Network Equipment Selection Analysis — Device Functions, Protocols, and Product Tiers: The Infrastructure of Studio Networks
About This Guide
This guide is organized not by brand and model but by device function and network protocol. The underlying dimensions of network equipment — the function boundaries of the four device categories (switch/router/AP/NIC), Ethernet speed generations (1G/2.5G/10G/25G/100G), PoE power standards, WiFi protocol generations (6/6E/7), and management protocols (VLAN/STP/LACP/802.11k/v/r) — have been stable for years (Ethernet protocols since the 1980s, PoE standards since 2003, WiFi 6 since 2019), making them a more durable reference than specific models.
The studio network is infrastructure — when a switch, router, or AP fails, everyone stops together. But blindly stacking 10G gear is waste in most scenarios: the actual bottleneck in office areas is the broadband exit and wireless access; only the machine room has genuine high-bandwidth interconnect demand.
flowchart TD
A["Network equipment selection"] --> B["Switch: speed+PoE+mgmt"]
A --> C["Router: throughput+conns+VPN"]
A --> D["Wireless AP: WiFi gen+roaming"]
A --> E["NIC: speed+interface"]
style A fill:#e3f2fd,stroke:#2196F3
style B,C,D,E fill:#fff3e0,stroke:#FF9800Match by zone: offices need stability and coverage, machine rooms need bandwidth and low latency, labs need PoE power capacity.
Quick Selection Table
Organized by scenario → technical requirement; models are only current representatives — after a refresh, find new models that meet the same technical requirements.
| Scenario | Technical requirement | Current representative (price tier) |
|---|---|---|
| Small studio (10–30 people) | 2.5G managed + WiFi 6 + PoE+ + enterprise router | UniFi / Omada full stack (¥4000–8000) |
| Mid-size office (50–100 people) | L3 core + access-layer split + AP controller | Aruba / Huawei (¥30k–80k) |
| Lab machine room | 25G/100G low latency + RoCE | Mellanox / Arista (¥30k+) |
| Remote access | WireGuard VPN | Software router or enterprise router |
| Surveillance/IoT | PoE+ switch (watch total budget) | PoE switch (¥1000–2000) |
Price tier note: consumer-grade prices are mainstream JD/Tmall channels; enterprise-grade prices are distributor quotes — actual procurement prices vary significantly with channel and quantity.
Function Boundaries of the Four Device Categories
To understand network equipment selection, first understand the function boundaries of the four device categories — these are determined by the OSI model and do not change with model refreshes.
flowchart TD
L3["L3 Network layer"] --> R["Router<br/>Routing, NAT, VPN"]
L2["L2 Data link layer"] --> S["Switch<br/>Frame forwarding, VLAN"]
L2 --> AP["Wireless AP<br/>WiFi access"]
L2 --> N["NIC<br/>Endpoint access"]
style L3 fill:#bbdefb,stroke:#2196F3
style L2 fill:#c8e6c9,stroke:#4CAF50| Device | OSI layer | Core function | Key metrics |
|---|---|---|---|
| Router | L3 (network) | Routing, NAT, VPN, firewall | NAT throughput, connection count, VPN performance |
| Switch | L2/L3 (data link/network) | Frame forwarding, VLAN, PoE power | Speed, port count, PoE budget, management capability |
| Wireless AP | L2 (data link) | WiFi access, roaming | WiFi generation, roaming protocols, concurrency |
| NIC | L2 (data link) | Endpoint network access | Speed, interface (RJ45/SFP+), offload capability |
Sources: IEEE 802 series standards (802.3 Ethernet, 802.11 WiFi); IETF RFCs (OSPF, BGP, VLAN); Cisco/Aruba network design guides.
⚠️ Do not conflate the functions of routers and switches. A consumer “router” is actually a three-in-one router + switch + AP. Studios above 20 people should split these three functions: a standalone enterprise router (focused on NAT and VPN), a standalone managed switch (focused on frame forwarding and VLAN), and standalone APs (focused on wireless coverage). Three-in-one devices become bottlenecks under heavy load.
