Business Network Setup Guide for UAE Offices: Switches, Wi-Fi, Cabling and What It Costs
An office network is six things: a line from the operator, a router or firewall, switches, access points, cabling, and somewhere to put it all. Most UAE offices get three of them right and then spend two years fighting the other three. This guide covers all six, in the order you should buy and install them.
- The six parts of a business network
- The operator line and the router they give you
- Switches: the part everything plugs into
- Wi-Fi: access points, not extenders
- Cabling and the rack
- Power, PoE and staying up in a cut
- Segmentation, guest Wi-Fi and the security minimum
- Sizing and budget by office size
- The order to do it in
The six parts of a business network
| Part | What it does | What happens if you skip it |
|---|---|---|
| Operator line | Fibre from e& or du into the building | Nothing works; lead time is often the longest item in the project |
| Router / gateway | Connects your office to the internet, applies firewall rules, handles VPN and failover | You are stuck with the operator box: no segmentation, no failover, no visibility |
| Switches | Connect every wired device and power the PoE ones | Desk switches under tables, random loops, and nobody can tell which port is the problem |
| Access points | Wi-Fi coverage designed for the floor plate | Dead zones, dropped calls, and extenders that make it worse |
| Cabling | Cat6 or Cat6A from a patch panel to every desk and ceiling point | Retrofit cost, trailing cables, and a ceiling that has to be opened twice |
| Rack and power | Somewhere ventilated and lockable, on a UPS | Equipment on a shelf in a store room, overheating in summer |
The operator line and the router they give you
In the UAE your internet comes from e& or du, and both supply a combined router and Wi-Fi box. That box is fine as a line terminator and poor as a business network core, for three reasons: its Wi-Fi covers roughly one room, it has about four LAN ports, and it cannot cleanly separate guest traffic from your own.
The standard arrangement is to leave the operator box doing the line, and put your own equipment behind it:
- Business gateway or router for firewall, VPN, VLAN routing and multi-WAN failover. A UniFi Dream Machine SE or Dream Router covers most SME cases; a Cisco ISR 1100 suits sites that need an operator-grade platform.
- Your own Wi-Fi, from ceiling access points, with the operator box Wi-Fi switched off so the two do not fight.
- Line lead times matter. A new fibre circuit in a UAE building can take weeks. Order it the day the lease is signed, not the week before you move.
Switches: the part everything plugs into
The switch is where every desk, printer, camera, phone and access point terminates. Three decisions matter, and all three are covered in depth in the switch buying guide.
| Decision | The short answer |
|---|---|
| Managed or unmanaged | Managed, for anything above about ten devices or any site with cameras, IP phones or guest Wi-Fi. VLANs and port visibility are what you are buying. |
| PoE or not | PoE, if access points, IP phones or cameras are involved. Check the total PoE budget in watts, not just the port count. |
| Port count and uplinks | Count live devices, add 30 percent, round up to 8 / 16 / 24 / 48. Make sure there are SFP uplink ports for fibre between floors. |
Typical picks we supply: USW-Lite-16-PoE for a small office, USW-Pro-24-PoE or Aruba Instant On 1930 24G for a floor, Cisco CBS250-24P where a Cisco platform is specified, and Catalyst 9300 for enterprise cores.
Wi-Fi: access points, not extenders
Business Wi-Fi is a coverage design, not a product purchase. The three rules that decide whether it works:
- Cable every access point back to the switch. Extenders and mesh repeaters halve throughput on every hop and are a last resort where cable genuinely cannot be pulled.
- More, smaller cells beat one powerful unit. Four access points at sensible power cover a floor better than two at maximum power, because a device has to be able to talk back.
- Mount in the ceiling, centrally. Not on a wall behind a cupboard, not in the server room. Glass partitions and plasterboard with metal studs both cut range far more than people expect.
A UniFi U6 Pro is the typical office unit; the Wi-Fi guide covers Wi-Fi 6 vs 6E vs 7, counting access points properly, and the specific cases of hotels, warehouses and schools.
