How to set up a small office network that keeps working

Start with the internet connection

Everything else depends on the connection, so start there. Work out what an outage would cost you. If the office can't take payments, answer calls or reach cloud systems without it, you need more than a home plan.

nbn offers business-grade service levels to internet providers, who then decide what to sell you. On nbn's current business plans:

A few things to know before you buy:

• The targets are what nbn offers providers. Your provider's own terms may be different, so ask them what they commit to in writing.
• The targets apply in urban areas, or where no site visit is needed.
• Not every provider offers plans built on the full range of these service levels.
• Business Service isn't available on nbn Fixed Wireless or satellite.

Ask the provider who you call when it breaks, what hours they answer, and whether you can get a static IP address if you need one for remote access or a phone system.

Use a router or firewall you control

The modem or router your provider sends is often built for homes. It may be fine for a very small office, but you often can't control its updates, logging or network separation.

For most offices of 5 to 30 people, a business-grade router or firewall is worth it. ASD notes that routers don't give the same protection as a firewall, and that firewalls should be set to block unknown traffic by default. Whatever you use, follow ASD's basic router advice:

1. Change the default admin password to a long, unique one, and store it in your password manager. 2. Turn on automatic firmware updates, or set a monthly reminder to check. 3. Turn off services you don't use, especially remote management from the internet. 4. Limit who can manage it, and use multi-factor authentication for the admin login if it's offered. 5. Replace it when the manufacturer stops releasing updates.

See how to keep devices updated for a routine that covers network gear too.

Switches and cabling

A switch gives you more wired ports. Wired connections are faster and more reliable than Wi-Fi for desks that don't move, printers and phone systems. A managed switch costs more, but it lets you separate networks (see below), which an unmanaged switch can't do.

In Australia, data cabling in an office should be done by a registered cabler. The ACMA lists data cabling for computers among the work a registered cabler does. When you hire one:

• Ask to see their registration card. You can check it with the registrar named on the card.
• At the end of the job, they should give you a signed statement that the work meets the Wiring Rules.
• Ask them to label every wall socket and the matching port at the patch panel. You'll be glad of it later.

Put the router, switch and nbn equipment somewhere ventilated and lockable, not under a desk where it gets kicked or unplugged.

Wi-Fi that reaches every room

One home router in a corner rarely covers a whole office. Business access points are mounted on ceilings or high on walls, spread across the space, and managed together so devices move between them smoothly.

• Place access points where people work, not where it's easiest to run a cable. Walls, glass, metal shelving and lift shafts all block signal.
• Wire each access point back to the switch. Wireless links between access points are slower.
• Use WPA3 encryption, or WPA2 if some older devices can't connect with WPA3.
• Use a long Wi-Fi password and change it when staff leave, or use individual logins if your system supports them.

After installing, walk the office with a phone or laptop and check the connection in every room, including meeting rooms and the kitchen.

Separate guests and smart devices

ASD recommends guest Wi-Fi for visitors and customers. The same idea applies to smart TVs, cameras, door intercoms and other connected devices. They should not sit on the same network as the computers that hold your files and accounts.

A business router and managed switch can split one physical network into several separate ones, often called VLANs. A common layout:

If a smart device is compromised, separation stops it being a stepping stone to everything else. Most smart devices bought on or after 4 March 2026 should meet Australia's smart device security standards, which include no default passwords. Our guide to smart home and camera security covers choosing and setting them up.

Plan for the internet going down

Even a good nbn plan will have outages. A backup connection, usually a 4G or 5G router, lets the office keep working while the main link is fixed. Many business routers can switch to it automatically and switch back when the nbn service returns.

• Check mobile coverage inside the office before you buy, near where the backup router will sit.
• Choose a data allowance that covers a full working day of normal use.
• Test the failover by unplugging the nbn connection for a few minutes, at a quiet time.

Power matters too. nbn says equipment connected through its network won't work during a power outage. Each mains-powered device needs its own battery back-up. A small uninterruptible power supply (UPS) for the nbn box, router, switch and backup router keeps you online through short blackouts.

Write it all down

A network that nobody documented is hard to fix, hand over or secure. Keep a short network record:

• Every device: make, model, serial number, location and when it was bought.
• Admin logins for the router, switches and access points, kept in a shared password manager, not on a sticky note.
• Wi-Fi network names, and which network each one connects to.
• Your internet provider, account number and fault line.
• Who installed the cabling, and their certification statement.
• When firmware was last updated on each device.

ASD advises keeping a list of all edge devices, such as routers and firewalls, and making sure they are secure and up to date. Review the record whenever something changes, and at least once a year.

Common questions

Keep reading

Related help