How to Set Up a Business Network from Scratch: A Step-by-Step Guide

Setting up a network for a new office is one of those projects that looks simple on paper but gets complicated fast. We have built networks for dozens of Utah businesses — from five-person startups in Lehi to 200-seat operations in Salt Lake City — and the difference between a well-planned network and a thrown-together one shows up every single day in performance, security, and reliability. Here is the step-by-step process we follow when building a business network from scratch.

Step 1: Get the Right Internet Connection

Everything starts here. In Utah, you generally have three options for business internet: Business-class fiber is the gold standard. Providers like Utopia, Google Fiber, and CenturyLink offer symmetrical speeds (same upload and download) with SLAs that guarantee uptime. If fiber is available at your location, this is the answer. Period. Cable (Comcast Business, Sparklight) works when fiber is not available. You will get decent download speeds but asymmetric uploads, which matters if you use cloud services heavily or run VoIP. Fixed wireless is a last resort for rural Utah locations where neither fiber nor cable reaches. It has gotten better, but latency and reliability still lag behind wired connections. Our recommendation: get business-class fiber if it is available. The cost difference between consumer and business internet is usually $50-100 per month, and you get an SLA, static IP addresses, and priority support. For a business that depends on internet connectivity, that is money well spent. If your location supports it, get a second connection from a different provider as a failover. Your firewall can handle automatic failover so your team never notices an outage.

Step 2: Choose Your Firewall and Router

Do not use a consumer router. A proper firewall appliance is non-negotiable for business use. Here are three options we commonly deploy: Ubiquiti Dream Machine Pro: Great entry point for small businesses. Affordable, decent feature set, integrates with the UniFi ecosystem. Downside: limited advanced security features compared to enterprise firewalls. Sophos XGS Series: Our go-to for most business deployments. Full next-gen firewall with intrusion prevention, web filtering, application control, and VPN. The reporting and management are excellent. Higher cost but worth it for the security features. Meraki MX: Cloud-managed, easy to deploy, great dashboard. Downside: requires ongoing licensing — if you stop paying, the hardware becomes a paperweight. That said, some businesses prefer the simplicity.

Step 3: Managed Switches — Always

Unmanaged switches are fine for your home network. For a business, always go managed. Managed switches let you configure VLANs, monitor port traffic, set up link aggregation, and troubleshoot problems remotely. For most small to mid-size offices, a 24-port or 48-port PoE managed switch from Ubiquiti, Meraki, or Aruba handles the job. PoE (Power over Ethernet) is important because it powers your access points and VoIP phones without separate power adapters.

Step 4: Set Up VLANs from Day One

VLANs (Virtual Local Area Networks) segment your network so different types of traffic stay separated. This is both a performance and security measure. At minimum, create these VLANs: Corporate VLAN: Your workstations, servers, and printers. This is where the business-critical traffic lives. Guest VLAN: Completely isolated from corporate. Guests get internet access and nothing else. They should not be able to see your printers, file shares, or any internal resources. VoIP VLAN: Voice traffic needs quality of service (QoS) priority. Putting phones on their own VLAN lets you prioritize that traffic so calls do not sound terrible when someone downloads a large file. IoT VLAN: Security cameras, smart TVs, thermostats — anything with an IP address that you cannot install endpoint protection on goes here. These devices are notoriously insecure, and isolating them protects your corporate network.

Step 5: Plan Your Wireless Access Points

Do not just stick a single access point in the middle of the office and hope for the best. Proper WiFi requires planning: Coverage planning: Walk the space and identify dead zones, high-density areas (conference rooms), and sources of interference (microwaves, thick walls). For most offices, plan one access point per 1,500-2,000 square feet. PoE-powered APs: Mount access points on the ceiling, powered by your PoE switch. No power adapters, clean installation. Channel planning: If you have multiple APs, manually assign channels to avoid interference. On 2.4 GHz, use channels 1, 6, and 11 only. On 5 GHz, you have more options but still need to plan. Band steering: Configure your APs to push capable devices to 5 GHz, which offers better performance and less congestion.

Step 6: Run Proper Cabling

Cabling is the foundation of your network, and it is the hardest thing to change later. Do it right the first time. Use Cat6 cable at minimum. Cat6a is worth the modest price increase if you are doing a new build — it supports 10 Gbps over longer runs and is more future-proof. Run cables to every desk location, even if some desks will use WiFi. Run two drops per desk if budget allows — one for the workstation, one for a VoIP phone. Terminate everything at a patch panel in your server closet or IT room. Label every single cable run. Both ends. Use a consistent numbering scheme. Future you (or future IT provider) will thank you.

Step 7: Server, NAS, or Cloud-Only?

This decision depends on your business: Cloud-only (Microsoft 365 + OneDrive/SharePoint): Works for most small businesses. No hardware to maintain, automatic backups, accessible from anywhere. This is where most of our clients land. NAS (Synology, QNAP): Good if you have large files that are impractical to store in the cloud — video production, engineering files, large datasets. A NAS gives you fast local storage with cloud backup. On-premises server: Still necessary for some businesses with specific line-of-business applications, compliance requirements, or heavy local compute needs. But this is becoming less common every year.

Step 8: Security from Day One

Do not plan to “add security later.” Build it in from the start: Configure your firewall rules to deny by default and allow by exception. Enable DNS filtering to block known malicious domains. Deploy endpoint protection on every workstation — we use Sophos across our managed clients. Set up your guest WiFi so it truly is isolated. Enable logging on your firewall and switches so you have forensic data if something goes wrong.

Step 9: Document Everything

As you build, document. Create a network diagram showing every device, IP address, VLAN, and connection. Record your firewall rules, switch configurations, WiFi settings, and ISP account information. Store credentials in a password manager, not on sticky notes or in a spreadsheet. Good documentation means any competent IT professional can understand your network without having to reverse-engineer it. We have walked into too many businesses where the previous IT person left and took all the knowledge with them.

Common Mistakes to Avoid

Using consumer-grade equipment: Consumer routers and switches are not built for business workloads. They overheat, drop connections, and lack management features. Flat networks with no segmentation: Everything on one subnet is a security and performance nightmare. Poor cable management: Unlabeled cables, rats-nest closets, and cables run along the floor create troubleshooting nightmares and safety hazards. No redundancy: A single point of failure — one internet connection, one switch, one firewall — means one failure takes down the whole office. Ignoring WiFi planning: Random AP placement leads to dead zones, interference, and frustrated users.

When to DIY vs. When to Call a Professional

If you are setting up a network for a two or three-person office with basic needs, you can probably handle it yourself with off-the-shelf equipment and some research. For anything larger, or for any business with compliance requirements, VoIP, or remote workers who need VPN access, bring in a professional. The cost of getting it right the first time is always less than the cost of fixing a poorly designed network after the fact. At Brivy IT, we design, build, and manage business networks across Utah. We handle everything from the initial site survey through ongoing monitoring and support, so you get a network that works reliably from day one and keeps working.