Created: November 29, 2025 • Last Updated: June 10, 2026 • Version: 1.4
Enterprise-grade prosumer network for WFH Software Engineer with 1000ft wireless bridge
Design Draft
Overview
A "Prosumer" grade network infrastructure delivering enterprise-level reliability and low latency for a Work-From-Home Software Engineer, while staying effortless for family through simple, unified Wi-Fi (one SSID and password; nobody touches the router). Built on a UniFi gateway and access points for real VLAN segmentation, Wi-Fi channel control, and telemetry into Home Assistant. Supports high-bandwidth 4K multimedia streaming, continuous surveillance, and telemetry across a 2-acre property including a 1000ft wireless bridge to a detached driveway gate.
Project Documentation
Core Design
- Goals & Requirements - Executive goals, functional requirements, and constraints
- Network Topology - Interactive diagram showing logical and physical network layout
- Hardware BOM - Complete bill of materials with pricing and implementation notes
- Network Segmentation - Logical separation strategy for Main and Guest networks
Implementation
- Installation Guide - Phase-by-phase setup instructions from office core to driveway bridge
- Maintenance - Ongoing telemetry, testing, and upkeep procedures
Implementation Timeline
This rollout is incremental. No fixed weekly schedule; components are acquired and deployed as time and budget allow. Initial wireless will operate as a mesh; wired backhauls are added room-by-room later.
Phase 1: Core Acquisition & Office Setup
- Purchase managed PoE switch, UniFi gateway (UDM-SE) + UniFi access points (the office UPS is already purchased and in place, backing current network gear + the HA gateway)
- Rack/place UPS, gateway, and switch; adopt in the UniFi controller; create the VLANs (Main / IoT / Cameras / Guest) and SSID-to-VLAN mappings
- Connect fiber modem → UniFi gateway → managed switch
- Connect workstation, Plex server, NAS, printer to switch
- Deploy UniFi APs (temporary wireless uplink until rooms are cabled)
- Baseline coverage & latency measurements (office, living room, bedrooms)
- Test: Workstation achieves near line-rate (≈940Mbps) wired speed; APs stable
Phase 2: Room-by-Room Cabling & Backhaul Upgrades
- For each target room (living room, master bedroom, garage, others):
- Run/terminate Cat6a drop (T568B); label both ends
- Optional: Install small (5–8 port) access switch if multiple devices
- Convert the local UniFi AP from wireless uplink to wired backhaul
- Move streaming / console devices from Wi-Fi to ethernet
- Accumulate improvements (lower latency, higher sustained bitrate) per room
- Test (per room): Cable tester pass; 4K stream plays without buffering; ping jitter reduced vs baseline
Phase 3: Distribution Optimization
- Finalize VLAN segmentation (Main, IoT, Cameras, Guest), SSID-to-VLAN mappings, and switch port assignments; add the firewall rule allowing Home Assistant to reach IoT
- Channel planning / RF optimization: pin Wi-Fi to 2.4 GHz channels 1/6/11 and keep Zigbee/Thread on 15/20/25 so they stop overlapping
- Rebalance device placement (streaming boxes, cameras, consoles) to wired where possible
- Test: Simultaneous 4K stream + large file transfer + video call without degradation; guest/IoT isolation verified; Home Assistant still controls IoT
Phase 4: Driveway Bridge Deployment
- Mount NanoStation (or equivalent) units at garage and gate with clear LOS
- Align bridge radios for optimal signal (-50 to -60 dBm target)
- Configure Point-to-Point mode, 40MHz channel within permitted band (UNII-3)
- Secure management (change defaults, restrict admin VLAN)
- Test: Sustained throughput and latency within design targets; no packet loss bursts
Phase 5: Gate Infrastructure & Final Integration
- Install NEMA enclosure and industrial switch at gate location
- Deploy outdoor AP and gate camera; connect via bridge
- Apply final network segmentation (Guest SSID isolated; camera on IoT VLAN)
- Add monitoring endpoints (SNMP/telemetry for bridge + switch)
- Test: End-to-end connectivity, guest isolation, camera feed stability, telemetry reporting
Change Log
- v1.4 (2026-06-10) - Replaced Google Nest Wifi Pro with a prosumer UniFi stack (UDM-SE gateway + managed PoE switch + UniFi APs) for real VLANs (Main/IoT/Cameras/Guest), Wi-Fi channel control, and Home Assistant telemetry. Fixed the IoT-on-Guest workaround (IoT now on its own VLAN with a Home Assistant allow rule) and called out that VLAN-carrying switches must be managed. The office UPS (CyberPower CP850PFCLCD) is now purchased and in place, backing all current network equipment and the Home Assistant gateway.
- v1.3 (2026-06-03) - Selected the office UPS (CyberPower CP850PFCLCD, pure sine wave) shared with the Home Assistant gateway, and noted generator bridging
- v1.2 (2025-11-30) - Finalized core topology and driveway strategy
- v1.1 - Added backhaul hardwiring strategy
- v1.0 - Initial draft