Switches: The Core of the Network
The switch is the heart of the LAN. Selection dimensions: speed, port count, PoE, management capability.
Speed Generations
| Speed | Typical scenario | Ports |
|---|---|---|
| 1G | Basic office, IP phones | 8–48 |
| 2.5G | Office sweet spot, NAS access | 8–24 |
| 10G | Servers, storage, workstations | 8–24 |
| 25G | Datacenter interconnect, GPU clusters | 8–32 |
| 100G | Datacenter uplink | 16–48 |
Typical studio config: 2.5G switches in office areas (backward-compatible with 1G), 10G switches in the machine room, 25G for GPU training clusters depending on scale.
PoE Power Budget
The key metric for a PoE switch isn’t port count but total power budget. A 24-port PoE+ switch with 30W max per port may have a total budget of only 195W — meaning at most 6 ports can run at full load simultaneously.
| PoE standard | Max per port | Example total budget | Actual capacity |
|---|---|---|---|
| PoE (802.3af) | 15.4 W | Entry 8-port 65W | 4 IP phones / ordinary APs |
| PoE+ (802.3at) | 30 W | Mid-range 24-port 195W | 6 full-load ports |
| PoE+ (802.3at) | 30 W | Enterprise 24-port 370W | 12 full-load ports |
| PoE++ (802.3bt) | 60–100 W | WiFi 7 AP dedicated 720W | 8 WiFi 7 APs |
WiFi 6E and WiFi 7 APs draw high power (20–30W); ordinary PoE+ can’t drive them — they need PoE++ (60–100W). When planning a PoE network, derive port count from the total budget — don’t just read port specs.
Managed vs Unmanaged
| Type | Features | Use case | Price |
|---|---|---|---|
| Unmanaged | Plug-and-play, no config | Small office, home | Low |
| Smart managed | VLAN, QoS, basic monitoring | Studios, SMBs | Mid |
| Fully managed (L2/L3) | VLAN, LACP, STP, routing, ACL | Machine rooms, enterprise networks | High |
Studios above 10 people should use managed switches: VLAN isolates guest and production networks, LACP aggregates links for NAS and servers, and basic monitoring pinpoints network issues quickly. Unmanaged switches suit only flat networks.
Key Protocol Capabilities
| Protocol | Function | Use case |
|---|---|---|
| VLAN (802.1Q) | Network isolation (guest/production/management) | Any multi-department network |
| LACP (802.3ad) | Link aggregation (bandwidth stacking + redundancy) | Servers, NAS |
| STP (802.1D/w/s) | Loop avoidance (redundant topology) | Multi-switch networks |
| QoS | Traffic priority (voice/video first) | IP phones, video conferencing |
| IGMP Snooping | Multicast optimization | IPTV, video streaming |
Routers
Studio router metrics: throughput, connection count, VPN performance, multi-WAN.
NAT Throughput
Router throughput determines the actual ceiling of NAT forwarding. A home router labeled “Gigabit WAN” may deliver only 300–500 Mbps once NAT is enabled. Studios with broadband above 500M must confirm the router’s NAT throughput matches.
| Type | NAT throughput | Use case |
|---|---|---|
| Home router | 300–800 Mbps | Small office |
| Enterprise router | 1–5 Gbps | Studios, SMBs |
| x86 software router | 5–20 Gbps | Labs, high-bandwidth needs |
Connection Count
P2P downloads, video conferencing, and container clusters all generate large numbers of concurrent connections. Home routers typically cap at 2000–5000 connections — a studio running container clusters or BT downloads will exhaust them instantly. Enterprise routers support 50000+ connections; software routers are effectively unlimited (memory-dependent).
VPN Protocols
Remote work needs VPN access to the studio intranet. VPN protocols differ widely in performance:
| Protocol | Speed | Security | Notes |
|---|---|---|---|
| WireGuard | Fastest | High | Modern VPN first choice |
| IPSec | Fast | High | Enterprise standard |
| OpenVPN | Slow (encryption overhead) | High | Best compatibility |
| SSL VPN | Medium | Medium | Browser access |
For studio remote access, WireGuard is the first choice — 3–5× the performance of OpenVPN.
