Gimmie Java!

The HT Guys love their Coffee. If you want to say thanks, a cup of joe will do just fine! You can even make it a recurring subscription, which helps us with the costs of producing the show each week.

Choose your size Small ($6.00) Medium ($8.00) or Large ($10.00)

Or select a Caf-Pow and get a shoutout read on the show

 

Watch the Videos

 

YouTube
 
Categories
Entry
Friday
Oct092026

Podcast #1273: The Network Behind the New House: Why I Went Beyond Mesh Wi‑Fi

On this week’s show we get into the inner workings of Ara’s network at his new home and we discuss who else could benefit from a similar setup. We also read your emails and look at the week’s news.

Download this Episode.

Support the show with Patreon!

Listen to the show

Today's Show:

News:

Other:

The Network Behind the New House: Why I Went Beyond Mesh Wi‑Fi

When we moved into the new house, I had a choice to make about the network. For years I've used the same kind of gear a lot of you have: an ISP gateway, then a mesh system like Orbi or eero. Those systems are good. You plug them in, run an app, and most of the house gets Wi‑Fi. 

For a lot of homes, that's all you need. But I wanted something that gave me maximum control down to the connected device and remote access to manage every little detail.  Since I had the chance to run Ethernet before the walls were closed. That changed the math. Here's what I wanted:

  • Coverage everywhere, including the theater, the backyard, and the garage, without dead spots.
  • Wired backhaul. Mesh units talk to each other over the air, and that uses up some of the Wi‑Fi you'd rather give to your devices. When every access point has its own cable back to the rack, that problem goes away.
  • Power over Ethernet (PoE). One cable carries both data and power to the access points and cameras. No power bricks hiding in the ceiling.
  • VLANs and a real guest network. I wanted to keep the smart TVs, streaming boxes, and IoT gadgets separate from our computers and phones, and give guests their own network.
  • One place to see it all. I wanted to look at a screen and see what's connected, what's using bandwidth, and what's offline.

So I went with a "prosumer" setup: a UniFi gateway, UniFi access points, and two Araknis managed switches in the rack. Here's what each piece does, what I like about it, and where it falls short.

Ubiquiti UniFi Dream Machine Pro (UDM‑Pro)

What it is: The UniFi Dream Machine Pro is a rack‑mounted router and firewall that Ubiquiti calls a "cloud gateway." It also runs the UniFi software that manages the access points, so I don't need a separate controller box or a computer left running.  (Tech specs)

What it does in my network: This is the front door. My internet connection plugs into it, and it handles routing, the firewall, the VLANs, and the guest network. It's also the dashboard where I set up and watch the Wi‑Fi.

A few specs worth knowing:

  • Two WAN ports (one 10G SFP+ and one Gigabit Ethernet), so you can add a backup internet connection.
  • Eight Gigabit Ethernet LAN ports plus one 10G SFP+ LAN port.
  • IDS/IPS (threat detection) rated by Ubiquiti at up to 3.5 Gbps.
  • A bay for a 3.5" hard drive, so it can also record security cameras with UniFi Protect.A small touchscreen on the front that shows status at a glance.

Compared to a consumer router or mesh base station: You get much more control. VLANs, firewall rules, traffic stats per device, dual‑WAN failover, and a camera recorder are all built in. Most consumer systems either don't offer those or hide them behind a subscription.

The honest downsides:

  • It's a 1U rack box. If you don't have a rack or a closet with ventilation, it's awkward.
  • It has no Wi‑Fi of its own. You have to buy access points separately.
  • The settings can be overwhelming at first. There are a lot of menus, and some of them assume you know networking terms.
  • It's more than one‑app‑and‑done. Plan to spend an evening learning it.

Ubiquiti U7 Pro Access Points (×4)

What it is: The UniFi U7 Pro is a Wi‑Fi 7 access point that mounts on a ceiling or wall. It's tri‑band (2.4, 5, and 6 GHz), and it's powered by PoE+ through a single Ethernet cable. (Tech specs)

What it does in my network: These four access points are the Wi‑Fi. Each one sits on the ceiling or hidden away in attic space in a different part of the house and connects by cable back to the PoE switch in the rack. The UDM‑Pro manages all four as one network, so phones and laptops move between them as we walk around.

Specs from Ubiquiti:

  • Wi‑Fi 7 with 6 GHz support.
  • Rated coverage of about 1,500 sq ft per access point.
  • 2.5 GbE uplink port.
  • PoE+ powered, with a maximum draw of 21 W.
  • Mounting hardware for ceiling or wall is included.

Compared to mesh: Every access point has a wired connection to the rack, so none of the Wi‑Fi is spent relaying traffic between units. Ceiling mounting also helps. The signal spreads out from the center of the room instead of from a box sitting on a shelf behind the TV. And because they're managed from one place, I can see which devices are connected to which access point and how strong the signal is.

The honest downsides:

  • You need a cable run to every access point. That's easy during construction and harder in a finished house.
  • You need PoE. You'll either need a PoE switch or individual PoE injectors.
  • Speed limit in my setup: The U7 Pro has a 2.5 GbE port, but my switches are Gigabit, so each access point connects at 1 Gbps. For us that's fine. Just know you're leaving some headroom on the table unless your switch has 2.5G ports.
  • Four of them add up. They aren't cheap compared to a 3‑pack mesh kit.

