MSP Network Equipment Checklist: Every Switch, Router, and Firewall You Need by Client Size
The complete network equipment checklist for MSPs. Organized by client size (5, 25, 50, 100, 250+ users) with specific switch, router, firewall, and wireless recommendations. Copy this checklist for your next deployment.
Every MSP client site needs the right networking equipment. Too little and the network becomes a bottleneck. Too much and you waste the client's budget on features they will never use.
This checklist gives you the exact networking equipment for every client size — from a 5-person office to a 250-plus user enterprise. Use it as a template for every new client onboarding and network refresh.
The Universal Network Requirements
Before we size by client count, every client network needs these basics:
- A firewall/router — The gateway between the client and the internet. Non-negotiable
- A managed switch — VLANs, PoE, and remote management. Never deploy unmanaged switches
- Wireless access points — One AP per 25-30 users or per 2,500 square feet, whichever comes first
- A UPS on network equipment — Switches and firewalls draw little power but need protection from surges and outages
- Structured cabling — Cat6a minimum for all new runs. Never reuse old Cat5 cabling
Client Size: 5-10 Users (Micro Office)
Typical environment: Single room or small suite, 1-3 devices per person, basic internet needs
Equipment List
| Equipment | Recommended Model | Qty | Est. Cost |
|---|---|---|---|
| Firewall | FortiGate 40F | 1 | 350-500 |
| Switch | Cisco Catalyst 1000-8P (8-port PoE) | 1 | 400-600 |
| Wireless AP | Aruba Instant On AP22 or Ubiquiti U6 Lite | 1 | 100-200 |
| UPS | APC Smart-UPS 750VA | 1 | 350-500 |
| Patch panel | 12-port Cat6a | 1 | 40-60 |
| Total | 1,240-1,860 |
Key Decisions
- Single switch handles everything — no need for stacking or uplinks
- Firewall handles routing, VPN, and DHCP — no separate router needed
- One AP covers the entire space
- Run all network gear on a single small UPS
Client Size: 25 Users (Small Business)
Typical environment: 2-4 rooms across one floor, VoIP phones, shared printers, possibly a server
Equipment List
| Equipment | Recommended Model | Qty | Est. Cost |
|---|---|---|---|
| Firewall | FortiGate 60F | 1 | 600-900 |
| Core switch | Cisco Catalyst 1000-24P (24-port PoE+) | 1 | 800-1,200 |
| Wireless AP | Aruba Instant On AP25 | 2 | 300-500 |
| UPS (network) | APC Smart-UPS 1000VA | 1 | 500-700 |
| Patch panel | 24-port Cat6a | 1 | 60-80 |
| Cable management | 1U horizontal manager | 2 | 40-60 |
| Total | 2,300-3,440 |
Key Decisions
- 24-port PoE switch powers phones and APs without separate power adapters
- FortiGate 60F handles up to 50 concurrent VPN users for remote access
- Two APs provide coverage and redundancy — if one fails, the office still has wireless
- VLANs: Data, Voice, Guest (minimum 3 VLANs on every network)
Client Size: 50 Users (Growing Business)
Typical environment: Full floor or small building, multiple departments, server room, security cameras
Equipment List
| Equipment | Recommended Model | Qty | Est. Cost |
|---|---|---|---|
| Firewall | FortiGate 60F or 80F | 1 | 600-1,200 |
| Core switch | Cisco Catalyst 9200L-24P or Aruba CX 6100 48G | 1 | 2,500-4,000 |
| Access switch | Cisco Catalyst 1000-24P | 1-2 | 800-2,400 |
| Wireless AP | Aruba Instant On AP25 or Cisco Meraki MR36 | 3-4 | 450-2,800 |
| UPS (network) | APC Smart-UPS 1500VA | 1 | 600-900 |
| Patch panels | 24-port Cat6a | 2-3 | 120-240 |
| SFP+ modules | 10G SR (for switch stacking/uplinks) | 2-4 | 100-400 |
| Total | 5,170-11,940 |
Key Decisions
- Core switch at Layer 3 handles inter-VLAN routing (takes load off the firewall)
- Access switches cascade from core via 10G SFP+ uplinks
- 4+ VLANs: Data, Voice, Guest, Cameras, Management
- Consider a separate management VLAN for switches, APs, and out-of-band access
- Redundant internet (dual ISP) becomes worthwhile at this size
Client Size: 100 Users (Mid-Market)
