A reliable wireless network is not built on the number of access points alone. Office layout, user density, security and testing all need to be planned together.
Office Wi-Fi problems are usually reported as "the internet is slow", yet the cause may be a coverage gap, interference, congestion or poor placement. Adding another access point is not always the answer. A plan that takes into account where people connect, for what work and with how many devices delivers both a better experience and a more secure network.
Start the plan with a survey
Prepare a simple floor plan of the office. Mark meeting rooms, storage, corridors, reception, open-plan areas, the kitchen and any outdoor areas. Concrete, metal, glass cladding and dense archive shelving weaken the wireless signal to different degrees. Collect the spots where staff have connection problems on the same map.
Then write down your usage scenarios: video calls, cloud applications, file sharing, guest access, mobile devices and wireless printers do not have the same needs. Take into account how many people connect at peak times, the extra devices that come into play in meeting rooms, and areas such as storage or outdoor spaces where connectivity is critical.
Separate coverage from capacity
A signal reaching a spot does not mean many devices can work comfortably there. Coverage is the physical area the wireless network reaches; capacity is its ability to serve enough devices using data at the same time. For a large meeting room or a busy open-plan office, plan around user density, not just signal strength.
Carry out a site survey before installation and test on site afterwards. During testing, try connecting from different rooms, check whether the connection drops as you move around the office, and try video calls and file access. In problem areas, moving an access point or adjusting its settings often gives a better result than adding new devices at random.
Where to place access points
Access points work best in the open, unobstructed and close to the area they serve. Putting a device inside a cabinet, behind a thick column or next to metal surfaces weakens the signal. Ceiling mounting is a common choice, but it does not give the same result in every office; the building's structure and cabling options need to be considered together.
Plan for power and cabling too. Business-grade access points are usually powered over the network cable (PoE), so check the switch's PoE support and its total power budget. If the wired infrastructure is weak, improvements on the wireless side will only go so far. In critical work areas, an uninterruptible power supply and a backup internet line are also worth considering.
Make security part of the design
Create separate networks for staff, guests and devices. The guest network should not be able to reach internal computers or shared resources. Depending on their needs, equipment such as cameras, printers or meeting room devices may also be placed on a separate network.
Sharing a Wi-Fi password should not mean giving a guest access to your business network. Set up a separate, restricted network for guests, so visitors use that instead of asking for the staff password.
Use current encryption on the wireless network: WPA3 where your devices support it, and at least WPA2 (AES) where they do not. Methods such as WEP and the older WPA/TKIP are no longer considered secure. Where possible, prefer per-user authentication (Enterprise mode) on the staff network rather than everyone sharing one password. If you must use a shared password, put rules for changing and sharing it in writing, and let the relevant people know when it changes.
Access points should have unique management passwords, and their management interface should not be reachable from the network everyone uses. Regularly remove decommissioned devices and the access of staff who have left.
Channels, interference and frequency bands
Neighbouring networks, other wireless devices and some equipment can cause interference. Channel selection and transmit power matter so that access points working side by side do not disrupt one another. Turning transmit power up to maximum does not always help; access points can overlap, and devices may stay connected to a distant one.
Band choice is also part of the plan. The 2.4 GHz band reaches further, but because it has few non-overlapping channels it is usually more crowded. 5 GHz offers more channels and generally higher speeds, but is more affected by walls and obstacles. The 6 GHz band can only be used by devices that support Wi-Fi 6E or Wi-Fi 7, and its use depends on regulations that vary from country to country. Settings that look right at the start should be reviewed again as the office layout and device density change.
Roll-out and maintenance
Rather than switching the new installation on across the whole office at once, start with a small area where possible, gather staff feedback and document the settings. Network names, access point locations, key settings, the people responsible for management, the guest access process, where configuration backups are kept and support contact details should sit in a document that is secure but accessible to the relevant people. In a fault, working from this document rather than changing settings at random helps bring the service back in an orderly way.
Keep a record of connection complaints: ask for the location, time, device type and the application being used at the time. This information makes it easier to tell whether the problem lies with the internet line, coverage, congestion or the user's device. Answering every complaint with a new access point raises costs and, in the wrong spot, can create new interference; relocating a device, adjusting channels, using a wired connection or rebalancing capacity may be more appropriate.
Over time, headcount, office layout and the applications in use all change. New partition walls, teams moving desks or devices added to meeting rooms can affect spots that used to work without problems. So don't limit Wi-Fi planning to office moves or refurbishments; set up a regular review schedule that also covers access point software updates.
Checklist
- Have the floor plan, wall types and problem areas been marked?
- Have user density and meeting room scenarios been identified?
- Have coverage and capacity needs been assessed separately?
- Has access point placement been planned together with cabling, power (PoE) and physical obstacles?
- Have staff, guest and device networks been separated?
- Is current encryption in use, and are management access and passwords handled securely?
- Has the installation been tested with real business scenarios?
- Are fault reports, configuration changes and updates being recorded?