Network Equipment Selection Analysis — Device Functions, Protocols, and Product Tiers: The Infrastructure of Studio Networks

🔊

About This Guide

This guide is organized not by brand and model but by device function and network protocol. The underlying dimensions of network equipment — the function boundaries of the four device categories (switch/router/AP/NIC), Ethernet speed generations (1G/2.5G/10G/25G/100G), PoE power standards, WiFi protocol generations (6/6E/7), and management protocols (VLAN/STP/LACP/802.11k/v/r) — have been stable for years (Ethernet protocols since the 1980s, PoE standards since 2003, WiFi 6 since 2019), making them a more durable reference than specific models.

The studio network is infrastructure — when a switch, router, or AP fails, everyone stops together. But blindly stacking 10G gear is waste in most scenarios: the actual bottleneck in office areas is the broadband exit and wireless access; only the machine room has genuine high-bandwidth interconnect demand.

mermaid
flowchart TD
    A["Network equipment selection"] --> B["Switch: speed+PoE+mgmt"]
    A --> C["Router: throughput+conns+VPN"]
    A --> D["Wireless AP: WiFi gen+roaming"]
    A --> E["NIC: speed+interface"]
    style A fill:#e3f2fd,stroke:#2196F3
    style B,C,D,E fill:#fff3e0,stroke:#FF9800

Match by zone: offices need stability and coverage, machine rooms need bandwidth and low latency, labs need PoE power capacity.

Quick Selection Table

Organized by scenario → technical requirement; models are only current representatives — after a refresh, find new models that meet the same technical requirements.

ScenarioTechnical requirementCurrent representative (price tier)
Small studio (10–30 people)2.5G managed + WiFi 6 + PoE+ + enterprise routerUniFi / Omada full stack (¥4000–8000)
Mid-size office (50–100 people)L3 core + access-layer split + AP controllerAruba / Huawei (¥30k–80k)
Lab machine room25G/100G low latency + RoCEMellanox / Arista (¥30k+)
Remote accessWireGuard VPNSoftware router or enterprise router
Surveillance/IoTPoE+ switch (watch total budget)PoE switch (¥1000–2000)

Price tier note: consumer-grade prices are mainstream JD/Tmall channels; enterprise-grade prices are distributor quotes — actual procurement prices vary significantly with channel and quantity.

Function Boundaries of the Four Device Categories

To understand network equipment selection, first understand the function boundaries of the four device categories — these are determined by the OSI model and do not change with model refreshes.

mermaid
flowchart TD
    L3["L3 Network layer"] --> R["Router<br/>Routing, NAT, VPN"]
    L2["L2 Data link layer"] --> S["Switch<br/>Frame forwarding, VLAN"]
    L2 --> AP["Wireless AP<br/>WiFi access"]
    L2 --> N["NIC<br/>Endpoint access"]
    style L3 fill:#bbdefb,stroke:#2196F3
    style L2 fill:#c8e6c9,stroke:#4CAF50
DeviceOSI layerCore functionKey metrics
RouterL3 (network)Routing, NAT, VPN, firewallNAT throughput, connection count, VPN performance
SwitchL2/L3 (data link/network)Frame forwarding, VLAN, PoE powerSpeed, port count, PoE budget, management capability
Wireless APL2 (data link)WiFi access, roamingWiFi generation, roaming protocols, concurrency
NICL2 (data link)Endpoint network accessSpeed, interface (RJ45/SFP+), offload capability

Sources: IEEE 802 series standards (802.3 Ethernet, 802.11 WiFi); IETF RFCs (OSPF, BGP, VLAN); Cisco/Aruba network design guides.

⚠️ Do not conflate the functions of routers and switches. A consumer “router” is actually a three-in-one router + switch + AP. Studios above 20 people should split these three functions: a standalone enterprise router (focused on NAT and VPN), a standalone managed switch (focused on frame forwarding and VLAN), and standalone APs (focused on wireless coverage). Three-in-one devices become bottlenecks under heavy load.

