Enterprise
Office Wi-Fi that does not throttle at the switch port
The single most common mistake in a Wi-Fi 7 refresh is buying the access points and reusing the switches. A tri-band Wi-Fi 7 AP is rated well past 10 Gbps of air capacity; hang it off a Gigabit access port and you have paid for radios you can never use.
The rest of an office design follows from that one decision: what the access layer runs at, how it gets back to the core, and what happens when the primary internet link drops during a board call.
- 2.5G
- Access port speed behind every Wi-Fi 7 AP
- 10G
- SFP+ uplink from access switch to core
- 300
- Access points in one self-organising network
- 1,500
- Clients on a single LR1500XS gateway
What goes wrong
The failure modes this design exists to prevent
Not a list of pain points — the specific ways this kind of deployment gets found out, usually after handover.
The access port is the bottleneck, not the radio
An L7Pro carries 688 + 4323 + 8646 Mbps across three bands. A Gigabit port caps everything behind it at well under a tenth of that. The AP will still associate clients and still look healthy in the console — it simply cannot deliver, and the symptom reads as a Wi-Fi problem for months.
Guest traffic and business traffic share a pipe
Without segmentation and prioritisation, one visitor streaming video sits in the same queue as the video conference in the boardroom. The fix is not more bandwidth; it is VLAN separation and application-aware queuing.
Roaming breaks at the floor boundary
Someone walks from their desk to a meeting room and the call drops. Almost always this is missing 802.11k/v/r, or access points on separate subnets so the client has to re-DHCP mid-corridor.
One ISP failure stops the office
A single broadband circuit is a single point of failure for every cloud application the business now runs on. The office does not slow down when it fails; it stops.
The design
How we build it
In build order, with the models that carry each part and why they were chosen.
Multi-gig at the access layer
The LS2P-8MG2XS-P gives eight 2.5GBASE-T PoE+ ports with two 10GE SFP+ uplinks and a 240 W budget. Each Wi-Fi 7 AP gets 2.5G of headroom and the switch gets 10G back to the core, so nothing in the path caps the radio.
Choose the AP by the space, not by the price list
Tri-band L7Pro on open floors and in high-density areas, where the 6 GHz radio and its 10G SFP+ uplink earn their cost. Dual-band L7 in cellular offices and meeting rooms. L7Lite where a single 2.5GbE PoE run is all the cabling allows. Wi-Fi 6 L6 and L6Lite where the client fleet is not Wi-Fi 7 and will not be for three years.
Route between floors, do not bridge them
A Layer 3 core running OSPFv2 and OSPFv3 keeps each floor its own broadcast domain while 802.11k/v/r handles roaming inside a floor. 128 Gbps of switching capacity and 24 SFP ports with four 10GE SFP+ uplinks is a core that does not need revisiting when the next floor is taken.
Two WAN links, automatic failover
The LR1500XS terminates multiple circuits with SD-WAN policy, 4 Gbps of throughput and 300,000 concurrent sessions — sized for 1,500 clients. BGP, OSPF and RIP are there when the network has to peer properly rather than just NAT. For smaller offices the LR300G-P does the same job for 300 users and powers eight PoE devices itself.
Separate guest from staff at the port
Guest SSID on its own VLAN, no route to internal subnets, rate limited. 802.1X and IP-MAC-port binding on the wired side. All of it visible in one console rather than in six switch web UIs.
Reference bill of materials
What typically goes in the quote
A starting point, not a fixed kit. Quantities and models move with the site — that is what the design conversation is for.
| Role | Model | Why this one |
|---|---|---|
| Open-floor and high-density AP | L7Pro | Tri-band BE14000, 8 streams, MLO, 2.5GbE plus 10GE SFP+ uplink |
| Standard floor AP | L7 | Dual-band BE5040, 511 clients, self-organising up to 300 APs |
| Budget or low-density AP | L6 | Wi-Fi 6 AX3000, 512 clients on 5 GHz, standard PoE |
| Multi-gig access switch | LS2P-8MG2XS-P | 8× 2.5G PoE+, 240 W, 2× 10GE SFP+, Layer 2+ with static routing |
| General access switch | LS2-24GT4SFP-P | 24× PoE+, 370 W, 4094 VLANs for desks, phones and printers |
| Layer 3 core | LS3-24SFP/8GT4XS | 128 Gbps, OSPFv2/v3, VCS stacking with dual-image backup |
| SD-WAN gateway | LR1500XS | 4 Gbps, 300,000 sessions, 1,500 clients, 2× 10GE SFP+, drive bay |
Field notes
What catches people out on Indian sites
The things a datasheet will not tell you and a survey usually misses, gathered from deployments rather than from a brochure.
- Count the ceiling height before the floor area. A 12-metre atrium needs a different AP count from a 3-metre office of the same square footage.
- Indian offices run dense. Assume two to three connected devices per seat — laptop, phone, and increasingly a headset or tablet.
- If the building has a shared riser, confirm who owns the fibre pairs before quoting a 10G uplink; retrofitting that conversation late is expensive.
- Ask whether the client fleet is actually Wi-Fi 7. If it is 80 percent Wi-Fi 6 laptops on a three-year refresh, the L6 line spends the budget better and the switch upgrade can wait.
- Two ISPs from the same last-mile provider is not redundancy. Check the physical path, not the contract.
FAQ
Office and enterprise campus — common questions
Do I need to replace my switches when I move to Wi-Fi 7?
For the access points to deliver what they are rated for, yes — at least on the ports carrying those APs. A tri-band Wi-Fi 7 AP is rated well above 10 Gbps of air capacity and a Gigabit port caps it far below that. The usual approach is to put multi-gig switching only where the Wi-Fi 7 APs land, such as the LS2P-8MG2XS-P with its 2.5G ports and 10G SFP+ uplinks, and leave the desk-facing Gigabit switches alone.
How many access points does an office floor need?
Floor area alone will not tell you. Client density, ceiling height, wall construction and whether the space is open plan or cellular all move the number, often by a factor of two. Send us a floor plan and we run it through Lysora Cloud's AI Designer, which renders predicted coverage over your own drawing — that is the only honest way to answer it, and we do it at no charge.
Can guest Wi-Fi be kept off the internal network?
Yes, and it should be. The guest SSID goes on its own VLAN with no route to internal subnets and a bandwidth cap so it cannot crowd out business traffic. The managed switch line supports up to 4094 VLANs with DHCP snooping and IP-MAC-port binding, and the gateway applies the rate limits and application priorities.
Other deployment patterns
Send the site. Get the design and the BOQ.
A floor plan, a camera count or an existing BOQ is enough to start — and the coverage heatmap comes back with it, free.