When a camera goes offline, a door reader stops working, or the Wi-Fi drops during a Monday morning all-hands, the cost isn’t just the tech. It’s the day. Almost every one of those failures traces to the same layer — cable nobody tested, a PoE budget nobody calculated, a flat network where the thermostat and the accounting workstation share a broadcast domain. The network is not one of your systems. It is the floor the rest stand on.
Structured cabling is the only part of this still in your building in fifteen years. Around it: an MDF plus IDFs wherever the 100-meter channel limit demands one, switching with a PoE budget covering every access point, camera and door controller, access points placed by design rather than ceiling symmetry, an edge firewall with cellular failover, and alerting that reaches us before you call.
The plainest thing on this page: we hand you a certification test report for every drop, and most bidders do not.
A tone-and-probe test proves the pairs landed in the right holes. It proves nothing about whether the channel carries 10GBASE-T, or PoE++ to a camera across a warehouse. A Fluke DSX-class certifier tests the permanent link against TIA-568 — wiremap, length, insertion loss, NEXT, return loss, delay skew — pass or fail per drop with the margins printed, delivered as a PDF keyed to the jack label alongside as-builts.
Cat6 carries 1 Gb to 100 meters and 10 Gb only to about 55, degrading further in a dense bundle — the right choice for a desk drop feeding a 1 Gb dock. Cat6A carries 10 Gb the full 100 meters. Justify it on multi-gig access point drops, PoE++ camera runs where voltage drop matters, and anything buried in a wall you will not reopen for fifteen years.
For backbone, in a new build pull single-mode. The channel is 100 meters total, and in a 22,000 sq ft warehouse you hit that constantly — the answer is an IDF at the back on a fiber uplink, never a switch on a shelf.
If the ceiling cavity is a return-air plenum — most office TI space — the cable must be CMP. That is why it vanishes from cheap bids and reappears as a failed inspection two days before your CO.
This is the calculation that gets skipped. Take a 48-port switch with a 740-watt PoE budget, loaded the way a real building loads it:
Total 894 watts against a 740-watt budget. Oversubscribed before anything is turned on, and the failure mode is ports dropping under load at the worst possible time.
Two things nobody accounts for. PoE is measured at the switch, and a 90-meter Cat6 run loses 5 to 15 percent in the cable, so a 25.5W device needs about 30W allocated. And the switch’s own electronics draw from the same supply. Design to 70 percent of nameplate, and put the MDF on the generator panel if you want cameras and door readers alive through an ice-storm outage.
A flat network is one where an IoT thermostat and your accounting workstation share a broadcast domain. That is one unpatched device away from a pivot into everything you care about.
Segment on install: corporate; guest, on a captive portal, client-isolated and DNS-filtered with no route inside; IoT and building systems with no inbound access; cameras with no internet egress except the update endpoint; access control; POS; and AV, whose multicast will flood a flat network.
The POS segment carries a consequence most people miss. PCI scope follows connectivity: if the card environment is not segmented, the whole network is in scope for assessment — a decision that drives the size of every audit. We write the inter-VLAN rules down and hand you the document.
Coverage is not the goal. Usable capacity at the client device is.
Office. Roughly one AP per 2,500 to 3,500 sq ft in open plan, one per 1,500 to 2,000 in hard-walled offices, designed for -67 dBm at the cell edge where voice or video runs on wireless. Full transmit power everywhere creates overlapping cells and clients clinging to a distant AP instead of roaming.
Warehouse. Racking is the enemy. Loaded metal shelving absorbs and reflects, and coverage measured in an empty building disappears when it fills. Ceiling-mounted omni antennas at 24 feet cover the tops of racks and leave the aisles dead. The correct design puts APs down the aisles at 15 to 18 feet with directional antennas aimed along the aisle. Scanners are 2.4 GHz-only more often than expected, and a forklift crossing cells at 12 mph needs deliberate overlap plus 802.11k/v/r tuned. Survey the building full, not empty.
Restaurant and retail. Dense clients, hard ceilings, a stainless kitchen and a patio needing its own AP under the awning, not a signal through glass. The most useful advice here: wire the POS.