Switches: The Core of the Network

The switch is the heart of the LAN. Selection dimensions: speed, port count, PoE, management capability.

Speed Generations

SpeedTypical scenarioPorts
1GBasic office, IP phones8–48
2.5GOffice sweet spot, NAS access8–24
10GServers, storage, workstations8–24
25GDatacenter interconnect, GPU clusters8–32
100GDatacenter uplink16–48

Typical studio config: 2.5G switches in office areas (backward-compatible with 1G), 10G switches in the machine room, 25G for GPU training clusters depending on scale.

PoE Power Budget

The key metric for a PoE switch isn’t port count but total power budget. A 24-port PoE+ switch with 30W max per port may have a total budget of only 195W — meaning at most 6 ports can run at full load simultaneously.

PoE standardMax per portExample total budgetActual capacity
PoE (802.3af)15.4 WEntry 8-port 65W4 IP phones / ordinary APs
PoE+ (802.3at)30 WMid-range 24-port 195W6 full-load ports
PoE+ (802.3at)30 WEnterprise 24-port 370W12 full-load ports
PoE++ (802.3bt)60–100 WWiFi 7 AP dedicated 720W8 WiFi 7 APs

WiFi 6E and WiFi 7 APs draw high power (20–30W); ordinary PoE+ can’t drive them — they need PoE++ (60–100W). When planning a PoE network, derive port count from the total budget — don’t just read port specs.

Managed vs Unmanaged

TypeFeaturesUse casePrice
UnmanagedPlug-and-play, no configSmall office, homeLow
Smart managedVLAN, QoS, basic monitoringStudios, SMBsMid
Fully managed (L2/L3)VLAN, LACP, STP, routing, ACLMachine rooms, enterprise networksHigh

Studios above 10 people should use managed switches: VLAN isolates guest and production networks, LACP aggregates links for NAS and servers, and basic monitoring pinpoints network issues quickly. Unmanaged switches suit only flat networks.

Key Protocol Capabilities

ProtocolFunctionUse case
VLAN (802.1Q)Network isolation (guest/production/management)Any multi-department network
LACP (802.3ad)Link aggregation (bandwidth stacking + redundancy)Servers, NAS
STP (802.1D/w/s)Loop avoidance (redundant topology)Multi-switch networks
QoSTraffic priority (voice/video first)IP phones, video conferencing
IGMP SnoopingMulticast optimizationIPTV, video streaming

Routers

Studio router metrics: throughput, connection count, VPN performance, multi-WAN.

NAT Throughput

Router throughput determines the actual ceiling of NAT forwarding. A home router labeled “Gigabit WAN” may deliver only 300–500 Mbps once NAT is enabled. Studios with broadband above 500M must confirm the router’s NAT throughput matches.

TypeNAT throughputUse case
Home router300–800 MbpsSmall office
Enterprise router1–5 GbpsStudios, SMBs
x86 software router5–20 GbpsLabs, high-bandwidth needs

Connection Count

P2P downloads, video conferencing, and container clusters all generate large numbers of concurrent connections. Home routers typically cap at 2000–5000 connections — a studio running container clusters or BT downloads will exhaust them instantly. Enterprise routers support 50000+ connections; software routers are effectively unlimited (memory-dependent).

VPN Protocols

Remote work needs VPN access to the studio intranet. VPN protocols differ widely in performance:

ProtocolSpeedSecurityNotes
WireGuardFastestHighModern VPN first choice
IPSecFastHighEnterprise standard
OpenVPNSlow (encryption overhead)HighBest compatibility
SSL VPNMediumMediumBrowser access

For studio remote access, WireGuard is the first choice — 3–5× the performance of OpenVPN.

Wireless APs

Wireless access selection dimensions: WiFi generation, roaming, controller.

