Business Wi-Fi: How to Design It Right (and Not Rebuild It in a Year)

Designing business Wi-Fi properly comes down to four steps: a site survey to measure coverage and interference, access point sizing based on users and devices (not square metres), PoE cabling that powers each AP in the right spot, and a configuration built on WPA3, separate VLANs and an isolated guest network. Everything after that is ongoing maintenance.

It sounds straightforward. Yet Wi-Fi sits alongside the office printer as the thing businesses complain about most: the video call drops in the meeting room, the warehouse has dead zones, visitors browse on the same network as the servers. In more than 25 years of working on SME networks, we have seen the same script play out dozens of times: an installation born from "putting a few access points wherever there was a socket" that grew layer by layer, with no plan behind it. This guide explains how to design a business Wi-Fi network that actually works, using the same criteria we apply in the field.

Why home Wi-Fi doesn't survive in the workplace

A consumer router with showy antennas is built for a household: a handful of devices, one floor, no need to keep different users apart. In a business environment, everything changes:

• Density: in an open-plan office of 30 people, you will easily see 60-90 connected devices — laptops, smartphones, tablets and printers. A single radio simply saturates.
• Continuity: when home Wi-Fi drops, you reboot the router; when it drops at work, warehouse barcode scanners, VoIP phones and tills all stop.
• Security: a visitor, or a compromised device, must never be able to reach your servers and your ERP.
• Roaming: someone walking from their desk to the meeting room with a laptop should move from one access point to the next without ever noticing.

Business Wi-Fi is not "a more powerful router": it is a system of coordinated access points sitting on top of a properly built wired network. That is why we treat it as part of the overall network design, the same approach we describe on our business network support page.

The site survey: measure before you buy

The first mistake we see in DIY quotes is starting from the hardware. You start from the measurement. The site survey is the technical walkthrough that reveals how the radio signal actually behaves in your premises.

What a site survey checks

• Floor plan and materials: plasterboard, reinforced concrete, metal shelving and glass partitions all attenuate the signal to very different degrees. A warehouse full of metal stock on racking is a maze for radio waves.
• Interference: neighbouring Wi-Fi networks, radio links, microwave ovens in break areas, Bluetooth devices. On the 2.4 GHz band there are few free channels, and on an industrial estate congestion is the norm, not the exception.
• Realistic mounting points: where a network cable can actually be run, where the AP can be fixed (ceiling mounting is almost always the right call), and where you need outdoor-rated or dust-proof hardware.
• Usage density per area: a meeting room with 12 people on a video conference puts far more load on the network than a 40-metre corridor.

The output is a coverage map (heatmap) and a list of access point positions. On more structured projects we run both a predictive survey at the design stage and a validation survey once installation is complete: the gap between the two is exactly where problems hide.

Sizing access points: capacity, not just coverage

The classic question is "how many access points do I need for 800 square metres?". It is the wrong question — or rather, only half of it. A modern AP can cover 150-200 m² in open space, but the real variable is how many active devices it has to serve at the same time, and with what kind of traffic.

Some practical reference points we use when sizing:

• Standard offices: 25-40 active devices per access point is a prudent threshold to keep performance good for everyone.
• Meeting rooms and training areas: treat them as high-density zones, often with a dedicated AP, because 15 simultaneous video calls will saturate a shared radio.
• Warehouses and production floors: what matters is seamless coverage for roaming barcode terminals, plus hardware rated for the environment (temperature, dust, mounting height).

Wi-Fi 6, 6E or 7: which standard to choose in 2026

For an SME renewing its installation today, Wi-Fi 6 (802.11ax) is the bare minimum, and Wi-Fi 6E or 7 is the right choice if the installation has to last 6-8 years. The benefit is not headline speed so much as efficiency in dense environments: technologies such as OFDMA handle many concurrent clients far better than the older standards did. Wi-Fi 6E and 7 add the 6 GHz band, which is still uncrowded — pure oxygen for offices surrounded by other networks. One caveat: 6 GHz penetrates walls less effectively, which is one more reason not to skip the site survey.

