IP address management for healthcare and public sector
Care homes, GP surgeries, health centres and municipal buildings have medical devices, clinical systems and building automation on the same physical network. Segmentation has to be sound, and every change documented.
A typical day
The supplier of a new nurse call system needs 60 static addresses and wants to know which network the system should sit in. At the same time internal audit asks for documentation of who has changed the network set-up for medical equipment over the past year.
With ipmanager the IT department reserves a range in the network for nurse call, gives the supplier a list of the addresses, and registers the equipment once installed. The audit log is filtered on the medical-device subnet and exported to CSV.
Typical layout
A layout for a health centre or care home. Medical devices and building automation are isolated from office networks and guests, and access is controlled with firewall rules between segments.
| Segment | VLAN | IPv4 | Notes |
|---|---|---|---|
| Clinical workstations | 110 | 10.40.16.0/22 | Workstations for clinical staff |
| Medical devices | 120 | 10.40.32.0/23 | Isolated, only required services open |
| Clinical systems (servers) | 130 | 10.40.40.0/24 | Records, lab, integrations |
| Printers | 170 | 10.40.41.0/25 | Static addresses |
| Network management | 199 | 10.40.42.0/26 | Switches and access points |
| Building automation | 140 | 10.40.44.0/24 | Ventilation, access control, lifts |
| Nurse call and telephony | 150 | 10.40.48.0/23 | Reserved ranges per supplier |
| Patients and guests | 160 | 10.40.64.0/21 | Internet only, client isolation |
How ipmanager helps
An audit log that cannot be altered
Every change is stored with old and new value, user, time and IP. The log can be filtered and exported for documentation and inspections.
Reserved ranges per supplier
Set aside blocks for suppliers of nurse call, building systems and medical devices before installation.
Custom fields for equipment
Record asset number, supplier and service contract on each address.
Roles and 2FA
Suppliers and temporary staff can get read-only access. Two-factor authentication is built in.
Healthcare and public sector template
The planner has its own template with the segments above, which can be adjusted to your device counts.
Data stored in Norway
The service is operated in Norway. ipmanager stores network information, not patient data.
Read also: Security · Guide: network segmentation · Privacy
Get your IP addresses under control today
Free for up to 100 IP addresses. Sign-in details by email immediately, no credit card.