Wireless APs
Wireless access selection dimensions: WiFi generation, roaming, controller.
WiFi Protocol Generations
| Generation | Standard | Bands | Max rate | Key technology |
|---|---|---|---|---|
| WiFi 6 | 802.11ax | 2.4G + 5G | 9.6 Gbps | OFDMA, BSS coloring |
| WiFi 6E | 802.11ax | 2.4G + 5G + 6G | 9.6 Gbps | Adds 6 GHz band |
| WiFi 7 | 802.11be | 2.4G + 5G + 6G | 46 Gbps | MLO multi-link, 4K QAM, 320 MHz channels |
WiFi 6 is the current sweet spot — sufficient for most office scenarios. WiFi 6E’s value is the 6 GHz band — less interference, more channels, noticeably more stable in dense environments (meeting rooms, open offices). WiFi 7’s MLO (multi-link aggregation) can transmit data over multiple bands simultaneously, further improving latency and throughput, but only matters when clients support it.
Roaming Protocols (802.11k/v/r)
When a studio has multiple APs covering the same area, the client’s experience switching between APs depends on roaming protocols:
| Protocol | Function |
|---|---|
| 802.11k | AP tells the client about neighboring APs, reducing scan time |
| 802.11v | Network guides the client to the optimal AP |
| 802.11r | Fast roaming, switch time < 50 ms |
Multi-AP deployments without roaming protocols cause clients to “stick” to the first AP, refusing to switch even as signal degrades. Studios with multiple APs must choose models supporting 802.11k/v/r, paired with a controller for unified management.
Controller vs Standalone AP
| Solution | Use case | Notes |
|---|---|---|
| Standalone AP | Small office with 1–3 APs | Each configured independently, no coordination |
| Controller (AC) unified | Studios with 4+ APs | Unified config, roaming, channel optimization |
| Cloud-managed AP | Multi-branch orgs | Cloud-based unified management |
Studios with more than 4 APs should use a controller solution to avoid roaming and channel-conflict issues.
NICs
| Type | Speed | Interface | Use case |
|---|---|---|---|
| Onboard NIC | 1G–2.5G | RJ45 | Office, light NAS |
| Discrete PCIe NIC | 2.5G–10G | RJ45 | Workstations, NAS |
| SFP+ NIC | 10G–25G | SFP+ | Servers, machine rooms |
| Dual-port redundant NIC | 10G–25G | SFP28 | Server high availability |
Servers and NAS should use dual-port NICs for bonding (LACP or active-backup): a single port failure doesn’t interrupt service, and dual-port aggregation doubles bandwidth. SFP+ uses less power than RJ45 and supports longer distances (via fiber or DAC) — first choice for machine-room cabling.
Typical Studio Topologies
Small Studio (10–30 people)
| |
- Router: enterprise-grade, throughput ≥ 1 Gbps, WireGuard support
- Main switch: 24-port 2.5G managed, VLAN support
- PoE switch: 8–16 port PoE+, total budget ≥ 195W
- AP: enterprise WiFi 6, 802.11k/v/r support
Mid-Size Office (50–100 people)
| |
- Core: L3 layer-3 switch, inter-VLAN routing
- Access layer: multiple 2.5G managed switches, fiber uplink to core
- AP controller: unified management of 8+ APs
Lab Machine Room
| |
- Core: 25G or 100G switch, low latency
- GPU cluster: dual-port 100G per node (RoCE or InfiniBand)
- PoE segment: powers IoT and surveillance devices
Pitfalls You Must Know
⚠️ On PoE switches, look at total budget, not port count. A 24-port PoE+ with 195W total budget can only actually drive 6 full-load ports.
⚠️ Consumer three-in-one routers are unsuitable for studios. Under heavy load, NAT, switching, and wireless all become bottlenecks. Above 20 people, split the functions.
