Draw the logical path first
The baseline is Internet handoff (ONT/modem) → router/firewall → switch → APs, NAS and wired devices. If the ISP gateway also routes, use bridge mode or AP mode where supported to avoid accidental double NAT.
Device roles
| Device | Role | Check before buying |
|---|---|---|
| Router/firewall | NAT, DHCP, DNS forwarding, firewall, VPN | WAN throughput, sessions, VLAN and VPN support |
| Switch | Wired ports, VLANs and PoE | Ports plus 25% spare, uplinks, PoE budget |
| Wireless AP | Wi-Fi access and roaming | Wired backhaul, placement and PoE type |
| NAS | Files, backups and media | Wired link, DHCP reservation and UPS |
Practical cabling rules
- Wire stationary devices whenever practical.
- Prefer wired backhaul for multiple APs over wireless mesh backhaul.
- Consider 2.5/10GbE uplinks when several 1Gbps flows converge.
- Label both ends and record switch ports and cable-test results.
Put these on the diagram
- Internet handoff and wiring cabinet
- Device, port number and cable destination
- PoE device and maximum draw
- Equipment backed by the UPS
- Spare ports for future APs, cameras and NAS