UniFi Network Planning
Ubiquiti UniFi solutions in Zurich & Switzerland
Ubiquiti UniFi solutions for Swiss SMEs: WiFi, switches, firewalls and Protect. Irontec in Hedingen provides planning, installation and support.
What it's about
UniFi network planning.
With an eye on your everyday life.
A corporate network consists of more than individual devices. Irontec connects UniFi WLAN, switches, gateways and Internet connections into a coordinated operating concept. On this page you will find the complete solutions by company size. The dedicated service pages for WLAN, switching and firewall explain the selection of the respective components in detail. From Hedingen we support companies in Zurich and Switzerland with planning, conversion and support.
Cohesively plannedAdjust the radio network, cable network and Internet connection to the applications.
Comprehensibly dimensionedParts lists with CHF guide prices as a basis for your individual offer.
Verifiable during operationDocumentation and agreed functional tests are part of the handover.
This is in our performance
Thoughtfully planned.
Personally implemented.
Choose the building blocks that suit your initial situation. We determine the scope and support together.
UniFi location analysis
Capture floor plans, workstations, existing cabling and applications. This results in requirements for WLAN, ports and Internet access.
UniFi WiFi planning
Consider radio coverage and simultaneous use separately. The WLAN performance page shows the appropriate access points and their differences.
UniFi switching concept
Dimension access level, uplinks and aggregation. The switching performance page explains port speed, PoE, and redundancy options.
UniFi Firewall & Internet
Coordinate network areas, access rules, VPN and additional Internet routes. We select gateways and firewalls based on their protection performance and availability.
UniFi failure concept
Consider line, power and device failures individually. Additional hardware helps where cabling and switching are also prepared.
UniFi Operation & Documentation
Record device overview, port assignment and responsibilities. Updates, maintenance windows and ongoing support are agreed to suit the company.
Ubiquiti UniFi
Plan networking and video surveillance together.
WiFi, switches, firewalls, Protect and support: find the right starting point for your site.
UniFi Protect & cameras
Plan cameras, recording, storage and access to suit your use case.
Discover performance and models ↗
UniFi support & maintenance
Take over existing installations, investigate issues and agree maintenance.
Discover performance and models ↗
UniFi WiFi & WiFi 7
Radio planning, guest WiFi, roaming and access points from the U7 Pro to the E7.
Discover performance and models ↗
UniFi Switches & Switching
Ports, PoE budget, fast uplinks, aggregation and stacking explained clearly.
Discover performance and models ↗
UniFi Firewall & UDM
Gateways, protection functions, VPN and internet backup suitable for the location.
Discover performance and models ↗Irontec customer references
These customers use UniFi.
Companies and organisations using Ubiquiti UniFi with Irontec. The labels indicate which customers also use UniFi Protect.
UniFi Protect
apbp consulting GmbH
- Ubiquiti UniFi
Gartenmann Engineering AG
- Ubiquiti UniFi
Ubiquiti worldwide
Who uses Ubiquiti?
Ubiquiti presents companies and organisations using UniFi on ui.com. Below is the manufacturer’s reference overview.
Swipe sideways to see all logos. The image links to ui.com.
Hardware suggestions for your business
From the small office
to campus.
Concrete starting points for planning. Rooms, wired workstations, applications and radio measurement determine the final equipment.
A small office
Small businesses
- 1 × Cloud Gateway Ultra
- 1 × Lite 8 PoE
- 2 × U7 Lite
One gateway, eight switch ports and two access points as a starting point. The Gigabit switch limits the wired WLAN connection to 1 Gbit/s. No device redundancy.
CHF 415.78Indicative price for base hardware excl. VAT · final quote on request
Discuss equipment ↗
More spaces, more collaboration
Medium-sized companies
- 1 × Cloud Gateway Max
- 2 × Pro Max 16 PoE
- 4 × U7 Pro
Two switches with a total of 32 network ports and four access points. 2.5 GbE ports for WiFi; Plan PoE and uplink reserve separately. The single gateway remains a central point of failure.
CHF 1'821.75Indicative price for base hardware excl. VAT · final quote on request
Discuss equipment ↗
Multiple floors or work areas
Big companies
- 1 × Dream Machine Pro Max
- 4 × Pro Max 16 PoE
- 8 × U7 Pro Max
64 network ports and eight access points as a planning example. The Pro Max switches are managed individually and do not form a true switch stack. The Enterprise version is intended for higher availability.
CHF 4'503.36Indicative price for base hardware excl. VAT · final quote on request
Discuss equipment ↗Non-binding CHF guide prices. Price status: September 15-16, 2026. Conversion: 1 EUR = CHF 0.9441 (ECB, September 15, 2026). Exact price on request. Not included: cabling, optics, rack accessories, power backup, installation and ongoing subscriptions. Quantities are planning examples, not guaranteed user or space capacities.
Enterprise overall variant
Two internet connections.
Multiple secured levels.
Planning assumption: “Enterprise Core” means two Enterprise Firewall Core. The number of E7 will be added after the WLAN planning.
