Building a $5K SMB Network Closet: A Spec Sheet

Five thousand dollars is an awkward budget for a network closet. It is well past the point where a client will accept a plywood board with a modem zip-tied to it, and well short of what a vendor quote for a "small business network refresh" usually lands on. It is also, in my experience, the number that comes up most often when an MSP is replacing a closet that grew by accretion over eight years and is now the reason nobody wants to be on call for that account.

This post is a spec sheet, not a shopping list with affiliate links. The point is to show where the money actually goes in a closet this size, which line items are worth protecting when the client asks you to trim, and which ones quietly consume a third of the budget if you are not watching. Prices are approximate and drift with supply; treat them as proportions rather than quotes.

What $5,000 buys, and what it does not

A $5,000 closet, done properly, supports roughly 25 to 50 seats in a single-floor office with one ISP handoff, wired desks, ceiling access points, and a handful of PoE cameras or door readers. It includes the cabinet, power protection, the switching layer, the gateway, patching and termination, and labeling. It does not include a server, structured cabling labor, or the drops themselves. Cabling a 30-seat office runs $3,000 to $9,000 on its own depending on ceiling access and local labor rates, and if the client has not budgeted separately for that, the conversation needs to happen before anything else.

It also does not include redundancy in any meaningful sense. One gateway, one switch stack that is really one switch, one uplink. You get resilience against power events and against the most common failure mode in small offices — heat and dust — but not against a dead switch. Dual-WAN failover to an LTE or 5G backup is the one redundancy item that fits inside this budget, and it fits because the hardware is cheap and the recurring data plan is the client's operating expense, not yours.

Start with the cabinet, not the switch

The most common budgeting mistake at this tier is picking the switch first and then discovering the enclosure that fits it costs $900. Cabinet dimensions constrain every other decision, so they get decided first.

Three form factors show up at this size:

• Wall-mount swing-out cabinet, 12U to 18U, 450–600 mm deep. The default for an office closet. The swing-out hinge matters more than the U count — a fixed-back wall cabinet means every future termination is done blind, with your forearms inside the box.
• Floor-standing open frame, 22U to 42U. Cheaper per U and far better thermally, but it needs floor area the client usually does not have and it exposes everything to dust and curious hands.
• Two-post open rack in a locked closet. The value option when the closet door itself is the security boundary.

Depth is the specification people get wrong. A 19-inch cabinet is 482.6 mm wide at the mounting flanges regardless of manufacturer, per EIA-310-D, but interior depth ranges from 300 mm to over 1000 mm. A gateway with front-facing SFP+ ports and a rear power inlet needs enough depth for both the device and the cable bend behind it. Add at least 75 mm behind the deepest device for power cords, and more if any of them use a right-angle-hostile barrel connector. Budget $600 to $1,100 for a decent 15U wall cabinet with a vented door, adjustable rear rails, and a fan tray.

Power comes before switching

The UPS is where clients want to cut, and it is the line item that determines whether you get called out at 2 a.m. after a brownout. For a closet drawing 200 to 400 watts continuous, a 1500VA/1000W line-interactive rack UPS is the right size. That gives roughly 15 to 25 minutes of runtime at typical load — long enough to ride out the outages that account for the overwhelming majority of events, and long enough for a clean scripted shutdown if there is anything in the rack that needs one.

Two details that get missed. First, a rack UPS at this capacity is 2U and heavy, usually 15 to 20 kg, and it must be mounted at the bottom of the cabinet on a shelf or rails rated for it — not hung from its front ears alone in a wall-mount box. Second, buy the network management card or a model with one built in. A UPS that cannot tell your RMM that it is on battery is a $400 surge protector with a heavy core in it.

Add a 1U switched or metered PDU behind or below the UPS. Metered is worth the upgrade at this tier because it turns "the closet feels warm" into a number you can trend. Power total: $500 to $800.

The switching layer and an honest PoE budget

For 25 to 50 seats, one 48-port PoE switch or a 24-port plus an 8-port at the far end of the office. Managed, with at least two SFP+ uplink ports even if nothing uses them on day one.

The PoE budget is the calculation most quotes fudge. Work in PD wattage, not PSE wattage, and add headroom:

• 802.3af Type 1: 15.4 W at the port, 12.95 W delivered to the device.
• 802.3at Type 2 (PoE+): 30 W at the port, 25.5 W delivered.
• 802.3bt Type 3: 60 W at the port, 51 W delivered. Type 4: 90 W at the port, 71.3 W delivered.

A Wi-Fi 6E or Wi-Fi 7 access point in full-power mode is a PoE+ device and will happily pull 20 to 25 W. Six APs, eight cameras at 8 W each, four VoIP phones the client swears they are removing next year — that is roughly 230 W of PD load before headroom, which means a switch with a 370 W or larger PoE budget, not the 180 W model that looked adequate on the datasheet. Switch: $900 to $1,600.

