Routers, switches and access points have different roles. Equipment branding alone does not determine network quality; topology, required features and configuration matter. Configuring MikroTik, Cisco or UniFi starts by understanding who needs to connect to which services.
Define device roles and traffic flows
Inventory providers, subnets, offices and critical services. Show where routing, filtering and wireless access occur. One device may combine roles, but account for this deliberately in capacity and failure scenarios.
Verify the exact model and software version. VLAN or VPN support in a product family description does not establish the selected device’s required performance. Licensing, updates and management arrangements also vary by product.
Build addressing and access policy
Agree address ranges, DHCP, DNS and employee, guest and equipment networks. Avoid overlap with branches and remote users. Define permitted destinations for each segment instead of habitually leaving every internal network open to all others.
For example, a guest phone needs internet access but not the document server. A differently named Wi-Fi network does not prove that separation. Check router, switch and access point policies along the actual traffic path.
Manage changes and failover scenarios
Before a change, save configuration using supported methods and check how access can be recovered after an error. Editing a route remotely may disconnect the administrator. A rollback plan and agreed window are particularly important for a device serving the whole office.
Test backup internet by simulating the agreed link failure rather than merely connecting a second cable. Check DNS, VPN and required external services after failover. Some connections depend on the provider’s address; account for this in the scenario.
Hand over a manageable network
Acceptance covers allowed and denied connections, load and alerts. Test from typical devices in the relevant segments. Record known limitations: working internet may coexist with an inaccessible printer or an improperly exposed camera network.
Hand over the current diagram, port labels, managed access and protected configuration copies. Define updates and change control. The next specialist should understand each rule’s purpose rather than discover it through random disabling.
Sources and further reading
