MSP Network Equipment Checklist: Every Switch, Router, and Firewall You Need by Client Size

The complete network equipment checklist for MSPs. Organized by client size (5, 25, 50, 100, 250+ users) with specific switch, router, firewall, and wireless recommendations. Copy this checklist for your next deployment.

Topics: MSP, Networking, Cisco, FortiGate, Switches, Firewalls

Every MSP client site needs the right networking equipment. Too little and the network becomes a bottleneck. Too much and you waste the client's budget on features they will never use.

This checklist gives you the exact networking equipment for every client size — from a 5-person office to a 250-plus user enterprise. Use it as a template for every new client onboarding and network refresh.

The Universal Network Requirements

Before we size by client count, every client network needs these basics:

  • A firewall/router — The gateway between the client and the internet. Non-negotiable
  • A managed switch — VLANs, PoE, and remote management. Never deploy unmanaged switches
  • Wireless access points — One AP per 25-30 users or per 2,500 square feet, whichever comes first
  • A UPS on network equipment — Switches and firewalls draw little power but need protection from surges and outages
  • Structured cabling — Cat6a minimum for all new runs. Never reuse old Cat5 cabling

Client Size: 5-10 Users (Micro Office)

Typical environment: Single room or small suite, 1-3 devices per person, basic internet needs

Equipment List

EquipmentRecommended ModelQtyEst. Cost
FirewallFortiGate 40F1350-500
SwitchCisco Catalyst 1000-8P (8-port PoE)1400-600
Wireless APAruba Instant On AP22 or Ubiquiti U6 Lite1100-200
UPSAPC Smart-UPS 750VA1350-500
Patch panel12-port Cat6a140-60
Total1,240-1,860

Key Decisions

  • Single switch handles everything — no need for stacking or uplinks
  • Firewall handles routing, VPN, and DHCP — no separate router needed
  • One AP covers the entire space
  • Run all network gear on a single small UPS

Client Size: 25 Users (Small Business)

Typical environment: 2-4 rooms across one floor, VoIP phones, shared printers, possibly a server

Equipment List

EquipmentRecommended ModelQtyEst. Cost
FirewallFortiGate 60F1600-900
Core switchCisco Catalyst 1000-24P (24-port PoE+)1800-1,200
Wireless APAruba Instant On AP252300-500
UPS (network)APC Smart-UPS 1000VA1500-700
Patch panel24-port Cat6a160-80
Cable management1U horizontal manager240-60
Total2,300-3,440

Key Decisions

  • 24-port PoE switch powers phones and APs without separate power adapters
  • FortiGate 60F handles up to 50 concurrent VPN users for remote access
  • Two APs provide coverage and redundancy — if one fails, the office still has wireless
  • VLANs: Data, Voice, Guest (minimum 3 VLANs on every network)

Client Size: 50 Users (Growing Business)

Typical environment: Full floor or small building, multiple departments, server room, security cameras

Equipment List

EquipmentRecommended ModelQtyEst. Cost
FirewallFortiGate 60F or 80F1600-1,200
Core switchCisco Catalyst 9200L-24P or Aruba CX 6100 48G12,500-4,000
Access switchCisco Catalyst 1000-24P1-2800-2,400
Wireless APAruba Instant On AP25 or Cisco Meraki MR363-4450-2,800
UPS (network)APC Smart-UPS 1500VA1600-900
Patch panels24-port Cat6a2-3120-240
SFP+ modules10G SR (for switch stacking/uplinks)2-4100-400
Total5,170-11,940

Key Decisions

  • Core switch at Layer 3 handles inter-VLAN routing (takes load off the firewall)
  • Access switches cascade from core via 10G SFP+ uplinks
  • 4+ VLANs: Data, Voice, Guest, Cameras, Management
  • Consider a separate management VLAN for switches, APs, and out-of-band access
  • Redundant internet (dual ISP) becomes worthwhile at this size

Client Size: 100 Users (Mid-Market)

Typical environment: Multi-floor building, dedicated server room or small data center, multiple departments