Gateway and the ISP handoff

The gateway choice at this budget is between a prosumer-grade unified gateway and a genuine small-business firewall with a subscription. Both are defensible. The unified gateway wins on capital cost and on the client's ability to understand what they own; the subscription firewall wins if the client faces a compliance questionnaire that asks specific questions about IPS signature updates and support SLAs.

The handoff itself deserves attention. If the ISP delivers fiber, you will have an ONT or a modem that was designed to sit on a desk — a plastic box with a vertical orientation, an external power brick, and no mounting provision of any kind. This is the single most common source of closet ugliness and the reason a rack mount for the ISP equipment belongs on the BOM rather than being improvised on site with velcro. Every ISP-modem mount we sell exists because somebody had this exact problem.

Do not let the ISP device do NAT and DHCP. Bridge it, put the public address on your gateway, and document the bridging procedure in the client's file, because the ISP will replace that box in three years and the replacement will arrive in router mode. Gateway plus dual-WAN cellular backup hardware: $600 to $1,200.

Patching, mounts, and the parts nobody budgets for

Here is where the last thousand dollars goes, and where most quotes are short.

• Patch panel. A 24-port keystone panel plus keystones, or a pre-loaded punchdown panel. Keystone panels cost more per port but let you mix Cat6, fiber couplers, and the occasional coax pass-through in one 1U.
• Horizontal cable management. One 1U manager per patch panel and one above the switch. This is not cosmetic; it is what keeps a technician from unplugging the wrong port in two years.
• Patch cables. Fifty cables in three lengths and at least two colors — one color for data, one for anything that carries PoE to a device you do not want somebody hot-swapping casually. Roughly $2 to $4 each.
• Rack mounts for the non-rack gear. The ONT, the cellular backup radio, the door controller, the alarm panel dialer, the one Mini PC running the camera VMS. In a typical SMB closet, three to five devices ship with no rack ears. Mounting them properly is $30 to $60 per device and turns a shelf full of loose boxes into something that can be serviced.
• Blanking panels and a brush panel. Vented blanks where you need airflow, solid where you are trying to force it front-to-back.
• Labeling. A proper label printer and cassettes, or the client's on-site printer if they have one. Every port, both ends, and a laminated port map inside the cabinet door.

Consumables and mounting hardware: $700 to $1,100. Cage nuts are cheap and you will use more than you think.

The bill of materials

Pulling the ranges together for a 30-seat office:

• 15U wall-mount swing-out cabinet, vented, with fan tray — $850
• 1500VA line-interactive rack UPS with network card — $550
• 1U metered PDU — $180
• 48-port managed PoE+ switch, 370 W budget, 4x SFP+ — $1,350
• Unified gateway with dual-WAN — $700
• Cellular failover radio — $250
• 24-port keystone patch panel plus 30 keystones — $190
• Two 1U horizontal cable managers — $90
• 50 patch cables, two colors, three lengths — $160
• Rack mounts for four non-rack devices — $180
• Blanking panels, brush panel, cage nuts, velcro — $120
• Label printer and cassettes — $180
• Shelf, grounding kit, miscellaneous — $150

That lands near $4,950 in parts, leaving nothing for labor — which is the honest version of this exercise. If the client's $5,000 is all-in including your time, the realistic parts budget is $3,200 to $3,500, and the cuts come from the cabinet (go open-frame in a locked closet), the switch PoE budget (24-port plus a satellite), and the cellular backup. The UPS, the patching, and the mounting hardware stay. Those three are what make the closet serviceable, and serviceability is what you are actually selling.

Thermal reality check

A sealed wall-mount cabinet with 350 W of load inside it, in a closet with no return air path, will stabilize 12 to 20 °C above ambient. In an office that lets the HVAC drift to 27 °C over a long weekend, that puts the switch inlet near 45 °C — inside spec for most gear, but at the top of it, and switch power supplies are the first thing to fail when they live there.

Mitigations in order of cost effectiveness: vented door instead of solid glass, a louvered vent cut into the closet door, a thermostatically controlled fan tray, and only then active cooling. Put a temperature sensor in the cabinet and alert on it. It costs almost nothing and it converts a class of failure from a surprise into a ticket.

Wrap-up

The $5,000 closet is not a compromise build. It is a complete build with one uplink and no spare switch, which is the correct engineering answer for an office where four hours of downtime is expensive but not existential. Spend the money on the enclosure, the power, and the parts that make the rack legible in two years, and be blunt with the client about what is not in the number. The line item they will thank you for later is the one that gets every orphan box off the shelf and onto a rail, because that is the difference between a closet somebody maintains and a closet somebody avoids.

Building something like this? Browse 19" rack mounts — every one is designed, printed, and test-fitted here.