UniFi high availability in action
What happens when a connection or device fails? This Ubiquiti animation shows how redundant links connect the different layers of a network.
Internet and 5G backup
Two internet connections and WAN switches complement each other. 5G can provide another backup path; reception, connectivity and failover are tested on site.
Firewalls and aggregation
Shadow Mode allows a second compatible gateway to take over. MC-LAG connects compatible aggregation switches through multiple data paths.
Switches and WiFi
The diagram combines campus switches with dual-connected E7 access points. Separate power paths and tested backup links are part of the design.
For your installation, we design the appropriate topology and test specific failure scenarios. High availability requires a coordinated overall design; the animation does not guarantee uninterrupted operation.
Internet route AProvider 1 → WAN switch 1
Internet route BProvider 2 → WAN switch 2
Both WAN switches connect both firewalls
Firewall high availability2 × Enterprise Firewall Core · Shadow Mode
Redundant LAN uplinks
Aggregation level 1ECS aggregation A + B · MC-LAG
Aggregation level 2ECS aggregation C + D · MC-LAG
Connect both levels redundantly; connect the access stacks dual
Stack 14 × ECS-48S-PoE in the ring
Stack 24 × ECS-48S-PoE in the ring
Stack 34 × ECS-48S-PoE in the ring
Two cables for each E7 to different PoE switches
WiFiE7 · 10 GbE primary + 1 GbE reserve
Third Internet route via the UniFi-LAN1 × UniFi 5G Max · Cellular backup
The overview shows the intended levels. The specific port, VLAN and cabling plan is created for the site. Internet providers should use different feeds; two contracts for the same line do not protect against failure.
| Hardware and task | number | Unit price | Total |
|---|---|---|---|
 WAN Switch →USW-WAN-EU One WAN switch per Internet provider, each with a connection to both firewalls. | 2 | CHF 254.91 | CHF 509.82 |
 Enterprise Firewall Core →EF-Core-EU Two identical Enterprise Firewall Core in the Shadow Mode as active device and standby device. | 2 | CHF 3'567.57 | CHF 7'135.14 |
 Enterprise Campus Aggregation →ECS-Aggregation-EU Four Enterprise Campus Aggregation as two MC-LAG pairs; redundant connections between levels. | 4 | CHF 4'077.38 | CHF 16'309.52 |
Enterprise Campus 48S PoE →ECS-48S-PoE-EU Three ring stacks with four switches each. Total 576 access ports; Distribute uplinks across different stack members. | 12 | CHF 4'077.38 | CHF 48'928.56 |
 UniFi 5G Max →U5G-Max An additional cellular path via the UniFi-LAN. Mobile phone contract and SIM/eSIM separately. | 1 | CHF 406.72 | CHF 406.72 |
| Guide price for basic hardware without E7, excluding VAT | CHF 73'289.76 | ||
Add E7 as required
Guide price per access point CHF 508.68 excl. VAT. WiFi 7, ten spatial data streams, PoE++ and two ports for redundant data and power supply.
Example with 12 E7: CHF 79’393.92
Example with 24 E7: CHF 85’498.08
Guide price for basic hardware including access points, excluding VAT. Exact price on request.
What constitutes reliability
- Three stacks instead of a stack of twelve: Currently a maximum of four ECS-S switches per stack. Three closed four-rings and cross-stack uplinks are planned. The ECS-48S-PoE requires UniFi Network 10.6.101 or newer.
- Power supply A/B: Connect redundant power supplies and WAN switch inputs to separate, appropriately sized power and UPS paths. For the ECS-48S-PoE, the PoE budget in redundant 230 V operation is 950 W per switch.
- E7 with reserve travel: Main and backup cables lead to different switches. In failure mode, the second connection is limited to 1 Gbit/s. A defective access point itself requires overlapping wireless coverage or replacement.
- 5G remains an additional single path: A modem and its connection are not duplicated. Mobile reception, data volume and the interaction of 5G failover and gateway high availability are checked before acceptance.
- The overall system includes further items: Two internet subscriptions, SIM/eSIM, at least twelve matching QSFP stacking cables for the three rings, MC-LAG connections, uplinks, optics, structured cabling, racks and UPS. These location-dependent items are not included in the base hardware price.
All amounts are non-binding guide prices. Exact price on request. Basic hardware is not a blanket offer for a ready-to-use system. Line failure, gateway failure, aggregation switch failure, stack member failure, and power path failure are provided as separate acceptance tests.
Plan enterprise project ↗Ubiquiti competence
Certifications
& partner status.
Ubiquiti qualifications at a glance: Wireless Specialist, Wireless Admin and Enterprise Partner.
UBWS
Wireless Specialist
Certification with a focus on wireless networks.
UWA
Wireless Admin
Certification with a focus on WLAN administration.
Ubiquiti
Enterprise Partner
Partner program for professional UniFi installations.
This is how the solution can help
Thought from your everyday life.
Example situations – we tailor the specific implementation to your requirements.
