How to Set Up a Reliable Office Network in Kampala
Complete office network setup guide for Kampala businesses. Server room design, switch selection, internet redundancy, WiFi, firewall, and full cost breakdown.
Key Takeaways for Decision-Makers:
- An unreliable network costs your business UGX 50,000–150,000 per employee per month in lost productivity
- You need two ISPs, not one — internet redundancy is the single cheapest investment in reliability
- Budget UGX 25M–55M for a complete 20-person office network in Kampala, depending on requirements
The Real Cost of an Unhealthy Network
When the network goes down in a Kampala office, work does not stop for everyone — only for the people who depend on it. That is everyone.
Let us do the math. A 20-person office where the average salary is UGX 2,000,000/month. If the network is down for 4 hours per week (which is conservative for many Kampala offices), that is:
- 20 employees × 4 hours × 4 weeks = 320 lost hours/month
- 320 hours × UGX 12,500/hour (average salary cost) = UGX 4,000,000/month
That is UGX 4M per month in wasted salary. Not counting missed deadlines, frustrated clients, or the overtime needed to catch up. Over a year, a mediocre network costs you UGX 48,000,000 in productivity alone.
A reliable office network costs UGX 25M–55M to set up. It pays for itself in less than a year. The "expensive" option is not the one with the best equipment — it is the one that works every day.
Planning Your Network
Before buying anything, answer these questions:
How Many Drops?
Count every device that needs a wired connection:
| Device Type | Count per Person | Notes |
|---|---|---|
| Workstation/laptop | 1 | Even if they use WiFi, a wired option matters |
| IP phone | 1 | If using VoIP |
| Printer/MFP | 1 per 5–8 people | Networked printer |
| CCTV camera | 1 per room/corridor | PoE powered |
| WiFi AP | 1 per 300 sqm | Ceiling mounted |
| Access control reader | 1 per door | If applicable |
For a 20-person office, plan for 24–32 data drops. Yes, more than the number of people. You always need more than you think.
What Category Cable?
Cat6a for everything. Cat6 is acceptable if budget is extremely tight, but Cat6a costs only 30–50% more per drop and doubles your bandwidth headroom. You will re-cable in 5 years with Cat6. You will not with Cat6a.
| Cable Category | Bandwidth | PoE Support | 10-Year Outlook |
|---|---|---|---|
| Cat5e | 100 MHz | Basic PoE | Obsolete |
| Cat6 | 250 MHz | PoE+ | Adequate |
| Cat6a | 500 MHz | PoE++ | Future-proof |
Where Do Drops Go?
Map every drop location on a floor plan. Mark:
- Desk positions (group drops in clusters of 4–6)
- AP mounting locations (ceiling, central to coverage area)
- Camera positions (entrances, corridors, exterior)
- Server room location (central, accessible, climate-controlled)
- Printer/copier locations
Server Room Setup Basics
Your server room is the heart of your network. Get this wrong and everything else fails.
Location
- Central to the office — minimizes cable run lengths
- Not above or below a bathroom — water damage risk
- Away from windows — dust, heat, and security
- Ground floor preferred — easier for cooling and cable entry
Cooling
The server room must stay below 25°C. Kampala ambient temperature is 25–30°C. Without cooling, a small server room hits 40°C within hours. Equipment fails, batteries degrade, and lifespan drops dramatically.
| Cooling Solution | Capacity | Cost (UGX) | Best For |
|---|---|---|---|
| Split AC unit (1.5HP) | 10–15 sqm room | 1,500,000–3,000,000 | Small server rooms |
| Split AC unit (2HP) | 15–25 sqm room | 2,500,000–4,500,000 | Medium server rooms |
| Precision cooling | 25+ sqm room | 8,000,000–20,000,000 | Large server rooms |
Set the AC to 20–22°C. The equipment generates heat, so the room temperature will stabilize higher than the AC setting. Keep the door closed when not in use.
