Acme Graphic Design Wireless WLAN Network Plan

A good small-office wireless network is designed around users, applications, building materials, security requirements, and peak device density—not around a guess such as “three access points should cover the floor.” That is especially true in an L-shaped office such as the fictional Acme Graphic Design workspace described in the original version of this article.

A graphic-design business may move large project files, use cloud storage, run video meetings, connect phones and tablets, support printers and display devices, and store client information. Reliable Wi-Fi therefore needs more than broad signal coverage. It needs enough capacity, a sensible radio-frequency plan, secure authentication, network segmentation, monitoring, and a design that can be adjusted after a real site survey.

This updated WLAN plan explains how Acme could design a modern office network in 2026, why the old 2.4 GHz channel plan of 2, 5, and 10 should be replaced, how 5 GHz and 6 GHz fit into the design, where access points should go, and why WPA3, 802.1X, VLANs, and ongoing monitoring are more useful security controls than relying on MAC-address filtering.

Start With Requirements, Not Access-Point Count

The first mistake in many WLAN plans is choosing the number of access points before measuring the environment.

For Acme, the design should begin by answering questions such as:

• How many employees work in the office?
• How many laptops, phones, tablets, printers, displays, and IoT devices connect at peak times?
• Where do meetings occur?
• Which applications need high throughput or low latency?
• How large are typical design files?
• Are guests and contractors allowed on Wi-Fi?
• Which systems hold confidential client or financial data?
• What walls, doors, metal structures, elevators, or other materials affect radio signals?
• Does the company expect growth?

Cisco’s current RF guidance emphasizes that walls and other materials attenuate Wi-Fi signals and that access-point cells need appropriate overlap. A proper survey is therefore more reliable than estimating coverage from a floor plan alone.

Understand the L-Shaped Office Problem

An L-shaped office creates two design challenges.

First, an access point placed at one end may have to send signals through multiple interior walls to reach the other leg of the “L.” Second, high-density areas such as a meeting room or cafeteria can consume far more airtime than a hallway or storage area even when the physical area is smaller.

The design should therefore consider both coverage and capacity.

A useful preliminary layout might include:

• One access point serving the main workstation area.
• One serving the second wing of the L-shaped floor.
• One near the meeting/collaboration and cafeteria area if device density justifies it.

But three access points should be treated as a starting hypothesis, not a final engineering answer. A predictive design and on-site validation should determine whether the office needs two, three, four, or more.

Perform a Wireless Site Survey

A site survey measures the radio environment rather than assuming that all offices behave the same way.

The survey should evaluate:

• Signal strength.
• Signal-to-noise ratio.
• Channel utilization.
• Existing neighboring networks.
• Non-Wi-Fi interference.
• Wall attenuation.
• Roaming behavior.
• High-density areas.

Cisco notes that access points work best when clients are relatively near them and that materials such as drywall, brick, concrete, metal, and moisture can significantly weaken signals.

For a creative office, testing should include the places where people actually work—not only empty hallways.

Which Wi-Fi Standard Should Acme Use?

The original plan proposed 802.11n/g. That reflects technology from a much earlier generation.

For a new 2026 deployment, Acme should use enterprise access points supporting at least Wi-Fi 6 (802.11ax). Wi-Fi 6E or Wi-Fi 7 may also be appropriate when client devices and budget justify access to the 6 GHz band and newer capabilities.

The network does not have to force every legacy device onto the newest standard. Modern access points can often support older clients on compatible bands while newer laptops and phones use more efficient radios.

How the 2.4 GHz, 5 GHz and 6 GHz Bands Differ

A modern office should generally avoid treating all three bands as interchangeable.

Fix the Old 2.4 GHz Channel Plan

The original proposal assigned channels 2, 5, and 10. That is a poor plan in the United States because those channels overlap neighboring channel widths and can create avoidable interference.

Cisco’s RF reference guide identifies channels 1, 6, and 11 as the three nonoverlapping 20 MHz channels in the U.S. 2.4 GHz band.

For Acme:

• Use 20 MHz channels on 2.4 GHz.
• Use 1, 6, and 11 when manual planning is needed.
• Avoid 40 MHz channel bonding on 2.4 GHz.
• Keep neighboring cells on different channels where practical.
• Allow a modern controller’s radio-resource-management system to optimize channels and power when properly configured.

This change alone corrects one of the biggest technical problems in the original plan.

Make 5 GHz the Main Work Band

Most employee laptops and modern phones should preferably use 5 GHz or 6 GHz rather than crowding onto 2.4 GHz.

5 GHz offers substantially more nonoverlapping channel capacity, which makes it better suited to a busy office with:

• Cloud applications.
• Video meetings.
• Large file transfers.
• Creative software licensing and synchronization.
• Multiple devices per employee.