Move into a new office
Workspaces, meeting rooms and guest access are planned prior to move-in. We coordinate UniFi devices, cabling and internet provision.
A company grows
Additional workstations and rooms increase the need for ports and radio capacity. We check which components should continue to be used and which connections should be expanded.
A campus needs greater availability
Buildings and distribution levels receive a coordinated concept with documented alternative routes. The switchover is checked based on agreed failure scenarios.
Good to understand
From requirements to complete parts lists
We start with your applications: video conferences, telephony, large project files or cameras place different loads on the network. We then plan terminal connections, radio coverage and connections between the floors. The following equipment suggestions show possible starting points. The number of devices and availability depend on the location, not just the number of employees.
WLAN, switching and firewall have different tasks
Access points establish the radio connection. Switches connect devices via cable and supply PoE to suitable devices. The gateway connects networks with each other and implements the intended rules at the Internet gateway. We coordinate these levels: A fast access point needs a suitable cable connection, and a guest WLAN requires suitable network and firewall settings.
From one office to multiple buildings
A small installation can start with a gateway and a few switches. With multiple floors or buildings, distributors, uplinks and aggregation become more important. We check existing connections and plan expansions so that responsibilities and network structure remain understandable. You will find specific model comparisons in the detail pages.
Redundancy as a verifiable overall concept
The campus variant combines two Internet connections, an additional 5G path, two WAN switches, two Enterprise Firewall Core, four aggregation switches and twelve access switches in three stacks of four. E7 access points are added after radio planning. Separate current paths, suitable cable routes and failure tests are just as much a part of the planning as the hardware. The parts list below shows requirements and limits.
Your UniFi project with Irontec
UniFi consulting, installation and support
Irontec plans and installs Ubiquiti UniFi networks for businesses in Zurich and Switzerland. We combine WiFi, switching, firewalls and, where needed, Protect video surveillance in one coordinated design. Your premises, applications and operational requirements are the starting point.
For the initial consultation
- Sites, floor plans and existing equipment
- Workstations, applications and current bottlenecks
- Target date and outage requirements
A clear quotation
You receive an agreed scope covering hardware, setup and optional support. Product pages show indicative CHF prices; the final quotation takes your site into account.
Discuss your UniFi project ↗This is how we get to the result
A clear process.
From the beginning.
One-off implementation and ongoing support are agreed separately and comprehensibly. You know what services are included.
01
Understand
We clarify your requirements and record the current status.
02
Plan
We define the scope, those responsible and the order of implementation.
03
Implement
We set up the solution and check the agreed use cases.
04
Accompany
We hand over the documentation and coordinate further support.
Good to know
Your questions. Clear answers.
Which UniFi performance page is suitable for my project?
For reception, radio planning and access points select UniFi WLAN & WiFi 7. For ports, PoE, cabling, uplinks and stacking select UniFi Switches & Switching. This network overview connects the areas to create overall solutions.
Are the hardware suggestions binding offers?
No. The CHF amounts are indicative prices for the basic hardware listed. The individual offer takes into account quantities, accessories, cabling, installation and the desired support. The exact price is available upon request.
Will the existing IT be completely replaced during a change?
That depends on the inventory. We check cabling, end devices, Internet connections and applications. The changeover takes place with a coordinated process and functional tests; suitable existing components can continue to be used.
Meaningfully connected.
All services02 / Network & SecurityUniFi WiFi & WiFi 7
Ubiquiti UniFi WLAN for offices, SMEs and campuses: radio planning, WiFi 7 access points, guest access and roaming. Irontec plans, installs and maintains your solution.
Discover solution03 / Network & SecurityUniFi Switches & Switching
Ubiquiti UniFi switches for Swiss SMEs and campuses: PoE, multi-gigabit, fiber optic uplinks, VLANs, aggregation and stacking, clearly planned and supported.
Discover solution
03 / Network & SecurityUniFi Firewall & UDM
Ubiquiti UniFi firewalls, UDM and cloud gateways for Swiss companies. Compare models, plan VPN and failover – with Irontec.
Discover solutionIrontec References
Insights into our customer projects.
A selection from the areas of web, collaboration and digital customer acquisition. Discover the implementation in the published project reports.
Financial Services
Zellweger Group AG
Website and collaboration connected.
Irontec relaunched the website and created a digital sales channel. The project also included Microsoft 365 with shared files and mailboxes, training and a peoplefone VoIP solution.
Read project reportEngineering
Gartenmann Engineering AG
A new appearance for complex projects.
The project report describes the website relaunch with workshops, responsive implementation and search engine optimization. An individually developed reference function enables PDF creation from selected projects.
Read project reportAdvice
apbp consulting GmbH
From the foundation to the digital workplace.
The website, logo and corporate identity were created together with a Microsoft-365 environment. Email, shared file storage and training supported collaboration across different work locations.
Read project reportTraining
Fahrschule Luan
Be found online. Simply register.
Irontec implemented a responsive website with contact and course registration. In addition, target groups and search terms were developed and four Google Ads campaigns were set up and optimized.
Read project reportThe project reports document the scope of services at that time.