Power
Your server room needs:
- Dedicated circuit from the building distribution board — not shared with lights or air conditioning
- Online double-conversion UPS sized for 15–20 minutes of runtime at full load
- Generator backup that starts automatically and transfers load within 30 seconds
- Surge protection on all incoming power lines
Rack and Cable Management
| Item | Specification | Cost (UGX) |
|---|---|---|
| 12U wall-mount rack | For small offices | 800,000–1,500,000 |
| 42U floor-standing rack | For medium/large offices | 2,500,000–5,000,000 |
| Cable management (per rack) | Vertical and horizontal organizers | 200,000–500,000 |
| Patch panels (24-port) | Cat6a keystone | 150,000–300,000 each |
| Blank panels | Rack aesthetics and airflow | 20,000–50,000 each |
| PDU (power distribution) | Metered, 8-outlet | 300,000–800,000 |
Label everything. Every cable, every port, every device. Use a label maker, not masking tape. When something breaks at 4 PM on a Friday, you will thank yourself.
Switch and Router Selection
Core Switch
Your core switch connects everything. It needs to be managed (not unmanaged) for VLANs, monitoring, and troubleshooting.
| Port Count | PoE Budget | Speed | Price Range (UGX) |
|---|---|---|---|
| 24-port gigabit | 190W (PoE+) | 1G | 2,000,000–4,000,000 |
| 24-port gigabit | 370W (PoE++) | 1G | 3,500,000–6,000,000 |
| 48-port gigabit | 370W (PoE++) | 1G | 5,000,000–9,000,000 |
| 24-port SFP+ | N/A | 10G | 4,000,000–8,000,000 |
PoE budget matters. If you are powering cameras, APs, and phones off PoE switches, total PoE power must exceed total device power draw. A 48-port switch with 370W PoE budget can power 18 cameras at 20W each — not 48.
Router/Firewall
Your router handles internet routing, VPN, firewall rules, and sometimes intrusion detection. Do not use a consumer router for a business network.
| Feature | Consumer Router | Business Router |
|---|---|---|
| Throughput | 100–300 Mbps | 1–10 Gbps |
| VPN support | Basic | Full site-to-site and client |
| Firewall rules | Limited | Granular, application-aware |
| VLAN support | None | Full |
| Uptime reliability | Hours | 99.99% |
| Price (UGX) | 200,000–500,000 | 3,000,000–12,000,000 |
Brands available in Uganda: MikroTik (excellent value, widely supported locally), Ubiquiti UniFi (great for WiFi-integrated setups), Fortinet (strong security features), Cisco (enterprise standard, expensive).
Internet Redundancy: Why You Need Two ISPs
This is the single most impactful reliability investment you can make.
The Math
A single ISP connection fails an average of 4–8 hours per month in Kampala. At UGX 12,500/hour per employee (from our earlier calculation), that is:
- 20 employees × 6 hours × UGX 12,500 = UGX 1,500,000/month in downtime costs
A second ISP connection costs UGX 300,000–600,000/month. The math is not close.
How to Set Up Redundancy
| Configuration | Complexity | Cost | Failover Speed |
|---|---|---|---|
| Manual switch | Low | UGX 500,000 | 5–15 minutes |
| Router-based failover | Medium | UGX 2,000,000–5,000,000 | 30–60 seconds |
| Dual-WAN load balancing | Medium | UGX 3,000,000–8,000,000 | Near-instant |
| SD-WAN | High | UGX 10,000,000–20,000,000 | Near-instant |
Router-based failover is the sweet spot for most Kampala offices. A MikroTik or Fortinet router with two WAN ports automatically switches to the backup ISP when the primary fails. Total equipment cost: UGX 3M–5M one-time plus the second ISP monthly fee.
Choose ISPs from different backbone providers. If your primary is Liquid (fiber), make your backup Smile, MTN, or Africell (4G/5G). Two connections on the same backbone fail together when the backbone goes down.
