Advanced lesson
Practice Lab: Build and Verify a Small Office Network
Put addressing, VLANs, PoE and testing together in a small lab with a clear finish line.
Reviewed September 2026 · 3 minute read
The assignment
A training office needs staff laptops, one printer, guest Wi-Fi and one wired access point. Staff may print. Guests may reach the internet but must not reach the printer, staff devices or administration. An administrator may manage the equipment.
Use an isolated lab, suitable gateway and managed switch, compatible AP and power, and two test clients. A paper plan can be completed without equipment. Back up the lab configuration and keep a working administration path.
Write the access plan first
| Source | Destination | Expected result |
|---|---|---|
| Staff client | Approved printer service | Allowed and printing verified. |
| Guest client | Approved internet test service | Allowed and actual task verified. |
| Guest client | Staff client / printer / administration | Blocked for the defined test paths. |
| Authorized administrator | Equipment management | Allowed through the approved management path. |
Add DHCP, DNS and any discovery requirements. Internet-only guests may still need access to an approved resolver or gateway service. Define IPv6 behavior too if enabled.
Build in small steps
- Draw the physical links and check PoE compatibility and budget.
- Use the address-planning exercise to allocate nonoverlapping lab subnets, gateways and pools.
- Configure the gateway networks and required services.
- Map endpoint ports and AP networks to the intended VLANs. Check tagged uplinks and native traffic at both ends.
- Apply the intended access policy at the actual routing/enforcement point. Preserve administration access.
- Test one group at a time, then test expected simultaneous use. Save results and the final configuration.
Use current product instructions for exact menus. Read the UniFi segmentation lesson before applying rules.
The guest laptop gets a staff address
Worked example
Internet works, but the acceptance test fails
The guest client receives an address from the staff pool. A working internet page does not make the lab successful. Check the selected Wi-Fi network, its VLAN assignment, the AP uplink and the DHCP path. Make one controlled correction, reconnect the test client as appropriate and repeat the whole access matrix.
What evidence finishes the lab?
The physical diagram, address plan, power check, completed allowed/blocked matrix, application results, saved configuration and any unresolved limits. Passing three lesson questions is not a substitute for these observations.
Put it into practice
Check what you learned
Choose an answer for each question, then check your understanding. Your answers stay in this browser.
Read the answers and explanations
- No; the prohibited-access requirement failed.
Acceptance includes what must be blocked as well as what must work.
- Check Wi-Fi/VLAN mapping, uplinks and the DHCP path.
The unexpected address directs attention to network assignment and service delivery.
- The plan, configuration, measured checks and open issues.
The handoff should let another person understand and verify the lab.
Sources and further reading
- Ubiquiti: creating virtual networks
Use this for current UniFi implementation details after making the address and access plan.
- Ubiquiti: PoE availability and modes
Shows why both the individual port and the switch power budget matter. Check your exact models.
- Microsoft: how DHCP supplies network settings
Explains address leases, reservations and the settings a DHCP server supplies.
Keep your momentum
Ready for the next step?
If you can explain the example and your answer, try the next lesson. Revisit the feedback whenever you need it.
FryAVSI · Updated September 10, 2026
Reference this lesson or use a section’s direct link for a particular chart or example. How to cite an example.
FryAVSI · Northeast Ohio and beyond
Turn the learning into a working result.
Share your site, the challenge and the result you need. Our team can help plan or carry out the work.