Managed WiFi cost per door: a worked model for MDU operators

In our worked model, managed WiFi for a 250-unit multi-family property costs $900 per door in capex and $252 per door a year in opex. With capex amortized, that is $30.67 per door a month. Cabling is the largest capex line at 38%. Per-door cost falls with scale, from $40.25 a month at 100 units to $26.60 at 500.

What is managed WiFi cost per door?

Managed WiFi cost per door is the total cost of a building-wide network divided by the number of homes it serves. In a multi-dwelling unit (MDU), a door is one apartment. In student housing, operators usually count per bed instead.

The figure covers five layers of the stack:

• Cabling: Cat6A drops to each access point, fiber risers between floors, cabinets and containment.
• Access points (APs): the radios inside apartments and amenity spaces.
• Switching: Power over Ethernet (PoE) switches that power and connect each AP, plus core switches.
• Licensing: cloud management licenses, and the identity platform that gives each resident a private network.
• Support: connectivity into the building, monitoring, a resident helpdesk and on-site break-fix.

The first three layers are capex: you pay once, then replace on a cycle. Licensing and support are opex: you pay every year. Connectivity also sits in opex. It is the dedicated internet access line that brings the internet into the building.

Why does cost per door matter for your property?

It matters for three reasons.

Appraisal. Your finance team needs one per-door figure for the development appraisal. A line-by-line build-up lets you defend that figure at investment committee.

Comparing bids. Managed service providers quote different scopes. One bid includes connectivity and a resident helpdesk, another excludes both. If you normalize every bid against the same five lines, you compare like with like.

The resident comparison. Residents weigh WiFi included in the lease against what a retail broadband provider would charge them. You need to know where your number lands before they work it out.

One cost is partly fixed for you already. FCC regulations require broadband-ready physical infrastructure in new developments. If you are building new, some ducting and containment sits in your base build regardless.

How does the 250-unit model work?

The building and the assumptions

The model uses a 250-apartment MDU property over eight residential floors. The ground floor holds a lounge, gym, co-working space and reception. These assumptions drive every number below:

• One AP in every apartment. Concrete floors, party walls and fire doors attenuate signal. That makes hallway-mounted designs a risk in many concrete-frame buildings, and a survey confirms which design your building needs.
• 20 APs in amenity spaces and back of house, giving 270 APs in total.
• One Cat6A drop per AP. Cat6A supports 10GBASE-T to 100 meters under IEEE 802.3an, so the cable outlasts several AP generations.
• PoE+ switching under IEEE 802.3at, which delivers up to 30W per port. That covers six 48-port access switches and two core switches.
• Asset lives: cabling over 15 years, active kit and design over six years.
• All prices exclude sales tax. They are illustrative unit rates, not Purple pricing, so replace them with your own quotes.

Capex, line by line

Line	Assumption	Total	Per door	Share
Structured cabling	270 Cat6A drops at $180, plus $36,400 for fiber backbone, cabinets and containment	$85,000	$340.00	37.8%
Access points	270 WiFi 6 APs at $280 each, including mounting	$75,600	$302.40	33.6%
Switching	Six 48-port PoE+ access switches and two core switches, $3,000 each	$24,000	$96.00	10.7%
Gateway and firewall	One high-availability pair	$6,000	$24.00	2.7%
Design, survey and commissioning	Predictive and on-site survey, configuration, testing	$34,400	$137.60	15.3%
Total	250 doors	$225,000	$900.00	100%

Shares are rounded to one decimal place.

How much of the cost is cabling?

In this new-build model, cabling is 38% of capex, the single largest line. Retrofit pushes it higher. Working in an occupied building means more labor, surface containment and making good after each drop.

Raise the drop rate to an illustrative $350 for a retrofit and cabling rises to $130,900. That is 48% of capex, and total capex rises to $1,083.60 per door.

The lesson is to cable once, with headroom. Cabling outlives your APs, so specify Cat6A and allow a spare drop where you expect future devices. Get the cabling specification fixed before the mechanical and electrical (M&E) package is let. Changing it after first fix costs more than any AP saving.

Opex, line by line

Line	Assumption	Annual total	Per door a year
Connectivity	10 Gbps primary dedicated internet access plus a diverse backup circuit	$24,000	$96.00
Cloud management licensing	270 AP licenses at $60, plus $1,800 for switch licenses	$18,000	$72.00
Identity and onboarding platform	Per-resident private networks at an assumed $24 per door	$6,000	$24.00
Managed service and support	Monitoring, resident helpdesk, on-site break-fix	$15,000	$60.00
Total		$63,000	$252.00 ($21.00 a month)

What is the capex versus opex split?

Over a six-year AP cycle, you spend $225,000 in capex and $378,000 in opex. The split is 37% capex and 63% opex.

That split changes where you negotiate. Cutting $30 off each AP saves $8,100, once. Cutting 10% off connectivity saves $2,400 a year, or $14,400 over six years. Contract terms on connectivity and support move total cost more than hardware unit price.

To get a fully loaded monthly figure, amortize each capex line over its life:

• Cabling: $85,000 over 15 years is $5,667 a year.
• Active kit: $105,600 over six years is $17,600 a year.
• Design and commissioning: $34,400 over six years is $5,733 a year.

