What does a dental office network diagram look like?

Key facts

Why does a dental office need a network diagram?

For support and for incidents. CISA's ransomware guidance tells organizations to develop and regularly update comprehensive network diagrams, because they help responders know where to focus, and to keep IT documentation in offline backups and hard copies (CISA). In a dental office, the diagram is also what lets a new IT company take over without guessing, so it belongs in the practice's handover package. See handing over equipment docs.

What does the logical diagram look like?

Here's a simplified example for a 6-operatory office with a CBCT. The device names, VLAN numbers and subnets are illustrative; your IT provider sets the real ones.

Internet (fiber, primary)      Internet (backup line)
            \                     /
             Firewall / router  (VPN for MSP + PMS vendor support)
                     |
             Core switch (PoE, 1 Gbit/s; in locked rack)
   ┌───────────┬───────────┬───────────┬───────────┬───────────┐
 VLAN 10      VLAN 20     VLAN 30     VLAN 40     VLAN 50     VLAN 60
 Clinical     Imaging     Phones      Cameras     Guest Wi-Fi Management
 workstations CBCT + RCU  VoIP        NVR +       internet    switches,
 front desk   pano, PSP   handsets    cameras     only        APs, UPS
 server/NAS   sensors PCs

What each part shows:

• Internet and firewall, including any backup line and every remote-access path (MSP, PMS vendor, imaging vendor). CISA specifically calls for showing third-party and managed-service connections (CISA).
• Segments. HHS's cybersecurity practices recommend restricting access between network segments, placing medical and IoT devices (including cameras) in restricted zones, and separating guest networks from organizational systems (HHS 405(d) HICP). See VLAN design.
• Imaging. Dentsply Sirona requires 1 Gbit/s for every 3D network component, supports no wireless, and recommends reserved static IPs outside the DHCP range for the x-ray unit and reconstruction server (Dentsply Sirona). Show those addresses on the diagram. See network requirements for imaging.
• Servers and backups, including where offline copies live. See data backup.

What does a floor-plan (2.5D) diagram look like?

The physical view puts the same equipment on the actual floor plan: each operatory's drops, the rack location, ceiling access points and cameras, and cable paths back to the rack. "2.5D" means the plan is shown in perspective with devices and coverage lifted slightly above the floor so you can see walls, cabling and Wi-Fi together.

FloorStack's two sample plans are working examples: a 3-operatory office and a 4-operatory office with CBCT imaging and an enclosed rack. In the viewer you can switch to a Stack view that lifts coverage and cabling off the floor, open a live view of every camera's field of view, and open a device schedule with ports and cable runs (FloorStack sample plans). The samples are illustrative; your plan is built from your floor plan. FloorStack Studio (live, free plan) produces this view for your own office along with a device schedule and network rack layout (FloorStack FAQ).

What the physical view should label:

What problems does a diagram usually reveal?

Drawing the network often exposes issues no one noticed:

• A flat network. CISA's guide contrasts a flat, unsegmented network with a segmented one (CISA). If every device sits on one subnet, the diagram makes that obvious.
• Imaging on Wi-Fi. Dentsply Sirona supports no wireless for 3D components (Dentsply Sirona).
• Undocumented remote access. Old vendor VPNs or remote-control tools that nobody remembers granting, still open years later.
• A rack in the wrong place. FloorStack's cabling guide says the rack room needs ventilation, a lock and distance from the compressor and vacuum (FloorStack).

What else should go with the diagram?

• An IP address plan by VLAN.
• A port map from patch panel to switch.
• An asset inventory. HHS lists asset ID, host name, OS, MAC and IP addresses, user and location among the fields to track (HHS 405(d) HICP).
• Admin credentials for the firewall, switches, Wi-Fi and cameras, owned by the practice. The free credential ownership checklist (coming soon) is planned to list every admin account.

The free network & IT plan generator (coming soon) is planned to turn a floor plan into a drops, rack, Wi-Fi and VLAN plan that becomes the start of both diagrams. See network design and the low-voltage plan.

How FloorStack helps

FloorStack is a dental build-out platform that draws the physical network on your real floor plan. FloorStack Studio (live, free plan) shows every device, coverage and cable run in 3D. The network & IT plan generator and credential ownership checklist are free tools coming soon. Back to the Dental Office IT Setup hub.

Free tools for this step

• Network & IT plan generator (free tool, coming soon): turn your floor plan into a drops, rack, Wi-Fi and VLAN plan.
• FloorStack Studio (live, free plan): a 3D IT plan of your office with every device placed.
• Credential ownership checklist (free tool, coming soon): list every admin account the practice should own, with a "password hostage" letter template.