Typical environment: Multi-floor building, dedicated server room or small data center, multiple departments
Equipment List
| Equipment | Recommended Model | Qty | Est. Cost |
|---|---|---|---|
| Firewall | FortiGate 100F | 1 | 1,500-2,500 |
| Core switch | Cisco Catalyst 9300-24T or Aruba CX 6300M | 1 | 4,000-7,000 |
| Access switches | Cisco Catalyst 9200-48P PoE+ | 2-4 | 6,000-16,000 |
| Wireless APs | Cisco Meraki MR36 or Aruba AP-535 | 6-8 | 2,400-5,600 |
| Wireless controller | Aruba Mobility Controller or Meraki cloud | 1 | 0-3,000 |
| UPS (network) | APC Smart-UPS 3000VA 2U | 1 | 1,200-1,800 |
| Patch panels | 48-port Cat6a | 3-4 | 240-400 |
| SFP+ modules | 10G SR | 8-12 | 400-1,200 |
| Total | 15,740-37,500 |
Key Decisions
- Dedicated core switch with 10G uplinks to each floor/closet
- PoE budget becomes critical — calculate total watts for APs, phones, and cameras per switch
- Wireless controller (physical or cloud) is necessary for seamless roaming across 6-plus APs
- Dual ISP with automatic failover on the firewall
- 6+ VLANs: Data, Voice, Guest, Cameras, IoT, Management, Server/DMZ
Client Size: 250+ Users (Enterprise)
Typical environment: Multi-building campus or multi-floor headquarters, dedicated IT staff, compliance requirements
Equipment List
| Equipment | Recommended Model | Qty | Est. Cost |
|---|---|---|---|
| Firewall (HA pair) | FortiGate 200F or Palo Alto PA-850 | 2 | 8,000-20,000 |
| Core switches (stacked) | Cisco Catalyst 9500-24Y4C | 2 | 16,000-30,000 |
| Distribution switches | Cisco Catalyst 9300-48P | 4-8 | 16,000-48,000 |
| Access switches | Cisco Catalyst 9200-48P | 6-12 | 18,000-48,000 |
| Wireless APs | Cisco Catalyst 9130AX or Aruba AP-635 | 12-25 | 12,000-37,500 |
| Wireless controller | Cisco C9800-L or Aruba 7210 | 1-2 | 5,000-15,000 |
| UPS (network per closet) | APC Smart-UPS 3000VA | 3-6 | 3,600-10,800 |
| Patch panels | 48-port Cat6a | 8-15 | 640-1,500 |
| SFP+/SFP28 modules | 10G/25G | 20-40 | 2,000-8,000 |
| Total | 81,240-218,800 |
Key Decisions
- High-availability firewall pair — active/passive failover with zero downtime
- Core switch redundancy — stacked pair with cross-links
- 25G or 40G uplinks between core and distribution
- NAC (Network Access Control) via 802.1X on all switch ports
- Dedicated network monitoring (SNMP, NetFlow, syslog)
Network Deployment Best Practices for MSPs
Cable Management
- Label every cable on both ends (label maker or pre-printed labels)
- Use cable management panels between every patch panel and switch
- Color-code cables by VLAN or function (blue for data, yellow for voice, red for management)
Documentation
Document these for every client site:
- Network topology diagram (logical and physical)
- VLAN table (ID, name, subnet, DHCP range)
- Switch port assignments
- Firewall rules summary
- Wireless SSID mapping
- IP address plan
- Equipment serial numbers and warranty dates
Spare Equipment
For MSPs managing 10 plus client networks, keep these network spares:
- 1x 24-port PoE switch (your standard access model)
- 2x SFP+ 10G SR modules
- 1x box of Cat6a cables (assorted lengths)
- 1x APC replacement battery cartridge
- 1x access point (your standard model)
Summary Checklist by Client Size
| Component | 5-10 Users | 25 Users | 50 Users | 100 Users | 250+ Users |
|---|---|---|---|---|---|
| Firewall | FG-40F | FG-60F | FG-60F/80F | FG-100F | FG-200F HA |
| Core switch | 8-port | 24-port | 9200L | 9300 | 9500 stack |
| Access switches | None | None | 1-2 | 2-4 | 6-12 |
| Wireless APs | 1 | 2 | 3-4 | 6-8 | 12-25 |
| UPS | 750VA | 1000VA | 1500VA | 3000VA | 3000VA x3-6 |
| Total budget | 1.2-1.9K | 2.3-3.4K | 5.2-11.9K | 15.7-37.5K | 81-219K |
Bookmark this page and use it as your go-to reference for every network deployment.
Browse 44,000 plus networking products at prodisknetwork.com — Cisco, Aruba, Juniper, Fortinet, and Ubiquiti switches, routers, firewalls, and access points in stock with same-day shipping. Volume pricing for MSPs on orders of 10 plus units.