How to design a small-business network: segmentation, Wi-Fi and PoE capacity

Designing a small-business network starts with knowing which services must stay available and which devices use them. That inventory informs the topology, link capacity, power requirements and traffic separation.

Inventory devices before choosing switches

List users, workstations, printers, phones, access points, cameras, controllers and services hosted outside the office. Record each device's location, planned connection, PoE demand where applicable, importance and access requirements. Mark cabinets, cable routes and links between floors as well.

This map reveals potential bottlenecks and helps reserve ports and capacity for justified growth. Do not buy on port count alone: check uplink speed, PoE budget, management features, ventilation and cabinet conditions.

Separate networks according to access needs

VLAN segmentation can limit traffic reach and make policies easier to manage, but creating VLANs does not by itself provide complete isolation. Check router or firewall rules, shared services that must remain accessible, switch management and administrative access.

An initial design might separate company devices, guests and IoT equipment, provided actual needs justify it. For each segment, define which other segments it may contact, which DNS or services it needs and how it is administered. Document exceptions so they do not become permanent broad access.

Plan Wi-Fi with measurements, not only a floor plan

Access-point quantity and placement depend on building materials, layout, interference, client density and applications. Start with a plan, then validate it in the finished space. Measure coverage and performance where people work, including meeting rooms and transition areas.

Set channels and transmit power for the environment and client capabilities. More access points do not guarantee better service if they overlap poorly or lack enough wired backhaul. Repeat tests during normal activity and keep a map of the results.

Calculate PoE capacity from specifications

Add the manufacturers' stated maximum power for devices that may run simultaneously and compare it with the switch's available PoE budget. Check the standard and class each device requires, per-port limits and the model's total budget. A fixed percentage allowance is not a substitute for this calculation.

Confirm that cabling and links meet the manufacturer's requirements and the installed cable category. For variable loads, such as motorised equipment, account for the startup scenarios described in the documentation.

Commissioning checks

1. Verify link speed negotiation and errors on ports and uplinks.
2. Test access to permitted services and block routes that should remain isolated.
3. Measure Wi-Fi at actual workstations using more than one client type.
4. Check PoE draw, alerts, temperature and cabinet ventilation.
5. Save the configuration, network diagram, addressing and recovery procedure.

Does every device type need its own VLAN?

Not necessarily. Separate devices when there is a difference in access, administration or risk that you can enforce and maintain. Fragmenting the network without policies or documentation adds operational work and makes errors more likely.

Is the problem Wi-Fi or the internet connection?

Compare a wired test with wireless measurements against the same services at the same times. Check packet loss, latency, channel utilisation and access-point load. A single speed test cannot identify the cause on its own.