WiFi Protocol Generations

GenerationStandardBandsMax rateKey technology
WiFi 6802.11ax2.4G + 5G9.6 GbpsOFDMA, BSS coloring
WiFi 6E802.11ax2.4G + 5G + 6G9.6 GbpsAdds 6 GHz band
WiFi 7802.11be2.4G + 5G + 6G46 GbpsMLO multi-link, 4K QAM, 320 MHz channels

WiFi 6 is the current sweet spot — sufficient for most office scenarios. WiFi 6E’s value is the 6 GHz band — less interference, more channels, noticeably more stable in dense environments (meeting rooms, open offices). WiFi 7’s MLO (multi-link aggregation) can transmit data over multiple bands simultaneously, further improving latency and throughput, but only matters when clients support it.

Roaming Protocols (802.11k/v/r)

When a studio has multiple APs covering the same area, the client’s experience switching between APs depends on roaming protocols:

ProtocolFunction
802.11kAP tells the client about neighboring APs, reducing scan time
802.11vNetwork guides the client to the optimal AP
802.11rFast roaming, switch time < 50 ms

Multi-AP deployments without roaming protocols cause clients to “stick” to the first AP, refusing to switch even as signal degrades. Studios with multiple APs must choose models supporting 802.11k/v/r, paired with a controller for unified management.

Controller vs Standalone AP

SolutionUse caseNotes
Standalone APSmall office with 1–3 APsEach configured independently, no coordination
Controller (AC) unifiedStudios with 4+ APsUnified config, roaming, channel optimization
Cloud-managed APMulti-branch orgsCloud-based unified management

Studios with more than 4 APs should use a controller solution to avoid roaming and channel-conflict issues.

NICs

TypeSpeedInterfaceUse case
Onboard NIC1G–2.5GRJ45Office, light NAS
Discrete PCIe NIC2.5G–10GRJ45Workstations, NAS
SFP+ NIC10G–25GSFP+Servers, machine rooms
Dual-port redundant NIC10G–25GSFP28Server high availability

Servers and NAS should use dual-port NICs for bonding (LACP or active-backup): a single port failure doesn’t interrupt service, and dual-port aggregation doubles bandwidth. SFP+ uses less power than RJ45 and supports longer distances (via fiber or DAC) — first choice for machine-room cabling.

Typical Studio Topologies

Small Studio (10–30 people)

1
2
3
Broadband → Enterprise router → 2.5G managed switch → Office endpoints + NAS
                            PoE switch → WiFi 6 APs (2–3) + IP phones
  • Router: enterprise-grade, throughput ≥ 1 Gbps, WireGuard support
  • Main switch: 24-port 2.5G managed, VLAN support
  • PoE switch: 8–16 port PoE+, total budget ≥ 195W
  • AP: enterprise WiFi 6, 802.11k/v/r support

Mid-Size Office (50–100 people)

1
2
3
4
5
Multi-WAN → L3 core switch → Access-layer 2.5G switches → Office endpoints
         10G switch → Servers + storage + NAS
      PoE++ switch → WiFi 6E/7 APs (8+)
  • Core: L3 layer-3 switch, inter-VLAN routing
  • Access layer: multiple 2.5G managed switches, fiber uplink to core
  • AP controller: unified management of 8+ APs

Lab Machine Room

1
2
3
Research network → 10G/25G core switch → GPU training cluster (100G interconnect)
                PoE switch → Sensors + IP cameras + edge devices
  • Core: 25G or 100G switch, low latency
  • GPU cluster: dual-port 100G per node (RoCE or InfiniBand)
  • PoE segment: powers IoT and surveillance devices

Pitfalls You Must Know

⚠️ On PoE switches, look at total budget, not port count. A 24-port PoE+ with 195W total budget can only actually drive 6 full-load ports.

⚠️ Consumer three-in-one routers are unsuitable for studios. Under heavy load, NAT, switching, and wireless all become bottlenecks. Above 20 people, split the functions.