Channel width should be chosen according to density and interference. A wider channel can provide more throughput to one client but also consumes more spectrum. In a dense office, narrower channels may create better overall capacity.

When 6 GHz Makes Sense

Wi-Fi 6E and Wi-Fi 7 can use the 6 GHz band. This provides much more spectrum and avoids much of the congestion associated with older bands.

It is most valuable when Acme has compatible laptops and other modern devices that need high throughput.

Cisco’s WPA3 deployment guidance notes that WPA3 is mandatory for Wi-Fi 6E operation in the 6 GHz band. WPA2 is not permitted for 6 GHz operation.

That means adding 6 GHz is not simply a radio upgrade—it also requires modern security configuration and compatible client devices.

Do Not Assume Directional Antennas Are Better

The original plan proposed directional antennas mainly to keep signals inside the building and “push” them through walls.

That is not a universal best practice.

Most ordinary office deployments use access points with integrated or omnidirectional antennas because users move in multiple directions around the space.

Directional antennas are useful for particular designs, such as:

• Long corridors.
• Warehouse aisles.
• Outdoor point-to-point coverage.
• High ceilings.
• Focused coverage where RF engineering shows a need.

The right antenna should follow the site survey, not precede it.

Example Access-Point Placement

Without a measured floor plan, exact placement cannot be guaranteed. A sensible preliminary concept for the Acme office is:

After installation, Acme should validate signal quality and capacity during normal business activity. If the meeting room becomes congested or there are dead zones, the design should be adjusted rather than increasing transmit power blindly.

Why “Maximum Power” Is Not the Goal

More transmit power does not automatically create a better WLAN.

Wi-Fi communication is two-way. An access point may be powerful enough for a phone to hear it from far away while the phone’s lower-powered radio cannot transmit back reliably.

Excessive AP power can also create overly large cells, poor roaming, and more co-channel interference.

Good design aims for balanced cells with sufficient overlap—not the strongest possible signal everywhere.

Secure the Corporate WLAN With WPA3-Enterprise

The old plan proposed WPA-PSK, meaning a shared password for everyone. That is not ideal for a company handling client data.

Where client compatibility allows, Acme should use WPA3-Enterprise with 802.1X authentication for the main employee WLAN.

Instead of one shared password, employees authenticate through individual identities or managed device credentials. This makes it easier to:

• Revoke one user without changing everyone’s Wi-Fi password.
• Apply identity-based policy.
• Audit access.
• Integrate with directory and certificate systems.
• Reduce risk from a leaked shared key.

Cisco’s 2026 Catalyst 9800 best-practices guide documents WPA3-Enterprise combinations using 802.1X and protected management frames for current enterprise wireless networks.

Separate Employees, Guests and Devices

Not every wireless device should have the same network access.

Acme should create logical segmentation such as:

• Corporate WLAN: managed employee devices.
• Guest WLAN: internet access only, isolated from internal systems.
• IoT/Printer VLAN: printers, displays, smart devices, and equipment that should communicate only with defined services.
• Administrative management network: infrastructure management restricted to authorized IT staff.

Segmentation limits what an attacker or compromised device can reach.

For broader security context, see MyArticles’ Network Security and Administration Principles.

Do Not Rely on MAC Filtering as Security

The original network plan proposed allowing only approved device MAC addresses.

A MAC allowlist can be useful for inventory or administrative policy, but it should not be treated as a strong authentication mechanism. MAC addresses can be observed and spoofed.

Strong security should instead depend on authenticated identities, encryption, device management, segmentation, firewall rules, logging, and timely software updates.

Protect Client and Financial Data

A design agency may store names, addresses, invoices, credentials, artwork, contracts, drafts, marketing plans, and potentially payment-related information.

The WLAN is only one layer of protection.

Acme should also use:

• Full-disk encryption on laptops.
• Multifactor authentication for important services.
• Endpoint management.
• Regular patching.
• Least-privilege access.
• Secure backups.
• DNS and web filtering where appropriate.
• Firewall policy between VLANs.
• Centralized logs and alerts.

CISA’s 2026 Wi-Fi network security guide recommends layered controls because wireless threats can affect even networks that are otherwise strongly secured.

Secure the Access Points Themselves

NIST SP 800-153 emphasizes that WLAN security depends on protecting all components throughout the lifecycle, including clients, access points, and wireless infrastructure.

For Acme, that means:

• Use supported firmware.
• Apply security updates.
• Disable unused management services.
• Restrict controller and AP administration to IT staff.
• Use strong administrative authentication.
• Back up configurations.
• Monitor for unauthorized changes.

