Office Wi-Fi design: how to plan a business wireless network step by step

Business Wi-Fi very often starts with the provider's router sitting on a cabinet in reception. With five people, it works. With twenty, you start getting dropped video calls, a meeting room where “there's no internet”, and a printer that is on the network one minute and gone the next. The connection is usually fine at that point; the problem is a local network that was never designed.

A Wi-Fi design does not have to be a big undertaking. In an office of a dozen or so people, it comes down to a few decisions made in the right order: requirements first, then measurement, placement, cabling and configuration, and acceptance at the end. Below we go through these stages one by one.

When a business needs a Wi-Fi design

A design makes sense when you move or renovate, because that is when cables above a suspended ceiling cost least. It is also worth doing when the number of people in the office has grown noticeably, the team has moved from desktops to laptops, or restarting the router has become a morning ritual.

The second warning sign is a network that someone has extended over the years with range extenders and additional routers. Such a setup is hard to fix piecemeal. It is quicker to establish what the network needs to do today and redesign it from scratch, keeping whatever can be kept.

Requirements: how many devices and for what

A Wi-Fi design starts with a list of devices, not with a manufacturer's catalogue. Each person usually has a laptop and a phone, often a tablet or headset too. Then there are printers, the conferencing kit, the TV in the meeting room, cameras and sensors. What counts is the number of devices working at the same time, broken down by zone.

Just as important is what those devices do. A dozen laptops with email and a browser are a different load from the same laptops on a morning video call or working on large files from the server. Wi-Fi telephony and warehouse terminals need low latency and smooth handover between access points, which changes the whole design.

At this stage, write down:

• the number of people today and the plan for the next few years,
• work zones: open-plan space, private offices, meeting rooms, reception, back office, warehouse,
• critical uses: video calls, telephony, terminals, tills,
• fixed devices that can be connected by cable to take load off the Wi-Fi,
• the need for a network for guests and for devices you do not trust, such as TVs and air conditioning controllers.

We explain in detail why square metres cannot be converted into a number of access points in the article how many access points are needed in the office.

On-site measurement, or site survey

An architectural plan does not tell you how much a reinforced concrete wall, glazing with a metallic coating or a lift shaft attenuates the signal. An on-site measurement, called a site survey, shows this directly. In a simple office with lightweight partition walls, a site visit and a design on the floor plan are often enough. With thick walls, several floors, halls and zones with a high density of devices, a measurement is needed.

A survey usually covers:

• signal level and connection quality at workstations,
• attenuation by walls and the zones where the signal drops sharply,
• neighbouring networks and other sources of interference in the 2.4 and 5 GHz bands,
• checking whether the planned access points will provide enough capacity in high-density zones.

In halls and warehouses, attenuation depends on what is currently on the racks, so the survey has to be done differently. We describe this in our article on Wi-Fi in the hall and warehouse.

Location of access points

A single “powerful” router in the middle of the office shows full bars in the taskbar, but a laptop at the edge of coverage connects slowly and occupies the channel longer than other devices. That slows down everyone using the same channel. This is why an office uses several access points of moderate power, positioned so that at every workstation one of them is clearly stronger than the others.

Access points are mounted on the ceiling or high on a wall, in open space, away from metal cabinets and ventilation ducts. An access point shut in a rack cabinet or hidden behind a TV for the sake of appearance loses much of its capability. Meeting rooms and zones where many people work at once are planned separately, because capacity is what counts there.

Too many access points on the same channel also cause harm. Instead of sharing the traffic, they start competing with each other, and devices switch between them more often. We write about how devices choose an access point and why a laptop can cling to a distant transmitter in our article on Wi-Fi roaming in a company.

Cabling and PoE power

Every access point in an office should have its own cable to the switch. A wireless link between access points, known as mesh, shares the same radio between users and transmission to the neighbouring access point, so throughput drops with every hop. Mesh makes sense where a cable cannot be run or the solution is temporary.

The same cable powers the access point via PoE (Power over Ethernet). A switch has a set power budget for all its ports, and newer access points can draw more than older ones. The budget has to be calculated together with cameras and phones, which also use PoE. We describe how to do this in our article on PoE power budget.

While cabling the access points, it pays to run cable to printers, desktop computers and the meeting room equipment as well. Anything that stays in one place takes load off the Wi-Fi for the devices that genuinely move around.

The 2.4, 5 and 6 GHz bands in the office

The 2.4 GHz band has the longest range and passes through walls best, but it is narrow and in office buildings usually crowded with neighbours' networks. In an office it suits printers, sensors and equipment that does not need throughput.

The 5 GHz band has many more channels and fewer neighbours, but copes less well with walls. It is the main working band in an office, and most laptops and phones should be on it.