WiFi That Actually Works
The Problem With Consumer Routers
That TP-Link router in the corner is not a business WiFi solution. It handles 10–15 simultaneous connections before performance degrades. It has no VLAN support (guests and staff share the same network). It has no roaming support (your phone clings to the farthest AP instead of switching to the nearest one). And it dies when 20 people connect at once.
The Solution: Enterprise WiFi
Enterprise WiFi uses multiple access points connected to a central controller (hardware or cloud-based). The controller manages:
- Seamless roaming — your device switches APs as you walk without dropping connections
- Load balancing — devices distribute evenly across APs instead of all connecting to the nearest one
- VLAN segregation — guest WiFi, staff WiFi, and IoT devices on separate networks
- Central management — firmware updates, configuration changes, and monitoring from one dashboard
| AP Type | Coverage | Simultaneous Users | Price (UGX) |
|---|---|---|---|
| Indoor ceiling mount | 150–200 sqm | 50–100 | 800,000–1,500,000 |
| Indoor wall mount | 100–150 sqm | 30–60 | 500,000–1,000,000 |
| Outdoor rated | 300–500 sqm | 100–200 | 2,000,000–4,000,000 |
For a 20-person Kampala office in a typical 200–400 sqm space, you need 2–4 indoor APs plus a controller or cloud management subscription.
WiFi 6 (802.11ax) vs WiFi 5 (802.11ac)
WiFi 6 is the current standard. It handles more simultaneous devices, improves performance in congested environments, and uses power more efficiently for battery-powered devices. The price premium over WiFi 5 is 20–30%. Go with WiFi 6 — it is the standard for the next 5+ years.
Firewall and Security Basics
What a Firewall Does
A firewall sits between your network and the internet, controlling what traffic enters and exits. Without one, every device on your network is exposed to the internet directly.
Minimum Firewall Requirements
| Feature | Why It Matters |
|---|---|
| Stateful packet inspection | Blocks unauthorized inbound connections |
| VPN gateway | Secure remote access for staff working from home or field offices |
| Intrusion detection | Identifies and blocks attack patterns |
| Content filtering | Blocks malicious websites and reduces bandwidth waste |
| Application control | Prioritizes business apps over streaming and social media |
| Logging and reporting | Forensics when something goes wrong |
Network Segmentation
Separate your network into VLANs:
| VLAN | Purpose | Why |
|---|---|---|
| VLAN 10 | Staff devices | Primary workstations and laptops |
| VLAN 20 | VoIP phones | Prevents voice quality degradation |
| VLAN 30 | CCTV/cameras | Isolates security traffic |
| VLAN 40 | Guest WiFi | Prevents guest access to internal resources |
| VLAN 50 | IoT/printers | Limits exposure of less-secure devices |
VLANs cost nothing if your switch supports them. They take 30 minutes to configure. They prevent a compromised guest laptop from accessing your financial data.
