UniFi Network Design Guide for Lebanon — Controller, APs, Switches & Gateway
The UniFi Ecosystem: One Platform, Complete Network
Ubiquiti's UniFi platform provides a unified management experience for gateways, switches, access points, and cameras. Every UniFi device is managed through the UniFi Network Application, giving network administrators a single dashboard for their entire infrastructure. For Lebanese businesses, hotels, restaurants, and tech-savvy homeowners, UniFi offers the fastest path to a professional network without the complexity of vendor-mixed environments.
This guide covers how to design a complete UniFi network in Lebanon, from selecting the gateway to placing access points and sizing switches.
Choosing Your UniFi Gateway
The gateway is the brain of the UniFi network — it handles routing, firewall, VPN, and runs the UniFi Network Application (controller). Options available in Lebanon:
UniFi Dream Machine Pro Max (UDM-Pro Max)
The flagship UniFi gateway. Integrates a 10G router, built-in UniFi controller, UniFi Protect NVR (with bay for a 3.5-inch HDD for CCTV recording), and IDS/IPS threat management. Two 10G SFP+ WAN ports and an 8-port Gigabit PoE switch built in. Best for: medium to large offices (50-200 users), hotels, and installations combining networking with UniFi Protect cameras.
UniFi Cloud Gateway Ultra (UCG Ultra)
A compact, affordable gateway running the full UniFi Network Application. Features a 2.5G WAN port and Gigabit LAN port. No built-in PoE or NVR — a pure gateway and controller. Best for: small offices (10-30 users), home networks, and sites where you need the UniFi controller without the UDM-Pro's price. Connect an external PoE switch for AP power.
Self-Hosted Controller
Run the UniFi Network Application on a Linux server, Docker container, or cloud VM. This option separates the controller from the gateway, allowing you to use any router (including MikroTik) as the gateway while managing UniFi APs and switches through the software controller. Best for: existing networks adding UniFi APs, multi-site management from a central location, or users who prefer MikroTik routing with UniFi wireless.
Access Point Selection and Placement
Choosing the Right AP Model
Match the AP model to your environment and client density:
| Model | WiFi Standard | Client Capacity | Best For |
|---|---|---|---|
| U7 Pro | WiFi 7 (tri-band) | 300+ | High-density offices, conference rooms |
| U7 LR | WiFi 7 (tri-band) | 300+ | Large open areas, warehouses |
| U7 Outdoor | WiFi 6 | 250+ | Outdoor patios, pool areas, parking |
| U6 Pro | WiFi 6 | 200+ | Budget offices, retail stores |
| U7 Lite | WiFi 7 | 150+ | Budget coverage, small rooms |
AP Placement Guidelines for Lebanese Buildings
Lebanese buildings present unique challenges for WiFi coverage:
- Concrete walls: Standard Lebanese construction uses reinforced concrete that attenuates WiFi signals by 12-18 dB per wall. Plan one AP per room or per two rooms with standard drywall partitions.
- High ceilings: Many Lebanese offices and commercial spaces have 3-4 meter ceilings. Ceiling-mount APs like the U7 Pro work best — their antenna pattern radiates downward in a cone shape.
- Coverage per AP: In open-plan offices, one AP covers 75-100 square meters. In concrete-walled offices, coverage drops to 30-50 square meters. Always over-provision slightly — adding APs later requires new cable runs.
- Minimum separation: Keep APs at least 8-10 meters apart to prevent co-channel interference. The UniFi controller automatically manages channel assignment and power levels across all APs.
Mounting Options
- Ceiling mount: Preferred for most indoor installations. Use the included mounting bracket. Run Ethernet through the ceiling void and drop to the AP location.
- Wall mount: For spaces where ceiling access is not available. Mount at 2.5-3 meter height for optimal coverage angle.
- In-wall: UniFi In-Wall APs replace standard wall plates and provide WiFi plus wired Ethernet ports in a single unit. Ideal for hotel rooms.
Switch Architecture
Distribution Layer
The distribution switch connects to the gateway and aggregates access-layer switches. For most Lebanese installations:
- USW-Pro-24-PoE: 24 Gigabit PoE ports + 2x 10G SFP+. Powers up to 24 APs and provides 10G uplink to the gateway. Sufficient for single-floor offices up to 50 users.
- USW-Pro-48-PoE Gen2: 48 PoE ports for larger deployments. Used as the distribution switch for multi-floor offices or hotels where many APs and cameras connect.
Access Layer
Access switches connect directly to APs, cameras, and workstations on each floor:
- USW-Pro-8-PoE: 8 PoE ports + 2 SFP+. For small clusters of devices — a hotel wing, a conference room, or a retail store section.
- USW-Pro-Max-16-PoE: 16 PoE ports with 2.5G capability. For medium-density areas with high-throughput devices.
VLAN Design
Proper VLAN segmentation improves security and performance. A typical UniFi VLAN design for a Lebanese office:
- VLAN 10 - Corporate: Employee workstations and laptops. Full internet access with content filtering.
- VLAN 20 - Guest WiFi: Isolated guest network with captive portal, bandwidth limits, and no access to internal resources.
- VLAN 30 - VoIP: IP phones with QoS priority. Ensures call quality even during heavy downloads.
- VLAN 40 - CCTV: Security cameras isolated from all other networks. Accessible only from the NVR and designated management stations.
- VLAN 50 - IoT: Smart devices, printers, and sensors that should not have internet access or access to corporate resources.
UniFi Controller makes VLAN creation simple — define networks in Settings > Networks, create WiFi networks mapped to VLANs, and assign port profiles to switch ports. No CLI needed.
Guest Network and Captive Portal
For hotels, restaurants, and co-working spaces in Lebanon, a guest network with a captive portal is essential:
- Create a separate VLAN and WiFi SSID for guests
- Enable the UniFi Hotspot Portal with a custom splash page showing your brand, WiFi terms, and optional password
- Set bandwidth limits per guest (3-5 Mbps is typical for comfortable browsing)
- Enable client isolation to prevent guests from seeing each other's devices
- Configure automatic session duration (2-4 hours) with optional re-authentication
Sample Design: Medium Office (50 Users)
Floor area: 400 square meters across two floors in a Beirut office building.
- Gateway: UCG Ultra — handles routing and controller for the entire network.
- Distribution switch: USW-Pro-24-PoE — powers all APs and connects to the gateway via 10G SFP+.
- Access points: 6x U7 Pro — 3 per floor for full coverage through concrete partition walls.
- VLANs: Corporate, Guest, VoIP, Printers (4 VLANs).
- Total PoE draw: 6 APs x 15W = 90W — well within the USW-Pro-24's 400W budget.
Where to Buy UniFi Equipment in Lebanon
HI-GAIN is the authorized Ubiquiti distributor in Lebanon. We stock the complete UniFi lineup — gateways, switches, access points, and cameras. Visit our UniFi product page or check availability. For network design assistance, call +961 3 337 666.