW9162I WiFi 6E access points for terminal wireless coverage. Once every system was live, end-to-end commissioning validated every cable, every camera, every card reader, and every wireless zone before handover documentation was delivered.
Cisco Catalyst 9300 48-Port UPoE+ — DNA Advantage 5-Year + ThousandEyes
C9300-48H-A with Cisco DNA Advantage 48-port 5-year license, Cisco DNA Spaces Extend 5-year, ThousandEyes Enterprise Agent 5-year for network observability, C9300-NM-8X 8×10GE module for fiber uplinks, 1,100W PSU, and SSD-240G storage. The core distribution switch for the BIAL deployment — powering cameras, APs, and access control readers via UPoE+.
Cisco Catalyst 9300 24-Port UPoE+ — DNA Advantage 3-Year + Dual PSU
C9300-24H-A with Cisco DNA Advantage 24-port 3-year, DNA Spaces Extend 3-year, ThousandEyes Enterprise Agent 3-year, 8×10GE network module, and dual 1,100W PSUs for redundant power. Access-layer switching with stacking cables for resilient inter-switch connectivity.
Cisco Catalyst WiFi 6E — CW9162I-ROW with DNA Essentials
CW9162I-ROW WiFi 6E access points deployed for enterprise wireless coverage throughout the terminal — ceiling-grid mounted with low-profile brackets. Cisco DNA Essentials + Wireless DNA Essential + DNA Tracker — all 3-year subscriptions. CAPWAP-managed, providing high-density indoor WiFi 6E coverage for airport staff, operational devices, and terminal systems.
End-to-End Commissioning — Fluke Fiber OTDR, VMS, ACS, WiFi
Full system commissioning: Fluke copper certification per port, fiber OTDR testing per run, Bosch camera coverage and IR validation, Genetec VMS recording and playback confirmation, C·CURE 9000 access grant/deny and fire release testing per door, and WiFi 6E coverage and roaming validation per zone. Complete as-built documentation, IP address scheme, device inventory, user guides, and warranty documentation delivered at handover.
The Outcome — Infrastructure That Meets Aviation Security Standards
When Layerix completed the BIAL deployment, the airport had:
- 28km of OS2 armoured SMF backbone connecting every operational zone at 10Gbps — with Fluke-certified CommScope Cat6A LSZH copper to every data outlet, TIA-568 compliant from end to end.
- 25 Bosch IP CCTV cameras — fixed dome and GenAI+ PTZ — feeding real-time and recorded footage into Genetec Security Center unified monitoring on 64TB RAID5 storage. The PTZ cameras are edge-AI-ready for loitering and intrusion detection video analytics, and the perimeter infrastructure is ready for ANPR automatic number plate recognition at vehicle access points.
- 30 HID card readers across 15 access-controlled doors — managed by C·CURE 9000 with anti-passback, time-attendance logging, and fire-alarm EM lock release on every door. Airside access is not just controlled — it's logged, provable, and auditable.
- Cisco Catalyst 9300 switching with DNA Advantage and Cisco ThousandEyes embedded network observability — a network layer with 5-year SLA, intelligence, and UPoE+ capacity built for the next decade of aviation growth, not just today's device count.
- Cisco Catalyst WiFi 6E providing enterprise wireless coverage across the terminal — ceiling-grid mounted, CAPWAP-managed, DNA Essentials licensed for 3 years.
Why Aviation IT Infrastructure Is in a Category of Its Own
A corporate office has SLA-based working hours. A retail outlet can close for a network maintenance window. An airport has none of those options. The infrastructure decisions made at the BOQ stage — LSZH vs standard PVC, armoured fiber vs indoor-only cable, PoE CCTV camera installation with dome vs PTZ selection, anti-passback access control vs basic card-only systems, DNA Advantage licensing vs commodity switching — have regulatory, safety, and operational consequences that cannot be retrofitted after the fact.
The Bosch GenAI+ PTZ cameras deployed at BIAL are not just IP CCTV cameras with zoom. They are edge-AI-ready cameras that can run loitering detection, intrusion detection, and people counting analytics on-device — no additional analytics server required. The Genetec VMS integration means every event from every camera appears on one central unified monitoring dashboard, with NVR/DVR-style playback linked to access control events. And as vehicle traffic grows, the perimeter infrastructure is ANPR-ready — the automatic number plate recognition system that tracks vehicle entry, exit, and dwell time at every gate access point can be layered on without replacing a single camera or cable run.
For the access control and door interlock system, every EM lock installation includes a fire-alarm release interface — a non-negotiable requirement that Layerix enforces on every access control project. C·CURE 9000's anti-passback and full audit trail mean that airside credential management is provable to any regulatory auditor, on any date, for any event.
Project Scale at a Glance
OS2 armoured SMF fiber backbone — 10Gbps per link
Bosch dome + GenAI+ PTZ IP CCTV — Genetec VMS
HID access control — C·CURE 9000, 1,000 card holders
Genetec Streamvault RAID5 NVR storage
Components & Technologies Deployed
"In aviation, infrastructure isn't a support function. It's the reason every departure board updates, every door opens only for the right person, and every security incident has footage from the right camera at the right angle. We build it to those standards — from the first cable pull to the final Fluke report."
— Layerix Networking Experts Engineering Team
Explore the Services Deployed in This Project
About Layerix Networking Experts
Layerix Networking Experts is a Bengaluru-based enterprise IT infrastructure company with a zero-outsourcing model and 35+ certified in-house engineers. We design, deploy, and manage complete digital infrastructure for aviation, hospitality, manufacturing, healthcare, and commercial clients — including Cat6A/OFC structured cabling, enterprise IP CCTV & VMS, AI video analytics, ANPR systems, access control & biometric systems, servers & storage, and managed services/AMC. Every deployment is documented, warrantied, and backed by full statutory compliance (DPIIT/Startup India, MSME Udyam, ESI/PF).
Key Results
1,500m CommScope Cat6A LSZH ETL-verified cabling — 40 data outlets, 3 × 24-port loaded patch panels, Fluke TIA-568 certified
28km CommScope OS2 12F armoured SMF OFC backbone — 20 × FOSC-100 splice closures, 20 × Cisco 10G LR SFP
22 × Bosch 2MP dome cameras + 3 × Bosch 4MP GenAI+ PTZ cameras — edge-AI-ready IP CCTV with loitering & intrusion detection
Genetec Security Center 5.13 VMS — Streamvault SV-2041E 64TB RAID5, Xeon, Windows Server 2025, central unified monitoring
30 × HID card readers + 8 × iSTAR Edge G2 four-reader IP controllers + C·CURE 9000 (1,000 card holders) — anti-passback, fire release
15 × EM locks, break-glass emergency releases, magnetic door sensors, exit push buttons
Cisco Catalyst 9300 48-port + 24-port UPoE+ — DNA Advantage, ThousandEyes, 5Y & 3Y SLA
Cisco Catalyst WiFi 6E CW9162I APs — DNA Essentials, Wireless DNA, ceiling-grid mounted
Ready to achieve similar results?
Transform your IT infrastructure with Layerix Networks