⚠️ Multi-AP deployments must support roaming (802.11k/v/r). Otherwise clients “stick” to the first AP and won’t roam even as signal degrades.

⚠️ Don’t blindly go 10G in office areas. The office bottleneck is the broadband exit and wireless access — 2.5G is enough. Reserve 10G for the machine room and servers.

⚠️ WiFi 7 only matters when clients support it. MLO and 4K QAM require client support; legacy clients don’t benefit from WiFi 7.

⚠️ Isolate the guest network with VLAN. Studios must separate guest WiFi from the production network with VLAN to avoid security risks.

⚠️ LACP needs configuration on both ends. Both the switch and the server/NAS must be configured for LACP, otherwise they’re just two independent links.

⚠️ The performance ceiling of a software router depends on the CPU. x86 software routers use general-purpose CPUs; NAT performance drops under high load. For broadband above gigabit, choose a router with hardware NAT acceleration.

⚠️ SFP+ and RJ45 cannot be directly connected. SFP+ is a fiber or DAC interface; RJ45 is electrical — they need an optical module or DAC cable to connect.

⚠️ Cable requirements for PoE++ (802.3bt). PoE++ delivers high power and requires Cat6 or better shielded cabling, otherwise overheating becomes severe.

Counterintuitive correction: broadband speed ≠ actual experience. A studio may install gigabit broadband, but if the router’s NAT throughput is only 500 Mbps and the wireless AP’s actual throughput is only 300 Mbps, the client still experiences only a few hundred Mbps. Network experience is bounded by the slowest link, not by broadband speed.

Selection Comparison Summary

DecisionRecommended forNot recommended for
Managed vs unmanagedStudios of 10+ choose managedSmall offices do fine with unmanaged
2.5G vs 10G (office)Office chooses 2.5G (value)Machine room chooses 10G (bandwidth need)
PoE+ vs PoE++IP phones / ordinary APs choose PoE+WiFi 7 APs choose PoE++
WiFi 6 vs WiFi 7Office chooses WiFi 6 (sweet spot)High-density / low-latency chooses WiFi 7
Controller vs standalone AP4+ APs choose controllerSmall offices do fine with standalone APs
WireGuard vs OpenVPNRemote access chooses WireGuardCompatibility requirements choose OpenVPN

References

  1. IEEE 802.3 Ethernet standard series: https://standards.ieee.org/ieee/802.3/
  2. IEEE 802.11 WiFi standard series: https://standards.ieee.org/ieee/802.11/
  3. IEEE 802.1Q VLAN standard: https://standards.ieee.org/ieee/802.1Q/
  4. IEEE 802.3ad LACP standard: https://standards.ieee.org/ieee/802.3ad/
  5. IEEE 802.3af/at/bt PoE standards: https://standards.ieee.org/ieee/802.3/
  6. IETF RFCs (OSPF, BGP, WireGuard, etc.): https://www.rfc-editor.org/
  7. WireGuard protocol specification: https://www.wireguard.com/papers/wireguard.pdf
  8. Cisco network design guides: https://www.cisco.com/c/en/us/support/docs/
  9. Aruba enterprise wireless design guides: https://www.arubanetworks.com/techdocs/
  10. Ubiquiti UniFi design docs: https://help.ui.com/
  11. SNIA (Storage Networking Industry Association): https://www.snia.org/
  12. ServeTheHome network equipment reviews: https://www.servethehome.com/
  13. SmallNetBuilder network reviews: https://www.smallnetbuilder.com/
  14. TOM’s Hardware network equipment reviews: https://www.tomshardware.com/networking
  15. UniFi/Ekahau WiFi design tools: https://design.ui.com/
  16. Wi-Fi Alliance certification: https://www.wi-fi.org/
  17. BGP protocol specification (RFC 4271): https://www.rfc-editor.org/rfc/rfc4271
  18. RoCE (RDMA over Converged Ethernet) specification: https://www.infinibandta.org/