Araknis Networks 320 Series L2 Managed Gigabit Switch with Full PoE+ (16 + 2 Rear Ports)

What it is: The Araknis 320 Series 16‑port PoE+ switch (AN‑320‑SW‑R‑16‑POE) is a 1U rack‑mount managed switch from Snap One, the company behind Control4. It has 16 Gigabit Ethernet ports and two 1G SFP uplink ports, all on the back. "Rear ports" matters in a rack because the cables come out the back and the front stays clean.

What it does in my network: This is the switch that powers the Wi‑Fi. All four U7 Pros plug into it, and it supplies both their data and their power. It also powers my Aqara cameras and supplies its data as well.

Specs from Snap One:

  • 16 PoE+ ports (802.3af/at), up to 30 W on any single port.
  • 250 W total PoE budget. Snap One says that's enough for about 15 W on every port at the same time.
  • Two dedicated 1G SFP ports for uplinks. They don't take away a PoE port.
  • Layer 2 management: VLANs, spanning tree, and IGMP snooping (helpful for multicast traffic like some multi‑room audio and video).
  • Remote management through Snap One's OvrC platform.
  • 5‑year limited warranty.

Four U7 Pros at their 21 W maximum come to 84 W. That leaves plenty of budget for other devices like my cameras.

Compared to consumer gear: Most consumer mesh systems have just a few Ethernet ports on each unit and no PoE at all. A managed PoE switch gives you one central, powered point for every wired device, and it understands the VLANs set up on the UDM‑Pro.

The honest downsides:

  • Cost. This is the most expensive piece in the rack.
  • Dealer channel. Araknis is sold mainly through Snap One/ADI dealers and integrators, not on a regular store shelf. If you're doing it yourself, it can be harder to buy and get support.
  • Gigabit only. No 2.5G or 10G ports, so it's not the fastest option for Wi‑Fi 7 access points.
  • It's a second dashboard. UniFi doesn't manage Araknis switches. The switch has its own web interface and OvrC. I'll come back to this.
  • There's a fan, so it's not something you want in a quiet room. (Snap One lists the PoE model's maximum noise at about 47 dBA.)

Araknis Networks 320 Series L2 Managed Gigabit Switch (16 + 2 Rear Ports)

What it is: The Araknis 320 Series 16‑port switch (AN‑320‑SW‑R‑16) is the same switch without PoE. You still get 16 Gigabit ports and two 1G SFP uplinks on the back, the same Layer 2 features, and OvrC management.

What it does in my network: This one handles everything that doesn't need power over the cable: the AV receiver, streaming boxes, TVs, game consoles, the NAS, and the wall jacks in the office and bedrooms. Splitting the wired gear across two switches keeps the expensive PoE ports free for devices that actually need power.

Compared to consumer gear: It's like the cheap unmanaged switch you might have behind your TV, but it understands VLANs. It's also built for a rack, and you can monitor it remotely.

The honest downsides:

  • $600 is a lot for a Gigabit switch with no PoE. You're paying for the management features, the build quality, and the Snap One ecosystem.
  • Same dealer‑channel and second‑dashboard issues as the PoE model.
  • If you don't need VLANs or remote monitoring, a basic unmanaged switch will move packets just as well for much less money.

How It All Hangs Together

The internet comes into the UDM‑Pro, which is the router, firewall, and UniFi controller. The

UDM‑Pro connects to the two Araknis switches, which act as the wired backbone of the house. The PoE+ switch powers and connects the four U7 Pro access points and cameras throughout the house, and the non‑PoE switch serves the TVs, AV gear, and wall jacks. The VLANs I create on the UDM‑Pro (main, IoT/AV, and guest) are carried through the Araknis switches to the access points and wired devices.

One note about the "single dashboard" goal: the UniFi app shows me the gateway, the Wi‑Fi, and every client, and that's where I spend most of my time. The Araknis switches are managed separately through their own interface.

Who This Is For (and When Consumer Gear Is Still Fine)

This kind of setup makes sense if you have a larger home, can run Ethernet to the ceilings, want PoE for access points and cameras, and like the idea of keeping your smart TVs and IoT devices on their own network. It's especially worth considering during new construction or a remodel, when pulling cable is easy. If you live in an apartment or a smaller home, can't run cable, or just want something that works from a phone app in ten minutes, a good mesh system from eero, Orbi, or similar is still a great choice.

Honestly, it's what I'd recommend to most people. This setup is more money and more learning. The payoff is control, coverage, and a wired backbone that will last for years.

The Cost Tally

Item 

Qty 

Price

Ubiquiti UniFi Dream Machine Pro (UDM‑Pro) 

1 

$430

Ubiquiti U7 Pro Access Point 

4 × $190 

$760

Araknis 320 Series L2 Managed Gigabit Switch with Full PoE+, 16 + 2 Rear Ports 

1 

$1,500

Araknis 320 Series L2 Managed Gigabit Switch, 16 + 2 Rear Ports 

1 

$600

Total 

 

$3,290

That doesn't include the cable, the rack, patch panels, or installation labor. In a new build, those can add up just as quickly. In my home the network part of the build cost almost $9,000. That included all wiring, trim, and labor. Note - the labor included installing cameras that I provided. 

 

Download Episode #1273

Reader Comments

There are no comments for this journal entry. To create a new comment, use the form below.

PostPost a New Comment

Enter your information below to add a new comment.

My response is on my own website »
Author Email (optional):
Author URL (optional):
Post:
 
Some HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <code> <em> <i> <strike> <strong>