Network Strata Services: A Complete Setup Guide

Network Strata Services Pty Limited is a comprehensive guide to setting up and managing a strata network for multi-tenant buildings, covering everything from initial hardware selection to ongoing maintenance. This recipe-style approach breaks down the process into clear, actionable steps, ensuring you get a reliable and secure network that meets the needs of all residents and businesses in your building. Whether you’re a building manager, an IT professional, or a strata committee member, this guide provides the practical knowledge you need to create a robust network infrastructure.

Ingredients

1 core switch (24-port Gigabit managed switch, e.g., Cisco or Ubiquiti)
1 router (enterprise-grade, supports VLANs and QoS)
1 firewall (hardware-based, e.g., Fortinet or pfSense)
1 UPS (Uninterruptible Power Supply, 1500VA minimum)
1 patch panel (24-port Cat6)
2 patch cables (Cat6, 1 ft / 0.3 m each)
Ethernet cables (Cat6, length as needed for your building, typically 100 m per run max)
12 wall-mounted access points (Wi-Fi 6, ceiling-mount, e.g., Ubiquiti UniFi)
1 network management software (e.g., UniFi Controller, or cloud-based)
1 VLAN configuration plan (document)
1 network security policy (document)
1 labeling system (label maker + labels)
1 cable tester (for verifying connections)
1 set of screwdrivers and mounting hardware (for access points)
1 ladder (for ceiling access)
1 roll of Velcro ties (for cable management)
1 network diagram (drawn on paper or using software)

Instructions

Plan the network layout: Draw a floor plan of your building, marking the location of every unit, common area, and utility room. Decide where to place access points to ensure good coverage in hallways, lobbies, and shared spaces. Aim for one access point per 1,500–2,000 sq ft (140–186 sq m) for optimal signal strength.
Design the VLAN structure: Create separate VLANs for different user groups: VLAN 10 for residents, VLAN 20 for building management (e.g., security cameras, access control), VLAN 30 for guest Wi-Fi, and VLAN 40 for IoT devices (smart locks, sensors). This segmentation improves security and performance.
Prepare the server room or comms closet: Ensure the location is clean, dry, and ventilated. Install the UPS and plug the core switch, router, and firewall into it. This protects against power outages and surges.
Mount the patch panel and core switch: Install the patch panel and switch in a 19-inch rack. Use the short patch cables to connect the patch panel ports to the switch ports. Label each cable and port clearly with the corresponding unit or area (e.g., “Unit 101”, “Lobby”).
Run Ethernet cables: From the patch panel, run Cat6 Ethernet cables to each access point location and to any devices that need wired connections (e.g., security cameras). Ensure cable runs do not exceed 100 m (328 ft) to maintain signal integrity. Use cable ties to secure cables neatly along the walls or ceilings.
Install access points: Mount each access point on the ceiling using the included hardware. Connect the Ethernet cable to the access point. Ensure they are placed in open areas, away from metal objects and thick walls, to maximize coverage.
Connect the router and firewall: Connect the ISP modem to the firewall, then the firewall to the router. Connect the router to the core switch. This provides a secure gateway for all network traffic.
Configure the network: Access the router’s management interface (usually via a web browser). Set up the VLANs as planned, assign IP subnets (e.g., 192.168.10.0/24 for residents), and enable DHCP for each VLAN. Configure the firewall rules to block inter-VLAN traffic by default, except where needed (e.g., allow residents to access the internet only).
Set up Wi-Fi: Using the network management software, configure each access point with the appropriate SSIDs (network names) for each VLAN. For example, “BuildingResidents” for VLAN 10, “BuildingGuest” for VLAN 30. Apply WPA3 encryption (or WPA2 if older devices) and set strong passwords.
Test the network: Use the cable tester to verify all Ethernet connections are working. Walk around the building with a laptop or smartphone to test Wi-Fi signal strength and speed in different areas. Adjust access point placement or power levels if there are dead zones.
Document everything: Update your network diagram with the final configuration, IP addresses, and device locations. Keep a log of passwords and settings in a secure place (password manager). This will be invaluable for future troubleshooting.

Tips

Substitution for access points: If you have a smaller building, you can use fewer access points or opt for mesh Wi-Fi systems, but they may not handle high density as well. For large buildings, stick with enterprise-grade access points.
Common mistake – forgetting QoS: Set up Quality of Service (QoS) on the router to prioritize video conferencing and streaming traffic. Without it, one heavy user can slow down the whole network.
Storage of equipment: Keep spare cables, connectors, and a spare access point on hand. Store them in a labeled box in the comms closet. This reduces downtime if a device fails.
Security tip: Change all default passwords on routers, switches, and access points. Use a unique, complex password for each device. Also, enable automatic firmware updates to patch security vulnerabilities.

Serving Suggestions

Once your network is up and running, it’s time to serve it to your residents. Provide clear instructions on how to connect to the Wi-Fi, including the SSID and password. Consider creating a simple one-page guide for residents, explaining how to connect and whom to contact for support. For guest Wi-Fi, set up a captive portal that requires accepting terms of service before internet access. This is a good practice for legal and security reasons.

Variations

Small building: For a building with fewer than 10 units, you can simplify by using a single all-in-one router (e.g., Ubiquiti Dream Machine) that includes a switch and access point controller. This reduces cost and complexity.
High-density building: For large buildings with many users, consider adding more access points and using a controller that supports band steering and load balancing. Also, consider upgrading to Wi-Fi 6E for more spectrum.
Managed service: Instead of doing everything yourself, you can hire a managed network provider to design, install, and maintain the network. This is a good option if your strata committee lacks technical expertise.

Storage and Reheating

Networks don’t need storage, but they do need regular maintenance. Plan to review your network monthly: check for firmware updates, monitor bandwidth usage, and review security logs. Keep a maintenance log to track changes. As for “reheating,” if you need to restart a device, always do a graceful shutdown through the management interface first. If the network goes down, a simple reboot of the router and switch often resolves temporary issues. For long-term storage of spare equipment, keep it in a dry, dust-free environment.

Frequently Asked Questions

Q: How much does it cost to set up a network for a strata building?
A: Costs vary widely based on building size and equipment quality. A basic setup for a 20-unit building might cost $2,000–$5,000 for equipment, plus installation labor. Enterprise-grade gear for a large building can run $10,000 or more. Get quotes from multiple vendors.

Q: Can I use a regular home router instead of enterprise equipment?
A: Not recommended. Home routers are not designed for many simultaneous users and lack features like VLANs and QoS. They may overheat or crash under load. Invest in business-grade equipment for reliability.

Q: How do I handle residents who are tech-savvy and want to manage their own network?
A: It’s best to have a single network for all residents to avoid interference. If a resident needs a wired connection, provide a port in their unit, but do not allow them to install their own access points that could conflict with your network.

Q: What if I have multiple buildings on one property?
A: You can connect them with a fiber optic backbone or a point-to-point wireless bridge. This requires more complex planning, so consider hiring a professional.

Q: How do I ensure the network is secure?
A: Use strong encryption (WPA3), change default passwords, enable a firewall, and regularly update firmware. Also, segment IoT devices on a separate VLAN so they can’t access sensitive data.

Q: What is the maximum number of devices I can connect?
A: It depends on your equipment. A typical enterprise access point can handle 100–200 devices. For a building with 50 units, you might have 300–500 devices. Plan for growth and monitor usage to avoid bottlenecks.

More recipes to cook

Safety notes: safe minimum internal temperatures from USDA FSIS; raw and undercooked fish guidance from the U.S. FDA. Food safety notes

Spotted an error? Tell us and we will correct it (corrections policy).