Architecture: controllers, cloud management and the cabling nobody sees

Enterprise access points do not work in isolation: they need central management, either on-premises or in the cloud. Cloud management is now the most common choice for SMEs — a single dashboard to configure SSIDs, push firmware updates and see who is connected, even across multiple sites.

Three architectural details that make the difference:

• PoE (Power over Ethernet): APs are powered over the network cable through PoE switches. No mains sockets in the ceiling, and with the switch on a UPS your Wi-Fi stays up through a power cut. Check the switch's PoE budget: Wi-Fi 6/7 access points draw more power than the older generations.
• Cabling: every AP deserves its own certified run, Cat 6 at minimum, back to the network cabinet. Excellent Wi-Fi on improvised cabling is still mediocre Wi-Fi.
• Roaming: with coordinated APs and properly tuned radio power, the handover between units (the 802.11k/v/r standards) is seamless. It is the detail that separates "the Wi-Fi works" from "my video call doesn't drop while I walk".

Securing business Wi-Fi: WPA3, VLANs and a guest network

Poorly configured Wi-Fi is a way into the company that does not even require picking a lock: being in the car park is enough. The essentials:

• WPA3 (or at the very least WPA2 with a strong, regularly rotated password): WEP and the original WPA should be treated as no protection at all.
• WPA3-Enterprise with 802.1X wherever possible: every user signs in with personal credentials or a certificate, so when someone leaves the company you simply disable their account instead of changing the password for everyone.
• Separate SSIDs and VLANs: the corporate network, the guest network and the network for "second-class" devices (CCTV cameras, sensors, the meeting-room TV) must run on isolated segments. The guest network should see the internet only — never servers or printers.
• Enforcement at the perimeter: the rules between VLANs and towards the internet are enforced by the firewall; if that device is outdated or misconfigured, your segmentation exists only on paper. We cover this in detail in our guide to choosing a business firewall.
• Access from outside the office: staff working from home or from a client's site do not come in over Wi-Fi — they must connect back to the company over an encrypted tunnel, as we explain in our article on business VPNs.

The 5 mistakes we see most often

1. Access points bought at random and mixed together: three different brands, no central management, no working roaming.
2. APs in the convenient spot, not the right spot: on top of the rack cabinet in the IT room instead of on the ceiling where the users are.
3. One SSID for everything: guests, production and management all on the same flat network.
4. Radio power maxed out everywhere: it sounds logical, but it actually creates interference between your own APs and breaks roaming.
5. An installation never touched again after go-live: firmware years out of date, passwords never rotated, no monitoring. Wi-Fi is a service, not a household appliance.

That last point is the most underestimated. It is why, in our managed service contracts, Wi-Fi is included in continuous network monitoring: scheduled updates, alerts when an AP goes offline, and periodic coverage and security checks.

What a properly built business Wi-Fi network costs

It depends on floor area, density and the environment, but as an order of magnitude: a business-grade Wi-Fi 6 access point costs roughly €150-500, on top of which you add PoE switches, cabling, any cloud management licences, and the design and installation days. For a single-floor office of 20-30 people, a well-built installation typically starts at a few thousand euros — less than a year's worth of complaints, dropped video calls and wasted working hours. The initial site survey is the part that stops you buying twice the hardware you need, or half of it.

Let's talk: your Wi-Fi deserves a design, not a patch

If Wi-Fi is a recurring complaint in your business, the problem is almost never solved by "adding a repeater". You need a measurement, a design, and someone to keep it healthy over time.

TN Solutions has been designing, installing and managing business Wi-Fi networks for over 25 years from our base in Melzo, near Milan, with ISO 9001 and ISO 27001 certifications: site survey, sizing, installation and continuous monitoring, for single offices and multi-site organisations alike.

Call us on 02 9517550 or get in touch through our contact page: one technical walkthrough is enough for us to tell you whether your installation needs fixing or redesigning — and what it costs to do it properly.