Equipment List

EquipmentRecommended ModelQtyEst. Cost
FirewallFortiGate 100F11,500-2,500
Core switchCisco Catalyst 9300-24T or Aruba CX 6300M14,000-7,000
Access switchesCisco Catalyst 9200-48P PoE+2-46,000-16,000
Wireless APsCisco Meraki MR36 or Aruba AP-5356-82,400-5,600
Wireless controllerAruba Mobility Controller or Meraki cloud10-3,000
UPS (network)APC Smart-UPS 3000VA 2U11,200-1,800
Patch panels48-port Cat6a3-4240-400
SFP+ modules10G SR8-12400-1,200
Total15,740-37,500

Key Decisions

  • Dedicated core switch with 10G uplinks to each floor/closet
  • PoE budget becomes critical — calculate total watts for APs, phones, and cameras per switch
  • Wireless controller (physical or cloud) is necessary for seamless roaming across 6-plus APs
  • Dual ISP with automatic failover on the firewall
  • 6+ VLANs: Data, Voice, Guest, Cameras, IoT, Management, Server/DMZ

Client Size: 250+ Users (Enterprise)

Typical environment: Multi-building campus or multi-floor headquarters, dedicated IT staff, compliance requirements

Equipment List

EquipmentRecommended ModelQtyEst. Cost
Firewall (HA pair)FortiGate 200F or Palo Alto PA-85028,000-20,000
Core switches (stacked)Cisco Catalyst 9500-24Y4C216,000-30,000
Distribution switchesCisco Catalyst 9300-48P4-816,000-48,000
Access switchesCisco Catalyst 9200-48P6-1218,000-48,000
Wireless APsCisco Catalyst 9130AX or Aruba AP-63512-2512,000-37,500
Wireless controllerCisco C9800-L or Aruba 72101-25,000-15,000
UPS (network per closet)APC Smart-UPS 3000VA3-63,600-10,800
Patch panels48-port Cat6a8-15640-1,500
SFP+/SFP28 modules10G/25G20-402,000-8,000
Total81,240-218,800

Key Decisions

  • High-availability firewall pair — active/passive failover with zero downtime
  • Core switch redundancy — stacked pair with cross-links
  • 25G or 40G uplinks between core and distribution
  • NAC (Network Access Control) via 802.1X on all switch ports
  • Dedicated network monitoring (SNMP, NetFlow, syslog)

Network Deployment Best Practices for MSPs

Cable Management

  • Label every cable on both ends (label maker or pre-printed labels)
  • Use cable management panels between every patch panel and switch
  • Color-code cables by VLAN or function (blue for data, yellow for voice, red for management)

Documentation

Document these for every client site:

  • Network topology diagram (logical and physical)
  • VLAN table (ID, name, subnet, DHCP range)
  • Switch port assignments
  • Firewall rules summary
  • Wireless SSID mapping
  • IP address plan
  • Equipment serial numbers and warranty dates

Spare Equipment

For MSPs managing 10 plus client networks, keep these network spares:

  • 1x 24-port PoE switch (your standard access model)
  • 2x SFP+ 10G SR modules
  • 1x box of Cat6a cables (assorted lengths)
  • 1x APC replacement battery cartridge
  • 1x access point (your standard model)

Summary Checklist by Client Size

Component5-10 Users25 Users50 Users100 Users250+ Users
FirewallFG-40FFG-60FFG-60F/80FFG-100FFG-200F HA
Core switch8-port24-port9200L93009500 stack
Access switchesNoneNone1-22-46-12
Wireless APs123-46-812-25
UPS750VA1000VA1500VA3000VA3000VA x3-6
Total budget1.2-1.9K2.3-3.4K5.2-11.9K15.7-37.5K81-219K

Bookmark this page and use it as your go-to reference for every network deployment.

Browse 44,000 plus networking products at prodisknetwork.com — Cisco, Aruba, Juniper, Fortinet, and Ubiquiti switches, routers, firewalls, and access points in stock with same-day shipping. Volume pricing for MSPs on orders of 10 plus units.

Part of

Enterprise Networking Hub

View all 128 pages →

Network switches, routers, firewalls, NICs, SFP and QSFP transceivers, DAC cables, wireless access points.