Amortization totals $29,000 a year. Add opex of $63,000 and the building costs $92,000 a year. That is $368 per door a year, or $30.67 per door a month.

How does per-door cost change with building size?

Some costs scale with doors: drops, APs and per-device licenses. Others are close to fixed: the dedicated circuit, core switching, gateway, design minimums and the helpdesk base. Small buildings carry those fixed costs across fewer doors.

The same unit rates, applied at three building sizes, give these results:

Metric	100 units	250 units	500 units
APs, including amenity	112	270	530
Total capex	$110,520	$225,000	$405,800
Capex per door	$1,105	$900	$812
Cabling share of capex	36.3%	37.8%	37.1%
Annual opex	$33,900	$63,000	$107,000
Opex per door a month	$28.25	$21.00	$17.83
Fully loaded per door a month	$40.25	$30.67	$26.60

Cabling holds steady at 36% to 38% of capex across all three sizes. The per-door gains come mainly from opex. A 500-unit property still needs one dedicated circuit, one gateway pair and one helpdesk contract. A 100-unit property pays for the same things across a fifth of the doors.

If you run a portfolio of small buildings, ask bidders to price connectivity and support across the whole estate. That claws back some of the scale effect.

Is managed WiFi cheaper per household than retail broadband?

The model uses $30 a month as a retail broadband benchmark for one household. Check that figure against the FCC's latest broadband pricing reports before you present it.

	Retail broadband, per household	Managed WiFi, 250 units	Managed WiFi, 500 units
Monthly cost per home	$30.00 benchmark	$21.00 opex, $30.67 fully loaded	$17.83 opex, $26.60 fully loaded
Who funds in-building infrastructure	Network operator, under an easement or ROE agreement from you	You, as building owner	You, as building owner
Coverage	Inside the apartment	Apartment plus amenity spaces	Apartment plus amenity spaces
Connection on move-in day	Resident books an ISP activation	Live from first login	Live from first login
Contract held by	Resident	Operator	Operator
Network for building systems	Separate network required	Shared, segmented by VLAN	Shared, segmented by VLAN

A VLAN (virtual local area network) is a logical segment that keeps traffic from different groups apart on the same hardware.

On running costs alone, managed WiFi sits below the retail benchmark at 250 units and above. Fully loaded, it reaches parity at 250 units and falls below the benchmark at 500. At 100 units it costs more than retail.

The comparison is not like-for-like in two ways. Managed WiFi covers amenity spaces and can carry building systems on segmented VLANs. Retail broadband covers one apartment. Also, model figures exclude sales tax and retail prices include it. Whether you can recover tax depends on how you supply WiFi to residents, so take tax advice before you compare the two directly.

Worked scenarios

The two scenarios below apply the model's unit rates to different buildings. The outcomes are modeled figures, not results from a named deployment.

Scenario 1: 400-bed university halls (public sector)

Situation. A university facilities team is refurbishing a 400-bed student housing facility. It has 60 six-bed cluster apartments, 40 studios, a common room and study spaces. The business case needs a per-bed figure, because rents and occupancy are reported per bed.

What was done. The team applied the model's unit rates. Each cluster apartment gets two APs, because six bedrooms sit behind closed doors. Each studio gets one AP, and amenity spaces get 20, giving 180 APs. Support is priced at $15,000 a year to absorb the helpdesk spike at the September intake.

Outcome. Modeled capex is $161,800, or $404.50 per bed. Annual opex is $60,600, or $12.63 per bed a month. Capex per bed is 45% of the Multi-Family capex per door, because six students share each cluster apartment's cabling and switching. Studios cost closer to a Multi-Family door, so the cluster-to-studio mix drives your WiFi cost per bed in Student Housing.

Scenario 2: hotel floors converted to long-stay apartments (hospitality)

Situation. A 150-room hotel converts two floors, 40 rooms, into long-stay serviced apartments. Those floors already have Ruckus APs and Cat6 cabling. Long-stay guests want their own private network for smart TVs, consoles and laptops, not a shared hotel network.

What was done. The operator kept the existing cabling and Ruckus APs. A survey identified 10 rooms where in-room coverage fell short. The operator added 10 APs and 10 drops there, then layered per-apartment private networks on top through an identity platform. This is the reuse argument in Why your next WiFi upgrade doesn't need new hardware.

Outcome. Modeled incremental capex is $7,600: $2,800 for APs, $1,800 for drops and $3,000 for commissioning. That is $190 per door, against $900 in the new-build model. The saving comes almost entirely from not pulling a new cable backbone. Opex rises by the identity platform line, $960 a year at the assumed $24 per door. More on this kind of property is on our Hotels page.

Where does Purple sit alongside the network you already run?

Purple Multi-Tenant WiFi occupies one line in the model: the identity and onboarding platform. It runs as a cloud overlay on your hardware, so it does not replace your cabling, APs or switching.

Purple is hardware-agnostic. Multi-Tenant WiFi runs on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. That has two cost effects. On new build, you choose APs on price and fit rather than on platform lock-in. On an existing estate, you add per-resident networks with no rip and replace.

