Setting up a reliable network for a small office does not require enterprise-level budget or a dedicated IT team. With the right equipment choices and a structured approach, a 10 to 50 employee office can have a professional network that is secure, manageable and scalable.
Hardware Selection
Router: MikroTik hEX S (around 80 EUR) handles routing, firewall, VPN and DHCP for most small offices. Switch: TP-Link TL-SG108E (35 EUR) is a smart managed switch supporting VLAN tagging — avoid unmanaged switches. Wi-Fi: Ubiquiti UniFi U6 Lite (120 EUR) delivers excellent coverage and throughput, and integrates with the UniFi cloud management platform for centralized control.
VLAN Segmentation
Divide your network into at least three segments: production (workstations and printers), guest Wi-Fi, and IoT devices (smart TVs, IP cameras). VLANs prevent a guest connecting to your Wi-Fi from accessing your internal file server. They also contain IoT devices, which are frequently compromised and should never have access to production systems.
VPN for Remote Workers
WireGuard is the modern choice: fast, simple to configure and supported natively on MikroTik. Set up a site-to-site tunnel if you have a second office, and user tunnels for remote workers. Split tunneling sends only company traffic through the VPN — reducing latency for general browsing while protecting internal resources.
DNS and DHCP
Run your own DNS resolver (MikroTik has one built in). This gives you control over name resolution, enables DNS-based ad blocking for the whole network, and provides visibility into DNS queries for security monitoring. Use static DHCP leases for servers and printers.
Monitoring
Even a small office benefits from basic monitoring. The Dude (MikroTik, free) maps your network and alerts on device disconnection. For more capability, Zabbix Community edition supports up to 100 hosts at no cost. Configure email or Telegram alerts for router reboots and switch port failures.
Conclusion
E24 BALTIC designs and deploys office networks across Latvia and the Baltics. We handle cable planning, equipment procurement, configuration and handover documentation. Contact us for a free site assessment.
