Planning a full home network upgrade after moving

I’m moving home in a couple of months and want to properly redesign my entire network.

Currently, I have a basic modem from my ISP and a regular router. The wired gigabit connection works fine, but when configuring things (backups, downloads), the network lags drastically.

But I’m starting to think that older mesh devices might be a bad fit because I don’t think they handle VLANs properly, and I really don’t want to manage half my network from a phone app.

What should I look for when choosing access points in a 1,500 sq. ft. house? Is OPNsense + a managed switch + the right access points the right way, or am I overcomplicating things?

The general direction makes sense, but I’d skip the random consumer mesh units if VLANs matter to you. A lot of mesh systems are fine for simple home Wi-Fi, but once you want separate SSIDs for Main, IoT, and Guest networks, you’ll want APs that properly support VLAN tagging and central management. Since you’re already running Ethernet, use wired APs. For a 1500 sq ft house, one well-placed AP might work, but two APs usually give you better 5 GHz coverage and less stress on placement.

Don’t base the number of access points solely on square footage. A 1,500-square-foot home may require one, two, or even three access points, depending on the layout, wall materials, and other factors. My advice: use NetSpot; it can be helpful because it has a planning mode. You can use your floor plan, specify wall materials, place virtual access points, and check the predicted coverage before purchasing or installing equipment.

Have you considered putting everything together in a single managed ecosystem (gateway, switch, access points)? This isn’t the only option, but it’s much easier to configure VLANs, guest Wi-Fi, and manage access points from a single admin panel, rather than jumping between five different interfaces. For a 1,500 square foot home, a turnkey solution will be much less painful than assembling the network piecemeal.

@SilverFox If I go this route, it’ll be solely for the access points and switch, as the OPNsense router will definitely remain my router — I need its deep control over the firewall, VPN, and traffic. My main issue right now is the access points: I don’t want to keep the free mesh modules if they conflict with VLANs or require configuration only through a mobile app.