A 2-tier network architecture simplifies network design by combining the Core and Distribution layers into a single layer while keeping the Access layer separate. This approach is suitable for small to medium-sized networks, offering a balance between performance, scalability, and manageability. This guide will help you design a 2-tier network using Ubiquiti’s UniFi equipment.


Core-Distribution Layer

Purpose

The Core-Distribution Layer merges the functions of the traditional Core and Distribution layers, providing high-speed and reliable connectivity, policy enforcement, and routing between different segments of the network.


Key Features

  • High Speed: Utilizes high-speed switches.
  • High Availability: Incorporates redundancy and fault tolerance.
  • Policy Enforcement: Implements access control lists (ACLs) and quality of service (QoS).
  • Scalability: Capable of handling increased traffic loads and future growth.

Design Considerations

  • Redundancy: Use redundant hardware and links to avoid single points of failure.
  • High Bandwidth: Employ high-capacity links, such as 10 Gbps or higher.
  • Routing and Switching: Implement robust routing and switching protocols.
  • Security: Enforce security policies and VLAN segmentation.

Example Configuration 

core_distribution_layer:
  devices:
    - type: core_distribution_switch
      model: UniFi Switch Aggregation (USW-Aggregation)
      interfaces:
        - type: fiber_optic
          speed: 10Gbps
          redundancy: yes
    - type: core_distribution_router
      model: UniFi Dream Machine Pro Max (UDM-Pro-Max)
      protocols:
        - OSPF
        - BGP
      features:
        - ACLs
        - QoS
        - VLAN segmentation

Specifications

UniFi Switch Aggregation (USW-Aggregation)

  • Interfaces: 8x 10G SFP+ ports
  • Performance: 160 Gbps switching capacity, 80 Gbps non-blocking throughput
  • More details

UniFi Dream Machine Pro Max (UDM-Pro-Max)

  • Interfaces: 8x 2.5G RJ45 ports, 1x 10G SFP+ WAN port, 2x 10G SFP+ LAN ports
  • Features: Integrated security gateway, high-performance router, network video recorder, and Wi-Fi controller
  • More details

Access Layer

Purpose

The Access Layer is the edge of the network where end devices such as computers, printers, and IoT devices connect. It provides the first level of security and control.


Key Features

  • Device Connectivity: Connects end user devices to the network.
  • Port Security: Controls device access and ensures network security.
  • Power over Ethernet (PoE): Powers devices like IP phones and wireless access points.
  • Scalability: Supports a large number of connected devices.

Design Considerations

  • Port Density: Ensure sufficient ports to support all end devices.
  • Security: Implement port security and authentication protocols (e.g., 802.1X).
  • PoE: Utilize PoE for devices requiring power through Ethernet.
  • Manageability: Use managed switches for better control and monitoring.

Example Configuration 

access_layer:
  devices:
    - type: access_switch
      model: UniFi Switch Pro 24 PoE (USW-Pro-24-POE, 400W)
      interfaces:
        - type: copper
          speed: 1Gbps
          PoE: yes
          port_security: 802.1X
      features:
        - port_security
        - VLAN support
        - PoE
    - type: wireless_access_point
      model: UniFi U7 Pro (U7-Pro)
      connectivity:
        - type: Wi-Fi
          speed: 2Gbps
          PoE: yes

Specifications

UniFi Switch Pro 24 PoE (USW-Pro-24-POE, 400W)

  • Interfaces: 24x RJ45 Gigabit Ethernet ports, 2x 10G SFP+ uplink ports
  • PoE: 24x PoE+ (802.3at) ports, 400W total PoE budget
  • More details

UniFi U7 Pro (U7-Pro)

  • Interfaces: 1x 2.5GbE RJ45 port
  • Wi-Fi Standards: 802.11a/b/g/n/ac/ax/be (Wi-Fi 6/6E, Wi-Fi 7)
  • Power Method: PoE+
  • Throughput Rates: Up to 2.4 Gbps on 6 GHz, up to 4.3 Gbps on 5 GHz, up to 688 Mbps on 2.4 GHz
  • More details

Best Practices for 2-Tier Network Design

  1. Redundancy and High Availability: Ensure that each layer has redundancy to prevent any single point of failure. Use technologies like link aggregation, redundant power supplies, and dual-homed devices.

  2. Scalability: Design your network with future growth in mind. Ensure that each layer can be expanded without significant redesign.

  3. Security: Implement robust security measures at each layer. Use firewalls, intrusion detection/prevention systems (IDS/IPS), and network access control (NAC) to protect your network.

  4. Performance: Use high-performance switches and routers to minimize latency and ensure fast data processing. Optimize routing protocols and use QoS to prioritize critical traffic.

  5. Management and Monitoring: Implement comprehensive network management and monitoring tools to oversee the network’s health and performance. Use the UniFi Controller for centralized management and logging for proactive issue resolution.

  6. Documentation: Keep detailed documentation of your network design, including device configurations, IP address schemes, and network diagrams. This will be invaluable for troubleshooting and future upgrades.


Conclusion

Designing a 2-tier network infrastructure using UniFi equipment involves careful planning and consideration of each layer’s unique requirements. By following the guidelines and best practices outlined in this guide, you can create a network that is robust, scalable, and secure, ensuring smooth and efficient operations for your organization.

Edit this page

Last updated 22 Sep 2024, 12:15 CEST . history