Maintenance Schedule
Monthly
- Check UPS battery status and error logs
- Verify backup completion (do not assume — verify)
- Review firewall logs for unusual activity
- Test internet failover (pull the primary ISP cable, confirm backup activates)
- Clean air filters on server room AC
Quarterly
- Update firmware on switches, routers, and APs
- Review user accounts (remove former staff, update permissions)
- Test disaster recovery procedure (restore a backup to verify it works)
- Inspect cable infrastructure for damage or degradation
- Review bandwidth utilization trends
Annually
- Full network audit and documentation update
- UPS battery load test
- Hardware lifecycle review (identify equipment approaching end of life)
- Security penetration test (basic vulnerability scan at minimum)
- Review and update IT policies
Full Cost Breakdown: 20-Person Kampala Office
One-Time Setup Costs
| Item | Specification | Cost (UGX) |
|---|---|---|
| Structured cabling (28 drops) | Cat6a, Fluke certified | 8,400,000–14,000,000 |
| Patch panels and rack | 12U wall-mount, 2x 24-port panels | 1,200,000–2,300,000 |
| Core switch | 24-port managed PoE+ | 2,500,000–5,000,000 |
| Router/firewall | Dual-WAN, VPN, IDS | 3,500,000–8,000,000 |
| WiFi APs (3x) | WiFi 6 ceiling mount | 2,400,000–4,500,000 |
| UPS (3kVA online) | With VRLA batteries | 5,000,000–10,000,000 |
| Server room AC | 1.5HP split unit | 1,500,000–3,000,000 |
| Server room setup | Rack, PDU, cable management | 1,500,000–3,000,000 |
| CCTV (6 cameras + NVR) | Dome, PoE, 2TB storage | 6,000,000–12,000,000 |
| Installation and configuration | Professional setup | 2,000,000–4,000,000 |
| Total one-time | 34,000,000–65,800,000 |
Monthly Recurring Costs
| Item | Monthly Cost (UGX) |
|---|---|
| Primary ISP (30 Mbps fiber) | 600,000–1,200,000 |
| Backup ISP (4G LTE unlimited) | 200,000–400,000 |
| Cloud management/AP license | 100,000–300,000 |
| Managed IT support | 500,000–1,500,000 |
| Cloud backup | 200,000–500,000 |
| Total monthly | 1,600,000–3,900,000 |
Frequently Asked Questions
How long does it take to set up a 20-person office network? ▼
2–3 weeks from start to finish. Week 1 covers cabling installation (drops, patch panels, cable management). Week 2 covers equipment installation (switches, router, APs, server room setup). Week 3 covers configuration, testing, and documentation. If your office is already cabled and you are upgrading equipment, it takes 3–5 days. Rush jobs are possible but cost 30–50% more and usually skip important steps like documentation.
Can I use WiFi-only for a 20-person office? ▼
You can, but you should not. WiFi is convenient but inherently less reliable than wired connections. In a 20-person office, you will have 30–50 devices competing for wireless spectrum. During peak hours (morning email rush, video calls, file transfers), WiFi performance degrades noticeably. Use WiFi for laptops, tablets, and phones. Use wired connections for desktops, printers, servers, and any device that stays in one place. The wired connections are your backbone; WiFi is your convenience layer.
What is the most common network mistake in Kampala offices? ▼
Using a consumer router as the primary network device. A UGX 300,000 home router is not designed to handle 20+ simultaneous users, VPN connections, PoE devices, and VLAN segmentation. It works for the first month, then starts dropping connections, overheating, and needing daily reboots. The second most common mistake: no internet redundancy. A single ISP connection that fails for 4 hours costs more in lost productivity than a second connection costs for an entire year.
Do I need a server room if everything is in the cloud? ▼
Yes, but it can be smaller. Even with cloud-first operations, you need a secure space for your network equipment (switches, router, patch panels), UPS, and backup internet connections. You also need space for any local storage, the backup NAS, and the CCTV NVR. A 12U wall-mounted rack in a small, air-conditioned closet is sufficient for most 20-person offices. The closet needs a lock, a dedicated power circuit, and air conditioning. What you do not need is a full server room with racks of servers — unless you are running on-premise applications.
How often should I upgrade my office network equipment? ▼
Every 5–7 years for switches and routers, 7–10 years for cabling. Network equipment follows a predictable lifecycle. Switches and routers start showing their age around year 5 — firmware updates slow down, new features are not supported, and hardware failures become more frequent. Cat6a cabling lasts 15–20 years if installed properly. Budget for a hardware replacement fund of UGX 500,000–1,000,000/month so that a UGX 10M–15M upgrade in year 5 does not hit your budget as a surprise expense.
Ready to build a network that actually works? Request a Free Site Assessment and we will assess your office, design the right network, and provide a detailed quote with no hidden costs.