The 6 GHz band was harmonised in the European Union by Commission Implementing Decision (EU) 2021/1067 of 17 June 2021. It covers 5945-6425 MHz for wireless local area networks in two device classes: LPI (low power indoor), restricted to the inside of buildings, with up to 23 dBm e.i.r.p., and VLP (very low power), meaning portable devices with up to 14 dBm e.i.r.p., which may also operate outdoors. In Poland, the conditions of this decision were introduced by the Regulation of the Minister of Digital Affairs of 11 November 2023 amending the regulation on radio equipment that may be used without a radio licence (Journal of Laws (Dz.U.) 2023 item 2567), in force since 12 December 2023.

In practice, this means several things. Business 6 GHz access points are LPI-class devices, so the band works only inside the building and best in the room where the access point is mounted. The 480 MHz range fits six 80 MHz channels or one 320 MHz channel, which Wi-Fi 7 likes to advertise. In an office with several access points, narrower channels are usually used so the access points do not interfere with each other. Only devices that support 6 GHz will benefit from the band, so before buying, check how many of your laptops and phones can use it.

Guest network, VLANs and encryption

A single network for every device is asking for trouble. A typical office separates at least three logical networks, each with its own name (SSID) and its own VLAN segment, that is a virtual local area network isolated from the others:

• the company network for business computers and phones, with access to servers, printers and internal resources,
• the guest network with internet access only, client isolation and bandwidth limits,
• the device network: for TVs, cameras, controllers and sensors, with access only to the services they need.

The Wi-Fi Alliance requires WPA3 support from Wi-Fi CERTIFIED devices. In a business network, WPA3-Enterprise with individual logins for each user works best, because when an employee leaves you disable one account instead of changing the password on every device. On the guest network you can use Wi-Fi Enhanced Open, which encrypts traffic without a password. If some older equipment does not support WPA3, keep a separate network in transition mode for it and plan its replacement.

Management, monitoring and updates

Business access points should be managed from a single controller, either local or in the cloud. The controller shows overloaded access points, failed connection attempts, interference and the devices generating the most traffic. Without it, every diagnosis starts with walking around the office with a phone.

The firmware of access points, switches and the firewall needs updating, because manufacturers patch vulnerabilities in it. Updates are scheduled in agreed maintenance windows, outside working hours, with the option to roll back to the previous version. Administrative access to the controller should use named accounts and two-step verification.

Wi-Fi project acceptance

Acceptance closes the project and gives you a reference point for the future. After installation and configuration, a verification measurement is taken at workstations and compared with the design assumptions. Handover between access points during a video call, guest network isolation and the operation of devices on the device network are also checked.

The business should receive as-built documentation: a floor plan with access point locations, a description of the networks and VLANs, switch port assignments, measurement results and administrative access handed over to the owner. Without documentation, every change of IT provider starts with guesswork. We describe what such a set should include in our article on network reception protocol.

The most common mistakes in business Wi-Fi

• The provider's router as the only access point. A device that is a modem, router, switch and Wi-Fi access point all at once is enough for a flat, but in an office of a dozen or so people it quickly becomes a bottleneck.
• Plug-in signal extenders. They retransmit traffic over the air, often on the same channel, so they add latency rather than throughput.
• Choosing hardware before defining requirements. The standard number on the box is no substitute for placement and configuration. A well-designed Wi-Fi 6 network usually works better than a randomly placed Wi-Fi 7 network.
• A company Wi-Fi password everyone has known for years. Every change in the team should end with a change of access, and with a shared password nobody does it.
• No documentation or access credentials. The owner does not know the controller password, and the only person who knew it no longer works with the business.

How much Wi-Fi design and deployment costs for an office

We price a simple office Wi-Fi configuration at PLN 350-850 net. A managed network, with a controller, VLANs and a guest network, is billed hourly at PLN 280 net per hour of specialist administration. A structured cabling point costs from PLN 242 net per point. We choose hardware to suit the building and whoever will maintain the network.

For business networks we are a Zyxel Networks Partner and we also work with Ubiquiti UniFi. We describe the scope of work, from the survey through acceptance to ongoing support, on the page corporate networks.

Sources

• European Commission, Commission Implementing Decision (EU) 2021/1067 of 17 June 2021 on the harmonised use of radio spectrum in the 5945-6425 MHz frequency band for the implementation of wireless access systems, https://eur-lex.europa.eu/eli/dec_impl/2021/1067/oj (accessed 02/10/2026)
• Sejm of the Republic of Poland, Regulation of the Minister of Digital Affairs of 11 November 2023 amending the regulation on transmitting or transmitting-receiving radio equipment that may be used without a radio licence, Journal of Laws (Dz.U.) 2023 item 2567, https://isap.sejm.gov.pl/isap.nsf/DocDetails.xsp?id=WDU20230002567 (accessed 02/10/2026)
• Wi-Fi Alliance, Security, https://www.wi-fi.org/discover-wi-fi/security (accessed 02/10/2026)

As of 2 October 2026.