Cabling and the rack
Cabling is the cheapest part to do right and the most expensive to do twice, because the second time the ceiling is closed and the office is occupied.
- Cat6 is the sensible default for 1 Gbps to the desk with headroom. Cat6A is worth it for the runs to access points and anywhere you expect multi-gigabit later.
- Two data points per desk minimum, plus one per ceiling access point, one per camera, one per printer, one per meeting room display.
- Fibre between floors or between buildings, terminated on SFP modules; copper is limited to 90 m of fixed cabling.
- A rack, not a shelf. A small 6U to 12U wall cabinet for a single office, a 42U floor cabinet for a server room, with a patch panel so nothing is re-terminated on the switch itself.
- Label everything at both ends. This is ten minutes during install and hours of guesswork afterwards.
Details, including the UAE fit-out sequence, are in the cabling and racks guide.
Power, PoE and staying up in a cut
- PoE budget. A switch with 24 PoE ports and a 370 W budget cannot run 24 devices at 30 W each. Add up what you will actually attach: an access point is roughly 10 to 25 W, an IP phone 4 to 8 W, a PTZ camera can be 30 W or more.
- PoE standards. 802.3af up to about 15 W, 802.3at (PoE+) up to about 30 W, 802.3bt (PoE++) beyond that. Wi-Fi 6E and 7 access points commonly need PoE+.
- UPS the rack, not just the server. If the switch and gateway lose power, the phones and cameras go with them. A rack UPS sized for 15 to 30 minutes covers DEWA blips and lets things shut down cleanly.
- Cooling. A closed cabinet in a store room in Dubai in August is an oven. Ventilate it, or put the cabinet somewhere air-conditioned.
Segmentation, guest Wi-Fi and the security minimum
Segmentation means putting different kinds of traffic on different VLANs so that one compromised device cannot reach everything. It costs nothing extra on a managed switch and it is the single biggest improvement most UAE SME networks can make.
| VLAN | What goes on it | Why |
|---|---|---|
| Staff | Laptops, desktops, printers, file server | The network people actually work on |
| Voice | IP phones and the PBX | Keeps call quality predictable and separates the phone system |
| Guest | Visitor Wi-Fi | Internet only, no access to anything internal, bandwidth limited |
| Cameras / IoT | Cameras, access control, sensors | The most commonly exploited devices, and the ones that need internet least |
| Management | Switches, access points, the gateway | Not reachable from staff or guest networks |
Alongside that, the minimum for any business: change every default password, keep firmware current, turn off remote administration from the internet, and back up the configuration somewhere that is not the device itself.
Sizing and budget by office size
Equipment only; cabling and installation are quoted per site. Figures are typical bands, not quotes.
| Office | Gateway | Switching | Access points | Rack |
|---|---|---|---|---|
| 5 to 10 people, one room | Small business gateway | One 8 to 16-port PoE switch | 1 to 2 | 6U wall cabinet |
| 10 to 30 people, one floor | Business gateway with failover | One 24-port PoE switch + spare ports | 2 to 4 | 9U to 12U wall cabinet |
| 30 to 80 people, one floor | Gateway or firewall, dual WAN | 24 or 48-port PoE, fibre uplink | 4 to 8 | 12U to 18U, UPS |
| 80 to 200 people, multi-floor | Firewall + core switch | Access switch per floor, fibre to core | 8 to 20 | 42U server room |
| Warehouse / site office | Gateway with 4G backup | PoE switch in a sealed cabinet | Long-range or outdoor units | Sealed wall cabinet |
| Hotel / clinic / school | Firewall with guest portal | PoE per floor or per wing | Per room or per zone | Per floor |
The order to do it in
- Order the operator line first. It has the longest lead time in the whole project.
- Mark the points on the floor plan before the fit-out contractor closes the ceiling: desks, access points, cameras, printers, displays, the rack position.
- Pull and terminate the cabling, onto a patch panel, labelled at both ends, and test every point.
- Install the rack, UPS and switches, then the gateway.
- Mount and tune the access points, then walk the floor and check coverage where people actually sit.
- Set up VLANs, guest Wi-Fi and passwords before anyone connects, not after.
