Home Network & WiFi
Installation in Cockfosters EN4

Yes — this is the core of how I design networks. I put your main devices, work devices, smart-home/IoT gear, CCTV and guests on separate VLANs, then set firewall rules controlling exactly what each can reach. It means a cheap smart plug or camera can never see your laptops, and guests never touch your LAN. Done properly with a managed gateway and switch (UniFi or Omada), it costs nothing extra when it's designed in from the start.

Cheap IoT devices, budget cameras and smart bulbs are the weakest security link in most homes — they rarely get firmware updates and are a well-known entry point for attackers. Putting them on an isolated VLAN with firewall rules means that if one is ever compromised, the damage stops at the VLAN boundary and can't spread to your PCs, phones or work files. It's the biggest security gap in most Cockfosters homes, and it's invisible until it isn't.

Wired backhaul wherever the cabling allows — each access point hardwired on Cat6a back to the switch. Wireless mesh repeats the signal and roughly halves throughput at every hop, which is why mesh far-rooms feel slow. Wired APs give you full speed in every room, clean fast roaming on one SSID, and no compounding latency. Mesh is my fallback only where a cable genuinely can't be run.

Yes — Cat6a plus 2.5G/10G switching gives you multi-gig between your own devices, which matters for NAS access, backups, large file transfers and multiple 4K streams regardless of your broadband. Your internet speed only caps traffic going out to the internet; a fast, well-built LAN speeds up everything happening inside your home. When you do upgrade to full-fibre, the network's already ready for it.

Both — I design around your needs and budget. UniFi has the more polished ecosystem, superb dashboards and huge community support; Omada delivers the same managed-network fundamentals (VLANs, firewall, PoE, single controller) at a lower price point. For a security-focused segmented network, either does the job well. I'll recommend the right fit rather than pushing one brand.

Yes. Most ISP all-in-one routers are weak at segmentation and firewalling. I put the ISP unit into bridge or modem-only mode so it just passes the connection through, then run a proper gateway that handles routing, firewall rules, VLANs and VPN. You keep your existing broadband and phone service — you just get a far more capable and secure core.

Yes — a separate guest network on its own VLAN with client isolation, so visitors get internet only and can never see your computers, NAS, printers or smart-home gear. It's ideal for guests, holiday-let tenants or tradespeople, and you can share it with a simple password or QR code without exposing anything on your main network.

Every Cat6 run is tested for connectivity, terminated to a labelled patch panel, and I hand over a network diagram showing the VLAN layout and what's plugged where. As a qualified electrician I also install any power and containment to regulations. It means the install is verified working to spec, and any future changes are quick because everything is labelled and documented.

Yes — cameras and the NVR go on their own PoE camera VLAN, powered over the same Cat6a that carries their data, so there are no separate power supplies at each camera. The cameras record locally to the NVR and are firewalled off from the internet and your main LAN, which is both more secure and more reliable. I can integrate UniFi Protect, Reolink, Hikvision and most ONVIF systems.

Yes — a VPN into your gateway lets you reach your home network, cameras and files from anywhere without exposing anything to the open internet. Modern gateways from UniFi and Omada support this natively, so you get encrypted remote access without opening risky ports. Handy for checking cameras, accessing your NAS, or working securely while away.

It's worth it if you have recent devices and want headroom. WiFi 6E adds the clean 6GHz band (far less congestion in a busy street like Cockfosters), and WiFi 7 adds even wider channels and higher throughput. To benefit you need compatible client devices and — most importantly — the access points wired back on Cat6a, otherwise the backhaul becomes the bottleneck. I'll advise honestly whether it's worth it for your kit.

Simple jobs start from £99 — a single access point install or swap-and-commission. A full design-led network with structured cabling, managed switching, access points and VLAN segmentation is quoted after a free site survey, because it depends on property size, number of drops and cable routes. Most homes are completed in one to three days with minimal disruption, and you get the written fixed quote before any work starts.

Yes — dropped video calls are usually a WiFi coverage or contention problem, not your broadband. A wired connection to your home-office desk, or a WiFi 6E/7 access point on wired backhaul nearby, gives your work devices a stable, low-latency link that doesn't compete with the rest of the house. Most people working from home in Cockfosters notice the difference immediately — no more freezing mid-meeting.

Yes. Lag and jitter come from congested WiFi and long mesh hops. A wired Cat6a run to the console or gaming PC gives the lowest, most consistent ping; where a cable isn't possible, a WiFi 6E access point on the clean 6GHz band keeps the gaming device off the congested 2.4 and 5GHz bands. On a managed gateway I can also prioritise gaming traffic so a big download never spikes your ping mid-match.

Yes — buffering is almost always a coverage or capacity issue. With WiFi 6E/7 access points wired back on Cat6a, the surveyed rooms can receive appropriately planned coverage, with capacity checked against the expected streaming load. For the main TV I'll usually run a dedicated wired point so the main stream does not have to compete for local WiFi airtime.