School Wi-Fi installation

What the DfE wireless standard asks for

The Department for Education publishes digital and technology standards for schools and colleges. The wireless network standard is one of six core standards, and the DfE says schools should be working towards meeting it by 2030, upgrading when a solution is underperforming or unsupported. It has four parts. This table summarises them from the DfE's guidance (last updated 16 September 2026) and shows how we approach each with Cisco Meraki.

The DfE notes that wireless performance depends on the cabling and switches behind it, which have their own standards. We look at those together, because new access points on old switches rarely deliver what the school paid for.

Filtering, monitoring and safeguarding

Schools have a statutory duty, set out in Keeping children safe in education, to have appropriate filtering and monitoring. The DfE's filtering and monitoring standard says schools should already be meeting it. Among its requirements:

• filtering must use the IWF and CTIRU blocklists and cover school-managed devices, personal devices and guests
• devices that are not school-managed should be on a separate virtual network
• filtering should cover every internet feed, including backup connections
• it should block ways around the filter, such as VPNs and proxies
• staff and pupils should have different filtering profiles, not one blanket policy
• provision should be reviewed at least once every academic year

The wireless network is where much of this is enforced. Separate SSIDs and VLANs for staff, pupils, personal devices and visitors let each group get the right filtering profile, and a secondary internet connection must be filtered just like the main one. Content filtering itself usually comes from a dedicated service. We can integrate the network with DNS-layer filtering such as Cisco Umbrella for schools, or with the filtering your trust or broadband provider already supplies. The responsibilities for filtering decisions and reviews sit with your senior leadership team and designated safeguarding lead; we provide the network that supports them.

Designing for classrooms, halls and outside spaces

School Wi-Fi is designed for density first. The DfE suggests up to one access point per classroom, with higher-specification units in high-capacity areas such as halls. In practice:

• Classrooms need capacity for a full class on devices at once, plus the teacher's devices and displays.
• Halls, libraries and sports halls see the most simultaneous users and need higher-capacity access points or more of them.
• Corridors and stairwells need enough coverage for devices to roam between rooms, not full capacity.
• Outside areas such as playgrounds, fields and outdoor classrooms need outdoor-rated access points if Wi-Fi is wanted there.
• Older buildings with thick walls absorb signal differently from new blocks, which is why surveys matter more than floor-plan guesses.

Cisco's Wi-Fi 7 access points can use the 6 GHz band as well as 2.4 GHz and 5 GHz. The 6 GHz band is less crowded and suits dense rooms where devices support it, while older devices carry on using 2.4 GHz or 5 GHz on the same access points.

Wireless networks for staff, pupils and guests

Meraki lets each SSID carry its own VLAN, firewall rules and bandwidth limits, and the dashboard shows which device is on which network. See cloud managed Wi-Fi for splash pages and identity PSK in more detail.

Survey and installation phases

1. Discovery: buildings, room uses, numbers of devices, current network, filtering provider and any planned building work.
2. Survey and design: wireless heat mapping and access point placement, plus a review of cabling and switches.
3. Proposal: hardware, licences, installation approach and how each DfE requirement is met, set out in writing.
4. Installation: usually planned around holidays or after the school day to avoid disrupting lessons; cabling and mounting first, then configuration.
5. Configuration: SSIDs, VLANs, authentication, filtering integration, alerts and admin accounts with two-factor authentication.
6. Validation: on-site checks of coverage and performance in real rooms, guest isolation and filtering on every network.
7. Handover: documentation of the design, admin access and licence dates, and an agreed approach to support, confirmed at quote.

Multi-academy trusts and many schools

For a trust, cloud management changes the economics. Every school becomes a network in one Meraki organisation, so the central IT team can see every school's Wi-Fi, switches and firewall in one place.

• Templates keep SSIDs, authentication and filtering integration identical across schools, so staff moving between schools connect automatically.
• Network tags and admin roles give a school's own technician access to their school only, while the trust team sees everything.
• Firmware is scheduled per school or across the trust, outside the school day.
• Licensing can be aligned across schools on one co-termination date or managed per network on subscription; see Meraki licensing models.

If schools are joining up over the internet, the multi-site network page explains Auto VPN and SD-WAN between sites.

How Forever Systems helps schools

Forever Systems is a Cisco Partner. We can survey your buildings, design Wi-Fi around the DfE standards, supply Cisco Wireless and Meraki access points, switches and licences, install out of hours, integrate the network with your filtering and validate coverage on site.

Ask us for a quote: contact us with the number of schools, buildings and classrooms.