- Document it: a port map, an IP plan, the device list and where the configuration backups live. The next person, or the next you, will need it.
Send us the floor plan
Area in square metres, headcount, number of meeting rooms, whether there are cameras or IP phones, and whether the ceiling is still open. We come back within one working day with a parts list, a cabling point count and an installed price.
Questions we get asked
Can we just use the router the internet provider gave us?
For four or five people, yes. Beyond that it becomes the bottleneck: the built-in Wi-Fi covers one room, the four LAN ports run out immediately, and it cannot separate guest traffic from your servers or cameras. The usual pattern in the UAE is to keep the operator box for the line itself and put your own router or gateway, switch and access points behind it.
Do I need a managed switch if I have a router?
They do different jobs. The router connects your office to the internet; the switch connects devices to each other inside the office. A managed switch matters when you need VLANs (separating guest Wi-Fi, cameras, VoIP and staff), PoE for access points and phones, or any visibility into which port is causing a problem. If you have more than about ten devices, or any cameras or IP phones, buy managed.
How many access points do we need?
Plan by area and by people, not by square metres alone. A rough UAE office figure is one access point per 100 to 150 m2 of open-plan space, and per 60 to 80 m2 where there are solid walls, glass partitions or a lot of devices. A 300 m2 office typically needs two to three, positioned centrally in the ceiling, not one big unit in a corner.
Is a Wi-Fi extender or an access point better?
An access point, every time, in a business. An extender repeats an existing signal over the air, which halves throughput and adds a second network name that devices cling to in the wrong place. An access point has its own cable back to the switch, so every unit delivers full speed and the network behaves as one.
What does PoE mean and why does it matter?
Power over Ethernet: the switch sends power down the same cable that carries data, so access points, IP phones and cameras need no separate power adapter at the ceiling or the wall. It is the reason a PoE switch is usually worth the difference. Check the switch PoE budget in watts, not just the number of PoE ports.
What does an office network cost in the UAE?
As a guide for equipment, excluding cabling labour: a 10-person office typically lands in the low thousands of dirhams, a 30-person office in the mid five figures once a managed PoE switch, three or four access points, a gateway and a small rack are counted, and a 100-person multi-floor office is a project priced per floor. Cabling is usually quoted separately per point. We quote per site.
Who pulls the cables?
A cabling contractor, usually as part of the fit-out, or our installation team for smaller sites. The important thing is that it happens before the ceiling closes: a data point pulled during fit-out costs a fraction of one pulled afterwards, and retrofitting is the single biggest avoidable cost in UAE office IT.
What are the components of structured cabling?
Six: the entrance facility where the operator line arrives, the equipment room or rack, the backbone between floors or buildings, the telecom room on each floor, the horizontal cabling from the patch panel to each desk, and the work-area outlets and patch leads. Our cabling guide covers each of them and where UAE offices typically cut corners.
Do we need a firewall as well as a router?
Many business gateways include firewall functions, which is enough for a small office. A separate firewall or a security gateway makes sense once you have staff working remotely, servers reachable from outside, compliance requirements, or a network that would cost real money to lose for a day. It is a question of risk, not of headcount.
What happens when the internet goes down?
Everything that depends on the cloud stops, including cloud telephony. Two common answers: a second line from a different operator with automatic failover on the gateway, or a 4G/5G backup on the same gateway. For any business where an outage stops revenue, one of the two is not optional. Phones can also fail over to mobile, which our IP PBX guide covers.
- Network switch buying guide: managed vs unmanaged, PoE budget, uplinks
- Wi-Fi access point guide: coverage, Wi-Fi 6 and 6E, hotels and warehouses
- SFP and fibre module guide: SFP vs SFP+, single-mode vs multimode
- Structured cabling and racks: Cat6 vs Cat6A, rack sizing, patching
- IP PBX buying guide for UAE businesses
Written by the IRIX networking team in Bur Dubai. Browse switches, access points, routers, SFP modules, cables and connectors and racks. Supply, installation and configuration across Dubai and the northern emirates.