What the platform does:

• Identity-Based Networks. Each resident gets a Private Area Network (PAN), a private network bubble on shared infrastructure. Their devices connect at home and in the gym, lounge and co-working space without re-pairing.
• iPSK and 802.1X. An identity pre-shared key (iPSK) gives each resident a unique WiFi password on a shared network name. IEEE 802.1X is the port-based access control standard used for certificate or credential sign-in. Both rely on RADIUS, the protocol that checks who is connecting, which Purple runs as cloud RADIUS.
• Joiners, movers and leavers. You issue access at move-in and revoke it at move-out, from one place.

If you open the ground-floor café or co-working lounge to visitors, Guest WiFi and WiFi Analytics run on the same APs. Mixed-use schemes with ground-floor shops can serve shoppers on a segmented network too; see our Retail page.

The evidence behind the platform, from Purple's own data: 80,000+ live venues and 440 million logins in 2024. Purple is ISO 27001 certified, GDPR and CCPA compliant, Cyber Essentials certified and a certified B Corp.

What are the limits of this model?

Use the model to structure decisions, not to replace quotes. Five limits apply.

• Unit rates are illustrative. Labor rates, building height and M&E coordination move cabling and install costs. Use your own quotes.
• Connectivity depends on fiber reach. If fiber does not reach the building, excavation and right-of-way costs can add to the first year.
• Asset lives change the fully loaded figure. Refresh APs every five years instead of six and the fully loaded cost at 250 units rises from $30.67 to $32.22 per door a month.
• Scope stops at WiFi. The model excludes IPTV, indoor cellular coverage, CCTV and access control hardware, even where they share the network.
• It covers cost only. Revenue recovery and the net operating income argument are separate questions, and this model deliberately leaves them out.

What should you do next?

1. Survey first. Wall construction decides whether you need an AP in every apartment, and that is your biggest variable after cabling. WiFi Site Surveys: A Practical Planning Guide covers the method.
2. Fix the cabling specification early. Agree Cat6A, one drop per apartment and spare capacity before the M&E package is awarded.
3. Make bidders price five lines. Ask for cabling, APs, switching, licensing and support separately, with connectivity and helpdesk shown explicitly.
4. Run the model at your unit count. Swap in your unit rates and asset lives, then compare the fully loaded monthly figure with your retail benchmark.
5. Price the identity layer on the hardware you choose. If you already own Cisco Meraki, HPE Aruba or Ruckus APs, start from what is installed.

Frequently asked questions

How much does managed WiFi cost per apartment door?

In our worked model, a 250-unit Multi-Family scheme costs $1,150 per door in capex and $320 per door a year in opex. Amortize the capex over the life of each asset and the fully loaded figure is $39.25 per door a month. Smaller buildings cost more per door, $51.50 a month at 100 units. Larger ones cost less, $34.00 at 500 units. Replace our unit rates with your own quotes.

Can we reuse existing cabling and access points to cut capex?

Yes, if the cabling and access points are sound. Purple Multi-Tenant WiFi runs as a cloud overlay on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet, so you keep the hardware you own. Cabling is the largest capex line, at 38% in our new-build model, so reusing it moves the number most. A survey confirms whether existing coverage reaches inside every apartment.

Is managed WiFi cheaper than retail broadband for residents?

On running costs, yes, at 250 units and above in our model. Opex is $27.00 per door a month against a $40 retail benchmark. Fully loaded with capex, it reaches parity at 250 units and falls to $34.00 at 500. At 100 units it costs more, at $51.50. Check the benchmark against the FCC's latest pricing data, and take tax advice on sales tax before comparing.

How does WiFi cost per bed in Student Housing compare with cost per door in Multi-Family?

Cost per bed is lower, because beds in a shared suite share cabling, switching and access points. Our 400-bed dorm scenario models $515.00 capex per bed and $16.00 opex per bed a month. The 250-unit Multi-Family model comes to $1,150 capex per door. Studios cost closer to a Multi-Family door, so your mix of shared suites and studios drives the per-bed figure.

Who pays for managed WiFi in a multi-family scheme?

The operator funds the capex and the opex, and holds the connectivity contract. Residents receive WiFi as part of the lease rather than signing their own fixed-term ISP contract. How you recover the cost, through rent, an amenity fee or a separate charge, is a commercial and tax decision. Model the cost side first, then take advice on recovery and tax treatment.

Does a per-apartment private network meet security and CCPA/CPRA expectations?

Yes. Purple Identity-Based Networks give each resident a private network bubble on shared infrastructure, using iPSK or IEEE 802.1X, so one apartment's devices stay isolated from the next. Purple is ISO 27001 certified, CCPA/CPRA compliant and SOC 2 Type II certified. You control when access is issued and revoked, so a departing resident loses access at move-out.

Which access point vendors work with Purple Multi-Tenant WiFi?

Purple is hardware-agnostic. Multi-Tenant WiFi runs on Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. You can choose access points on price, performance and your installer's experience, rather than on platform lock-in. An existing property can also add per-resident networks without a rip and replace of the access layer.