A clean UniFi setup for a small office, delivered with documentation your team can actually read.

8–10 hours over one to two weeks. UniFi Cloud Gateway, switching, wireless, VLAN segmentation, guest WiFi, optional IPsec site-to-site. The handoff document is the deliverable — written in your language.

≤25 users · single site
Remote setup, no travel
Bilingual documentation · EN or ES

Free 30-min assessment →

UniFi is the right answer for a lot of small offices — clean console, real switching, real wireless, no licensing math. What it’s missing is the consulting layer: the person who shows up, knows what a sensible VLAN layout looks like for a 20-person team, and writes the runbook for the office manager to call when the guest WiFi falls over six months from now.

This engagement is that consulting layer. Fixed scope, fixed deliverables, bilingual handoff documentation so the LATAM IT generalist who maintains it after we leave can actually read it.

What you get

From-scratch UniFi setup · Cloud Gateway, switching, wireless. Up to 25 users, single site.
VLAN segmentation · staff, guest, voice (if applicable), and an IoT segment if you have printers / cameras / smart TVs that don't deserve to share a broadcast domain with payroll.
Guest WiFi · isolated, captive portal optional, sane bandwidth caps.
Optional IPsec site-to-site VPN · one peer. Most common targets: head office, branch office, or a cloud VPC.
Backup + restore tested · the UniFi config is backed up to your storage of choice, the restore is verified against a clean test device before we close the engagement.
Bilingual handoff document · network diagram, VLAN map, password / admin recovery procedure, "when this happens, do this" runbook entries for the top 10 small-office incidents (printer can't print, guest WiFi slow, AP rebooting, etc.). EN or ES — your call.

The handoff document is the artifact. The network running cleanly is the prerequisite for the document existing.

Scope

Hardware · 1× UniFi Cloud Gateway (UCG-Ultra, UCG-Max, UDR, or UDM-Pro), 1–4× UniFi switches, 1–6× UniFi APs.
Users · up to 25 staff plus typical guest density.
Site · single physical site. Office or branch, not a campus.
VLANs · up to 5 VLANs configured (Staff, Guest, IoT, Voice, Server — pick the ones that apply).
Optional IPsec · one peer, IKEv2, PSK or certificate auth. Static routing or a single BGP neighbor.
Internet · single or dual WAN. Failover configuration if dual-WAN, but full SD-WAN with traffic-class policy is a different shape.

Timeline

Mon (Week 1) · staging. Devices arrived on-site, you confirm. Cloud Gateway adopted, base config templates applied, VLANs and SSIDs defined. Most of this happens remotely from your console.
Tue–Wed (Week 1) · install + cutover. Your on-site contact wires the switches and APs (we send instructions and we're on a video call); we configure remotely. Internet handover happens during a chosen window.
Thu–Fri (Week 1 or Week 2) · documentation + walkthrough. Handoff document drafted in your language, walkthrough call with whoever will maintain it, incident-response runbook reviewed.

Most engagements close inside 8–10 working hours over one to two weeks. If the site has unusual wiring, a tricky ISP handover, or RF challenges that need a real survey, we’ll flag it on the assessment call and either extend cleanly or recommend a different shape.

When this is the right fit

New office buildout, 5–25 staff, you want UniFi from day one.
Existing setup on consumer / SOHO gear (one box from the ISP, a TP-Link switch, off-brand APs) that’s reached the end of its useful life.
Post-acquisition consolidation — the small office you just inherited needs to look like the rest of the portfolio.
Branch office of a larger company where the head office runs FortiGate or Cisco and the branch wants the simpler UniFi shape locally with an IPsec tunnel home.
LATAM small office where bilingual documentation is the difference between a maintained network and a forgotten one.

When this isn’t the right fit

More than 25 staff or multi-floor / multi-building wireless. Different shape — closer to a project engagement.
Multi-site WAN with traffic engineering, voice prioritization, or compliance-driven segmentation. UniFi can do some of this but it’s not what this fixed-scope engagement covers.
Highly regulated industries (HIPAA / PCI / SOC 2) where the network design itself is part of the compliance scope. The audit engagement makes more sense as a first step.
Sites where the hardware decision isn’t UniFi yet. We’ll happily talk through the FortiGate / Meraki / UniFi tradeoff on the assessment call, but this engagement assumes UniFi is the right answer for your environment.

Frequently asked

Do you procure the hardware?

We don't. You buy the hardware direct from Ubiquiti or an authorized reseller — there's no margin to make, and your warranty stays clean. We'll give you the exact part numbers on the assessment call so the order matches the design.
Can someone on our side do the physical install?

Yes — that's the default. We send a wiring diagram and labels, your on-site contact (office manager, electrician, low-voltage installer) does the cabling, we configure remotely while you're on a video call. The actual configuration time on our side is 4–6 hours; the rest is documentation and validation.
What if we want a UniFi + something else hybrid?

Common scenarios: UniFi at the office + FortiGate at HQ over an IPsec tunnel. UniFi for switching + a separate firewall (FortiGate / OPNsense / pfSense) at the edge. Both are possible — talk to us about it on the assessment call. The fixed-scope engagement assumes UniFi end-to-end; hybrids reshape into project work.
What does the bilingual documentation cover?

Network diagram, VLAN map, SSID and password recovery, how to add a new device, how to add a new user, how to interpret the most common UniFi alerts, who to call for what, and a 10-incident runbook covering the small-office incidents we see most often. Written so a generalist IT person — or the office manager who handles tech by default — can act from it without paging an engineer. EN or LATAM Spanish, your choice.

Ready to scope it? Free 30-min assessment ↑ or email cflores@packetloss.tech directly.