Physical Security Still Matters

Access points should be mounted where they provide good RF coverage without being easy for unauthorized people to unplug, reset, or steal.

Network closets, switches, controllers, and cabling should also be physically protected.

However, mounting an AP high on a wall or ceiling does not replace logical security. An attacker does not need physical access to an AP in order to attempt wireless attacks.

Use Power over Ethernet

Enterprise APs are commonly powered through Power over Ethernet (PoE), allowing both network connectivity and electrical power through Ethernet cabling.

This makes ceiling placement easier and allows APs to be backed by the same uninterruptible power supply protecting network switches.

The switching design must be checked to ensure sufficient PoE budget for all access points.

Plan the Wired Network Behind the Wi-Fi

A wireless network is only as good as the infrastructure behind it.

The wired design should provide:

• Adequate uplink speed.
• PoE capacity.
• VLAN support.
• Reliable DHCP and DNS.
• Firewall capacity.
• Internet bandwidth appropriate to cloud use.
• Redundancy where downtime would be costly.

If graphic designers regularly move very large files to local servers, Acme may also want wired Ethernet at fixed workstations rather than forcing every high-volume transfer over Wi-Fi.

Capacity Planning for the Meeting Room

A meeting room may contain 15 people, but each person can have two or three Wi-Fi devices. That means a single meeting could create 30 to 45 clients in a small area.

Capacity planning should therefore use devices per area, not only employee headcount.

Video conferencing also creates simultaneous upstream and downstream traffic, making meeting spaces more demanding than a quiet office with the same number of square feet.

What About the Cafeteria?

The cafeteria may have short bursts of heavy usage during breaks. People can arrive with laptops and phones while background cloud synchronization and streaming continue.

If the cafeteria is near the interior corner of the L-shaped building, it can also become an RF shadow area depending on wall construction.

It should therefore be included explicitly in the survey.

Monitor the WLAN After Deployment

Wireless design is not finished on installation day.

Acme should monitor:

• Client counts.
• Channel utilization.
• Authentication failures.
• Interference.
• AP health.
• Roaming problems.
• Rogue access points.
• Firmware status.
• Unusual traffic patterns.

NIST specifically emphasizes configuration and monitoring throughout the WLAN lifecycle.

A Better Acme WLAN Architecture

Deployment Checklist

1. Document business and application requirements.
2. Obtain an accurate floor plan.
3. Perform predictive RF design.
4. Survey the live environment.
5. Choose AP locations and bands.
6. Design VLANs and firewall rules.
7. Configure enterprise authentication.
8. Install and test APs.
9. Validate roaming, coverage, and capacity under load.
10. Document the configuration.
11. Train IT staff.
12. Continuously monitor and optimize.

Frequently Asked Questions

Are three access points enough for Acme?

Possibly, but the answer cannot be known from the L-shaped floor description alone. Building materials, client density, application requirements, and neighboring interference must be measured.

Which 2.4 GHz channels should be used in the United States?

For standard 20 MHz enterprise planning, channels 1, 6, and 11 are the three nonoverlapping choices. The old plan’s 2, 5, and 10 arrangement creates overlap.

Should Acme use 2.4 GHz or 5 GHz?

Both can remain available, but 5 GHz should normally carry most modern work devices. 2.4 GHz is valuable for legacy and selected IoT clients. 6 GHz can add capacity for compatible Wi-Fi 6E and Wi-Fi 7 devices.

Is a shared Wi-Fi password secure enough for employees?

A small office can technically operate with a strong shared key, but WPA3-Enterprise with 802.1X provides much better identity control for a business handling confidential data.

Does MAC filtering secure a WLAN?

It can support inventory or policy enforcement but should not be a primary security control. Strong encryption and authentication are far more important.

Conclusion

A modern WLAN for Acme Graphic Design should be engineered rather than guessed. The office’s L-shaped layout, meeting areas, cafeteria, thick walls, and creative workloads make a site survey essential.

The most important improvements over the old plan are straightforward: move away from 802.11n/g as the design target, make 5 GHz the primary work band, consider 6 GHz for modern clients, use channels 1/6/11 correctly on 2.4 GHz, determine AP count through survey data, replace shared-password and MAC-filter assumptions with stronger identity-based security, and segment guests and devices from corporate resources.

When those decisions are combined with monitoring and ongoing optimization, the WLAN becomes a business system rather than simply a way to avoid Ethernet cables.

Sources and Further Reading

• Cisco – Wireless RF Reference Guide
• Cisco – Catalyst 9800 Series Configuration Best Practices, 2026
• Cisco – WPA3 Deployment Guide
• NIST SP 800-153 – Guidelines for Securing Wireless Local Area Networks
• CISA – A Guide to Securing Networks for Wi-Fi, 2026