Smart Home Networking Basics
Wi-Fi, VLANs, PoE and mesh — the network that determines whether a smart home actually works.
The essentials
- Wired backbone with PoE APs beats mesh in villas larger than 200 m²
- Three VLANs minimum: personal, IoT, guest
- Firewall isolates IoT from personal — a hacked bulb can't reach your laptop
- One SSID per band + one IoT SSID keeps device onboarding predictable
Learning objectives
Learning objectives
- Distinguish routers, switches, and access points
- Design a three-VLAN home network
- Choose between mesh and wired-backbone Wi-Fi
- Recognise common villa Wi-Fi failure modes
Lesson sections
Lesson sections
How it works
The four network layers
Modem (ISP) → router (firewall) → managed switch → PoE access points.
VLANs explained
A VLAN separates traffic on the same physical switch. Three VLANs — personal, IoT, guest — is the residential norm.
Wi-Fi bands
2.4 GHz reaches far but is crowded. 5 GHz is fast but short-range. 6 GHz is fast, clean and short-range.
Mesh vs wired backbone
Mesh helps in flats. Villas over 200 m² need wired APs — mesh backhaul over Wi-Fi collapses at scale.
Coverage patterns
Plan one AP per 90 m² on a single floor. Metal, concrete and marble kill signal — measure, don't guess.
Visual explainers
Home network diagram
Layered from ISP to APs, with VLAN colouring.
Coverage heat map
Signal strength overlaid on a villa floor plan — hot green vs weak red.
Frequency chart
2.4 vs 5 vs 6 GHz — range and interference.
Key terms
SSID
The Wi-Fi network name a device sees.
VLAN
A logical network segment on the same physical switch.
PoE
Power over Ethernet — a single cable carries data and power to an AP or camera.
Access point (AP)
A Wi-Fi radio wired back to the switch.
Mini checklist
Mini checklist
- Design at least three VLANs before installing devices
- Wire APs with PoE where possible
- Verify -65 dBm signal or better in every room
- Segment guest traffic to prevent lateral movement
- Relying on the ISP router in a large villa
- Running everything on one flat SSID with no VLANs
- Mesh in a metal-and-marble tower — signal dies
- Skipping cable — Wi-Fi backhaul is a bandwidth cliff
Knowledge check
Knowledge check
Frequently asked questions
Why isolate IoT devices on their own VLAN?
So a compromised or vulnerable device cannot reach personal devices like laptops or NAS storage.
Why does mesh struggle in a villa over 200 m²?
Because Wi-Fi backhaul is shared with client traffic and drops quickly through walls; wired PoE APs preserve full bandwidth.
What signal strength is a reasonable target in every room?
-65 dBm or better.
Frequently asked questions
Frequently asked questions
Why isolate IoT devices on their own VLAN?
So a compromised or vulnerable device cannot reach personal devices like laptops or NAS storage.
Why does mesh struggle in a villa over 200 m²?
Because Wi-Fi backhaul is shared with client traffic and drops quickly through walls; wired PoE APs preserve full bandwidth.
What signal strength is a reasonable target in every room?
-65 dBm or better.
Smart Citizens University. "Smart Home Networking Basics." Smart Citizens, 2026-07-09. https://ai.smartcitizens.ae/academy/smart-home-networking-basics.
Smart Citizens University (2026). Smart Home Networking Basics. Smart Citizens. Retrieved 2026-07-23, from https://ai.smartcitizens.ae/academy/smart-home-networking-basics
Design your smart environment with Smart Citizens
Talk to Smart Citizens engineers for a bespoke design, budget estimate, and rollout roadmap.