Predictive design versus a site survey. Not alternatives. Predictive modeling in Ekahau or Hamina is the only option for new construction; a post-install survey proves what you delivered. For an existing warehouse, predictive alone is a guess. We do both and hand over the heat maps.
The flex building. Twenty-four to thirty feet clear, exposed bar joist, no ceiling grid to hide anything in, and a masonry demising wall between the front office and the warehouse that stops Wi-Fi dead. You do not cover a warehouse from an office AP through eight inches of block — that wall gets its own drop. Add variable frequency drives on the dock doors and shielded cable is no longer optional.
The suburban office corridor. 1980s buildings with abandoned Cat3 and Cat5 above the ceiling, plenums that mandate CMP, and a base-building MPOE in a closet the landlord controls — get that access agreement signed before scheduling the fiber install. Late-90s buildings often have serviceable Cat5e up there. We certify before quoting replacement.
Ice storms and outages. Cellular failover with a real SIM keeps a forty-person office working when the primary line goes down. Between buildings, a 60 GHz link degrades badly in heavy snow; 5 GHz rides through a snowy February.
Heat maps, AP schedule, drop schedule, rack elevations, PoE budget calculation and VLAN plan, submitted to the GC.
Pathway, sleeves, core drills and MDF/IDF locations coordinated with the electrician before walls close. We attend the OAC calls and answer RFIs.
Home runs to the correct IDF, plenum-rated where required, on proper pathway — never on ceiling tile or sprinkler pipe. Failures get fixed, not explained.
VLANs cut, switches stacked, wireless configured, then a validation survey.
As-builts, test reports, rack elevations, the VLAN document and IP scheme, credentials in your name.
Where our scope ends. We own the physical layer, switching, wireless, the edge firewall, and the camera, access control and AV segments. Your IT provider owns workstations, servers, identity, backup and helpdesk. We work alongside MSPs on most commercial projects.
The gray zone, settled in writing. DHCP and DNS, VPN, and who holds firewall administrator credentials. Co-managed with your MSP holding the keys, or us holding them with documented access — either is fine. What breaks projects is nobody deciding.
Wi-Fi 7 is not worth the premium yet. Client devices largely cannot use it, and feeding it means multi-gig switching and Cat6A everywhere. The same goes for 802.1X in a company with no IT staff — it gets abandoned inside a year, and per-device pre-shared keys with WPA3 stay working.
Do not put anything on Wi-Fi that can take a cable — POS, cameras, door controllers, desktops, codecs. Mesh is a fallback for a detached building, not a substitute for a cable.
FREQUENTLY ASKED QUESTIONS
Yes. Every drop is tested with a Fluke DSX-class certifier against the TIA-568 permanent link standard — wiremap, length, insertion loss, NEXT, return loss and delay skew — and you get the pass report as a PDF keyed to the jack label, plus as-builts, rack elevations and the VLAN document. Most bidders deliver a tone test.
Fewer than an office per square foot, but placed completely differently. Ceiling-mounted omni antennas at 24 feet cover the tops of racks and leave the aisles dead. The working design puts access points down the aisles at 15 to 18 feet with directional antennas aimed along the aisle. Survey the building full.
Yes, when the drop schedule and pathway requirements are in the bid set. We coordinate MDF and IDF locations with the electrician before walls close, attend the OAC calls and answer RFIs in writing. One accountable team means the schedule is ours to hold.
Us, at one number, and the technician who answers has your as-builts and test reports. On our 24/7/365 service plans, after-hours calls are triaged that night — most switch, access point and WAN issues resolve remotely, and anything needing hands on site is scheduled first thing. Service-plan clients get priority response. See our service plans.
No, and we work alongside MSPs on most commercial projects. We own cabling, switching, wireless, the edge firewall and the camera, access control and AV segments. Your MSP owns workstations, servers, identity, backup and helpdesk. We settle DHCP, DNS, VPN and firewall credentials in writing first.
Everything else in your building is a client on this network — the cameras, the door readers, the displays, the POS and the people. Build the floor properly and the rest stops surprising you.
Book a free on-site consultation. We will walk the building, model the wireless and count the drops.