---
title: "Network Design"
description: "Network architecture for campuses and data centers: VLANs, routing, redundancy and RF, delivered as an as-built anyone can pick up."
url: "https://unifiedit.tech/services/network-design"
lastmod: "2026-10-27"
type: "page"
---

# Build enterprise networks that scale.

VLANs, routing and redundancy for campuses and data centers, delivered as an as-built anyone can pick up.

[Talk to an Engineer](https://unifiedit.tech/schedule-call)

A sample design · redundant throughout

- WAN AT&T · WAN1 · FIBER 1G STARLINK · WAN2 · SATELLITE WAN1 DOWN · STARLINK ACTIVE
- FIREWALL FW-01 · EFG · VIP 10.69.1.1 FW-02 · EFG · SHADOW VRRP · FW-01 DOWN · FW-02 ACTIVE
- CORE CORE-01 · ECS AGG · STP ROOT CORE-02 · ECS AGG · STP · 8192 LAG · 100G
- ACCESS IDF-01 · STACK ×3 · 100G IDF-02 · STACK ×2 · 100G IDF-03 · STACK ×3 · 100G ECS 48 POE · DUAL-HOMED TO BOTH CORES
- WIFI U7 PRO · WIFI 7 TWO PER IDF

## Our principles

### Delete.

The best part is no part.

### Simplify.

The simplest design that meets the requirement.

### Deploy UniFi.

One platform, with no per-device licensing.

## What a design includes

Six decisions, each settled before a unit is ordered.

### Logical architecture

Layer roles, uplinks, routing and failover on one sheet an engineer can configure from.

### IP & VLAN plan

Every subnet, VLAN and DHCP scope, segmented by function and trust, with room to grow.

### Redundancy & failover

VRRP at the gateway, LACP at the core and dual uplinks at access, with convergence written down.

### Wireless & RF

AP placement and channel plan modeled against your walls and client density.

[Wireless & RF engineering](https://unifiedit.tech/services/wireless-rf)

### WAN & SD-WAN

Circuits, failover order and per-application routing for every site.

[SD-WAN design](https://unifiedit.tech/services/sd-wan)

### Segmentation

Trust boundaries and firewall policy, with guest, IoT and cameras isolated by default.

## Our process

Discovery, design, then a build in our lab before production.

01

### Discovery

The hardest part of a design is learning what you need and what is already in place. Our own tooling maps the existing network and finds misconfigurations and single points of failure. In most cases we do it remotely, without an engineer on site.

02

### Design

We design the simplest system that meets the requirement: high availability, compliance and room to grow. It runs on a platform with no per-device licensing, so it costs less to run every year after.

03

### Validation

Every design is built in our lab and tested for failover, convergence and throughput before it touches production. That matters most when the environment is multi-vendor.

## Talk to a network engineer.

[Talk to an Engineer](https://unifiedit.tech/schedule-call)