Guides8 min read

Office Network Setup Checklist for Kuwait Businesses

Centrix Team|April 28, 2026

Setting up a new office network is one of those projects that looks simple until it isn't. A missed step early on — wrong cable category, no VLAN for CCTV, default passwords left on switches — can cost days of troubleshooting later. This checklist is based on what our engineers verify before handing over every Centrix installation.

Phase 1: Planning (before any hardware arrives)

Count your devices and ports

Walk the floor and count everything that needs a wired connection: workstations, IP phones, printers, access points, CCTV cameras, NVRs, servers, and any POS terminals. Add 20% headroom for growth.

A 20-person office typically needs:

•20 workstations

•10–20 IP phones

•3–6 access points

•4–8 CCTV cameras

•1–2 printers, 1 NAS

That's 40–60 active ports. A 48-port switch with PoE covers it comfortably.

Plan your VLANs

Flat networks are a security risk. Segment from the start:

VLAN	Purpose	Why separate?
VLAN 10	Office workstations	Protects servers from user traffic
VLAN 20	VoIP phones	Ensures call quality (QoS)
VLAN 30	CCTV cameras	Keeps camera traffic isolated
VLAN 40	Wi-Fi guests	No access to internal resources
VLAN 50	Servers/NAS	Accessible only from authorized VLANs

Confirm your ISP connection

Before ordering hardware, confirm:

•How many public IPs are you getting? (1 dynamic, or a /30 static block?)

•Is it fiber to the building or to the cabinet?

•What's the SLA for downtime? Do you need a backup ISP?

---

Phase 2: Cabling

Use Cat6A for new installations

Cat5e is technically sufficient for 1 Gbps, but Cat6A future-proofs you for 10 Gbps to the desk and runs cooler in bundles. In Kuwait's climate, heat in cable trays matters.

Label every cable at both ends

Use a label printer. "CAB-01-SW1-P12" tells you instantly this cable goes to Switch 1, Port 12. Unlabelled cables are the #1 cause of slow troubleshooting.

Check cable runs before patching

•Verify each run with a cable tester before terminating patch panels

•Keep runs under 90 metres (the 10 metres of patch cables at each end brings you to the 100-metre Cat6 limit)

•Avoid running data cables parallel to power cables for more than 30 cm

---

Phase 3: Core hardware setup

Router / firewall first

•Change default admin password immediately

•Configure WAN interface with your ISP settings

•Enable firewall — block all inbound by default, allow only what you need

•Set up NAT if on a single public IP

•Configure DNS (we recommend 1.1.1.1 + 8.8.8.8 as fallback)

•Test internet before connecting anything else

Switch configuration

•Update firmware before deployment

•Change default credentials

•Configure VLANs to match your plan

•Set trunk ports between switches and to the router

•Enable STP (Spanning Tree) to prevent broadcast loops

•Enable DHCP snooping to prevent rogue DHCP servers

•Set port security on unused ports (disable or MAC-lock)

Wireless access points

•Deploy APs at ceiling height, not walls

•In Kuwait offices: one AP per ~150–200 m² for standard coverage, or one per floor in dense environments

•Create separate SSIDs for corporate and guest Wi-Fi

•Use WPA3 or WPA2-Enterprise for corporate SSID

•Disable legacy 802.11b/g rates to improve performance

---

Phase 4: VoIP / IP phones

•Configure a PBX or UCM (Grandstream UCM6300 series handles up to 2,000 extensions)

•Assign phones to the VoIP VLAN

•Enable QoS on your switch — mark VoIP traffic as DSCP EF (46)

•Test call quality: no jitter above 30ms, packet loss under 1%

•Set up a SIP trunk to your Kuwaiti telecom provider (Zain, Ooredoo, STC)

---

Phase 5: Security hardening

Before going live, verify:

•[ ] All default passwords changed (router, switches, APs, NVR, IP phones)

•[ ] Remote management disabled or restricted to a management VLAN

•[ ] Firmware updated on all devices

•[ ] Unused switch ports disabled

•[ ] Guest Wi-Fi isolated from internal network

•[ ] Firewall rules reviewed — no "allow any" rules

•[ ] NTP configured on all devices (time sync matters for logs and CCTV)

•[ ] SNMP disabled if not in use, or configured with a strong community string

---

Phase 6: Documentation

A network without documentation is a liability. At minimum, document:

•Network diagram (even a hand-drawn one is better than nothing)

•IP address plan (which range for servers, phones, workstations, CCTV)

•VLAN assignments

•ISP credentials and circuit ID

•All admin passwords stored securely (password manager or sealed envelope)

•Vendor contacts for hardware support

---

Typical Kuwait office timeline

Phase	Time
Planning and hardware procurement	3–5 days
Cabling (20-person office)	1–2 days
Core hardware setup	1 day
AP, phone, and camera configuration	1 day
Testing and handover	Half day

Total: **7–10 working days** from order to handover for a standard office.

---

How Centrix handles this

We supply and install networks for Kuwait businesses end to end — hardware procurement, cabling, configuration, and documentation. Our engineers follow this exact checklist on every project.

If you are planning a new office or moving to a new space, get in touch for a free site survey. We will give you a fixed-price quote within 48 hours.

Office NetworkKuwaitChecklistSetupVLANsNetworking