⚠️ Multi-AP deployments must support roaming (802.11k/v/r). Otherwise clients “stick” to the first AP and won’t roam even as signal degrades.
⚠️ Don’t blindly go 10G in office areas. The office bottleneck is the broadband exit and wireless access — 2.5G is enough. Reserve 10G for the machine room and servers.
⚠️ WiFi 7 only matters when clients support it. MLO and 4K QAM require client support; legacy clients don’t benefit from WiFi 7.
⚠️ Isolate the guest network with VLAN. Studios must separate guest WiFi from the production network with VLAN to avoid security risks.
⚠️ LACP needs configuration on both ends. Both the switch and the server/NAS must be configured for LACP, otherwise they’re just two independent links.
⚠️ The performance ceiling of a software router depends on the CPU. x86 software routers use general-purpose CPUs; NAT performance drops under high load. For broadband above gigabit, choose a router with hardware NAT acceleration.
⚠️ SFP+ and RJ45 cannot be directly connected. SFP+ is a fiber or DAC interface; RJ45 is electrical — they need an optical module or DAC cable to connect.
⚠️ Cable requirements for PoE++ (802.3bt). PoE++ delivers high power and requires Cat6 or better shielded cabling, otherwise overheating becomes severe.
Counterintuitive correction: broadband speed ≠ actual experience. A studio may install gigabit broadband, but if the router’s NAT throughput is only 500 Mbps and the wireless AP’s actual throughput is only 300 Mbps, the client still experiences only a few hundred Mbps. Network experience is bounded by the slowest link, not by broadband speed.
Selection Comparison Summary
| Decision | Recommended for | Not recommended for |
|---|---|---|
| Managed vs unmanaged | Studios of 10+ choose managed | Small offices do fine with unmanaged |
| 2.5G vs 10G (office) | Office chooses 2.5G (value) | Machine room chooses 10G (bandwidth need) |
| PoE+ vs PoE++ | IP phones / ordinary APs choose PoE+ | WiFi 7 APs choose PoE++ |
| WiFi 6 vs WiFi 7 | Office chooses WiFi 6 (sweet spot) | High-density / low-latency chooses WiFi 7 |
| Controller vs standalone AP | 4+ APs choose controller | Small offices do fine with standalone APs |
| WireGuard vs OpenVPN | Remote access chooses WireGuard | Compatibility requirements choose OpenVPN |
References
- IEEE 802.3 Ethernet standard series: https://standards.ieee.org/ieee/802.3/
- IEEE 802.11 WiFi standard series: https://standards.ieee.org/ieee/802.11/
- IEEE 802.1Q VLAN standard: https://standards.ieee.org/ieee/802.1Q/
- IEEE 802.3ad LACP standard: https://standards.ieee.org/ieee/802.3ad/
- IEEE 802.3af/at/bt PoE standards: https://standards.ieee.org/ieee/802.3/
- IETF RFCs (OSPF, BGP, WireGuard, etc.): https://www.rfc-editor.org/
- WireGuard protocol specification: https://www.wireguard.com/papers/wireguard.pdf
- Cisco network design guides: https://www.cisco.com/c/en/us/support/docs/
- Aruba enterprise wireless design guides: https://www.arubanetworks.com/techdocs/
- Ubiquiti UniFi design docs: https://help.ui.com/
- SNIA (Storage Networking Industry Association): https://www.snia.org/
- ServeTheHome network equipment reviews: https://www.servethehome.com/
- SmallNetBuilder network reviews: https://www.smallnetbuilder.com/
- TOM’s Hardware network equipment reviews: https://www.tomshardware.com/networking
- UniFi/Ekahau WiFi design tools: https://design.ui.com/
- Wi-Fi Alliance certification: https://www.wi-fi.org/
- BGP protocol specification (RFC 4271): https://www.rfc-editor.org/rfc/rfc4271
- RoCE (RDMA over Converged Ethernet) specification: https://www.infinibandta.org/