The three-tier architecture isn’t decoration — it’s your first filter before purchasing
I’ve seen far too many companies walk into a switch purchase holding a budget sheet and asking straight out, “How much for a 48-port unit?” — and then the equipment they bring back starts “fighting” with itself in the server room. The division of roles among the access, aggregation, and core layers isn’t textbook theory; it’s the underlying logic that determines whether your network can actually run. The access layer is the entry point for every endpoint — desktops, IP phones, APs, and cameras all connect here. Its core requirements are sufficient port density, stable PoE power delivery, and controllable cost. For a 24-port or 48-port gigabit access switch with PoE modules fully populated, a per-unit cost difference of several thousand yuan is common. Many integrators cut corners here — using non-standard PoE or powering only some of the ports — and only after the project is signed off does the customer discover that certain APs keep dropping offline. The aggregation layer collects traffic from multiple access-layer switches, and the bandwidth oversubscription ratio is the key term here. If four gigabit switches uplink from the access layer, each aggregation-layer unit must support 10-gigabit uplinks — otherwise you’re planting a landmine for yourself. I’ve seen a machining company in Shunyi whose office grew from 8 workstations to 32. They added four switches to the access layer, but the old aggregation-layer unit still had only gigabit uplinks — so every time R&D exported CAD drawings in bulk, other departments froze into a slideshow. The core layer is the heart of the entire network, where the data center or server cluster connects. Layer 3 routing, ACL policies, and inter-VLAN communication are all handled at this layer. Your choice of core-layer equipment directly sets the ceiling for network expansion over the next three to five years.Step one of the selection checklist: figure out “which layer this switch belongs to” before discussing port counts and price. Get the position wrong and even the highest specs go to waste; get it right and every spec you trim saves real money.
Port count and PoE budget: two numbers that can’t carry your design
The purchase list says “48-port switch” and you think you’re all set. In reality, port count is the most superficial spec of all. What you really need to pull apart and examine is this: Number and speed of uplink ports. For a 48-port access switch, the theoretical peak upstream traffic is 48G of gigabit; if there are only two gigabit uplinks, that’s a 96G bandwidth ceiling, and congestion is inevitable once you exceed it. The standard approach is at least two 10-gigabit uplinks to the aggregation layer. Even if budgets are tight now, reserve the slots. The PoE power budget isn’t an optional accessory — it’s what determines whether the equipment can run stably. The 802.3af standard delivers 15.4W per port; 802.3at delivers 30W per port. If your APs are high-power Wi-Fi 6 models or PTZ dome cameras, a 48-port PoE switch with a total PoE budget of only 370W will inevitably leave a dozen or more ports without power at full load. A rough formula: number of devices × maximum per-port power × a 0.7 redundancy factor — that’s the PoE budget you actually need. Another pitfall is the ratio of fiber ports to copper ports. Many vendors’ 48-port switches are actually 44 copper ports + 4 fiber ports, with the fiber ports used for uplinks or optical modules. If you need long-distance uplinks to the aggregation layer, work out the optical module models and budget in advance — otherwise you’ll only discover after the equipment arrives that the fiber splicing plan is wrong, wasting a week of the schedule.Is gigabit enough? When should you move to 10-gigabit? Is stacking a false need?
These are the three most frequently asked questions, and my answer is “look at the scenario, not the trend.” Gigabit access is still sufficient in the vast majority of office scenarios. Employee PCs, IP phones, and ordinary APs almost all have gigabit NICs; install a 10-gigabit access switch and the endpoints can’t saturate it — you simply spend more. There is one exception: design firms or film and video studios, where designers’ workstations have 10-gigabit NICs, or where NAS storage connects directly at the access layer. In those cases the access layer has to be 10-gigabit, or internal transfers become the bottleneck. 10-gigabit uplinks are mandatory at the aggregation layer, not optional. Four gigabit access switches uplinking to one 10-gigabit aggregation switch provides 40G of uplink bandwidth — more than enough. The link from aggregation to core depends on endpoint scale and business type. For companies under 50 people, a gigabit backbone is fine; for those over 100 people, or with ERP servers and high-frequency file-sharing access, a 10-gigabit backbone is recommended. Stacking virtualizes two switches into one for management; its advantages are unified management, link redundancy, and doubled bandwidth. But stacking imposes strict requirements on cables and modules, and once a stack member fails, recovery is more complex than a single-unit failure. My personal advice: small networks should avoid stacking — troubleshooting is too laborious; medium and large networks can adopt it where conditions allow, but prioritize virtualization technology over hardware stacking.Suggested upgrade path: start with gigabit at the access layer and reserve 10-gigabit slots; go straight to 10-gigabit at the aggregation layer and budget generously for optical modules; choose core-layer equipment based on business peaks — don’t pick an entry-level model just to save budget.
A real case from a packaging plant in Daxing: the money saved was all paid back later
In 2022 I worked with a client in Daxing that makes food packaging, with a factory and office across three floors. The initial plan was a two-tier network architecture: all switches gigabit, 24-port unmanaged switches at the access layer, and a single Layer 3 switch at the aggregation layer. When asked about the budget, they said they wanted to save money for now. The result? Six months later the factory added more than 20 machine-vision inspection cameras, each with 4K resolution and PoE power. The unmanaged switches had no VLAN isolation, so camera video streams and office data mixed together, and the NVR kept dropping frames. When they reworked it, every access-layer switch was replaced with managed PoE switches and the aggregation uplink was changed to 10-gigabit — costing nearly RMB 40,000 extra from start to finish. The lesson from this case is straightforward: when planning a network for a manufacturing company, the connectivity needs of cameras, PLCs, and industrial control terminals must be factored in from the start. These devices have traffic characteristics completely different from office endpoints — higher bandwidth demand and greater PoE power. One more detail is pre-laying fiber cable. A printing company in Tongzhou had a factory span of 120 meters; the original design used cascaded ordinary network cable, and beyond 90 meters the signal attenuated badly, forcing them to add a switch as a repeater in the middle. Had the cost of running fiber to each distribution box been planned from the start, later expansion would have been far easier.Your selection decision checklist
- First confirm which layer the switch will be deployed at: the access layer emphasizes port density and PoE, the aggregation layer emphasizes uplink bandwidth and oversubscription ratio, and the core layer emphasizes forwarding capacity and scalability.
- Port count isn’t simple division — leave 20% headroom for adding endpoints later.
- Calculate the PoE budget at 70% utilization under full load, not at the per-port maximum.
- The uplink rate must exceed the total downstream bandwidth; for aggregation to core, start at 10-gigabit.
- Consider whether new APs, cameras, or industrial control devices will be added over the next two years; if so, leave ample port and PoE budget.
- Warranty terms and response times are hidden costs — don’t fixate only on the bare equipment price.
Beijing enterprise IT hitting a bottleneck? Siwenlide’s turnkey solutions, built over 14 years for 1,000+ clients, await your inquiry.
☎ 400-686-2011 · 📍 Room 3-1002, 9F, Building 3, No. 1 Huihai South Road, Beijing Airport Economic Core Zone · Contact us
※ Enterprise broadband or a dedicated line is included free during the contract period, keeping your business connection more stable.








