Introduction
As global digital transformation deepens, fixed-desk working is increasingly being replaced by flexible work, mobile work, and remote collaboration. This shift raises expectations for employee productivity and experience while creating new challenges for enterprise network infrastructure. High bandwidth, low latency, full coverage, strong security, and simple operations are now essential requirements. Traditional office networks often face complex cabling, bandwidth bottlenecks, difficult maintenance, and elevated security risk. This paper proposes an integrated solution based on Passive Optical LAN (POL), Wi-Fi 7, and Zero Trust security.
Core Technology Selection
1.Passive Optical LAN (POL)
POL extends optical fiber directly to user endpoints, creating a fiber-to-the-desk architecture. Compared with conventional copper Ethernet, it provides:
High bandwidth and long-distance transmission: Optical fiber supports 10G and higher access speeds for 4K/8K video, cloud desktops, and large data transfers, with fewer intermediate devices.
Simplified architecture: A flat two-tier design reduces the number of aggregation and access switches and therefore reduces failure points.
Energy efficiency: Passive optical splitters require no power and generate little heat.
Space savings: Fiber is thinner and lighter than copper, reducing cable-tray and equipment-room requirements.
Easy deployment and lifecycle operation: A well-designed fiber plant can support network evolution for decades, reducing upgrade and retrofit costs.
2.Wi-Fi 7 (802.11be)
Wi-Fi 7 is designed for higher throughput, lower latency, and stronger interference resistance:
Ultra-fast access: Theoretical throughput of up to 46 Gbps supports high-bandwidth applications such as high-definition video conferencing and VR/AR.
Multi-Link Operation (MLO): Devices can transmit and receive over 2.4 GHz, 5 GHz, and 6 GHz links, improving efficiency and reliability.
Lower latency: MLO and related enhancements can reduce latency to the millisecond level.
High concurrency and capacity: More users and devices can connect in dense office environments.
3. Unified Wired and Wireless Management
A unified management platform centrally controls policies for POL and Wi-Fi 7. This simplifies operations and provides a consistent access experience and seamless roaming throughout the workplace.
Overall Architecture
Figure 1. POL architecture with OLTs, splitters, ONUs, and Wi-Fi access points.
The solution uses a flat two-tier architecture consisting of a core layer and an access layer. The core layer uses Optical Line Terminals (OLTs) for optical aggregation and forwarding. The access layer uses passive splitters and Optical Network Units (ONUs) to deliver fiber to the desk.
OLTs are deployed in the core equipment room and connect by fiber to passive splitters on each floor. Splitters distribute optical signals to ONUs in office areas. ONUs connect over short copper runs to computers, IP phones, printers, and other endpoints. In wireless areas, an ONU can connect directly to a Wi-Fi 7 access point.
A hybrid design can be used according to workspace characteristics. POL is preferred in areas with many fixed desks, while Wi-Fi 7 is emphasized in meeting rooms, open offices, collaboration spaces, and lounges.
Key Functions and Advantages
10-Gigabit Connectivity for Everything
POL and Wi-Fi 7 can deliver 10-gigabit-class access for growing enterprise bandwidth requirements. Large-file transfers, 4K/8K video meetings, cloud desktops, and future AR/VR collaboration can operate smoothly and reliably.
Seamless Roaming Experience
Unified wired/wireless management and Wi-Fi 7 MLO allow devices to roam throughout the office without repeated authentication or disruptive network switching, helping video calls and file transfers remain uninterrupted.
Figure 2. Wi-Fi 7 coverage and seamless roaming in a modern office.
Zero Trust Security
The solution follows the principle "never trust, always verify." Every internal or external user and device must pass identity verification, device-health checks, and policy authorization before accessing enterprise resources.
Figure 3. Zero Trust access process.
When a user requests access, the system first verifies identity, for example through multi-factor authentication. It then checks device posture, including operating-system patches and
anti-malware status, and finally grants access according to the principle of least privilege. Even internal employees can access only the minimum resources required for their work.
Intelligent Operations Platform
A unified intelligent-operations platform provides visual management of the entire office network. It monitors device status, link quality, traffic load, and Wi-Fi signal strength in real time. AI algorithms analyze performance data, predict potential faults, and provide automated diagnosis and location, reducing workload and improving response speed.
Security and Reliability
Link redundancy
Core OLTs and critical fiber paths use redundant designs so that a single device or link failure does not interrupt service.
End-to-end encryption
Current encryption standards such as WPA3 protect the confidentiality and integrity of transmitted data, especially on wireless links.
Micro-segmentation
Zero Trust policies isolate departments and user roles. If one area is compromised, segmentation limits lateral movement and contains the impact.
Conclusion and Outlook
By combining Passive Optical LAN, Wi-Fi 7, and Zero Trust security, this enterprise office network solution provides high bandwidth, low latency, complete coverage, strong security, and simplified operations. It satisfies current digital-workplace requirements and provides an evolution path for the next five to ten years.
The solution can lower total cost of ownership by simplifying cabling, reducing equipment, lowering power consumption, and improving operational efficiency. It increases employee productivity through fast, stable access and seamless roaming; strengthens protection against attacks and data leakage; and provides the performance foundation for cloud desktops, VR/AR collaboration, and other innovations. As 6G, AI, and new workplace technologies emerge, the infrastructure can continue evolving toward greater intelligence and automation.