A hospital Wi-Fi outage isn't a helpdesk ticket — it's a nurse's workstation-on-wheels losing its EMR connection mid-round, or a patient monitor alarm that doesn't reach the right badge phone. That's the bar for hospital wireless: it has to work, every time, for applications that are genuinely life-critical.
Building a network that clears that bar takes more than scaling up your standard office Wi-Fi design. Here's what actually goes into a high-availability wireless network for Australian healthcare — from RF planning and coverage grading, through redundancy and security, to planning for what comes next.
Australian hospitals put more strain on wireless design than almost any other environment we work in. Your network has to support electronic medical records (EMR), voice communications, real-time location services (RTLS), biomedical equipment, and patient monitoring — often over the same access points, at the same time, without interruption.
Healthcare environments are also spectrally noisy. Microwave ovens in staff kitchenettes, older DECT phone systems, motion sensors, and neighbouring biomedical equipment all compete for airtime in the 2.4GHz band. The 5GHz and 6GHz bands offer cleaner spectrum, but you'll need more access points to get the same coverage.
And clinical workflows demand mobility. Nurses push workstations on wheels (WoWs) between patient bays, physicians round with tablets, and biomedical engineers move infusion pumps and monitoring equipment from room to room. Your network needs fast roaming, so active sessions survive as devices move between access points.
ASSOCIATED BLOGS:
Hospital buildings present radio frequency (RF) challenges that standard office design tools can't accurately model. Lead-lined radiology rooms, metal fire doors, lift cores, and concrete construction all shape signal propagation in ways you can really only validate on site.
Pro tip: we've pulled up a decades-old hospital floor plan that showed a standard partition wall, only to find 40cm of poured concrete behind it once we got a site survey done. Always validate a predictive design with an on-site survey before you commit to AP counts.
Modern hospitals also mix glass-walled consultation rooms with solid concrete ward blocks in the same wing. Your design needs to handle that transition and keep coverage consistent as staff and patients move between the two.
Not every part of your hospital needs the same access point density. Matching the Wi-Fi grade to what each zone actually does keeps both performance and cost in check:
Keep the grade consistent across a single floor. Mixing densities creates roaming problems, because devices have to cope with wildly different access point spacing as they move around.
Mounting height matters more than people expect. An access point mounted too high can have great line-of-sight coverage and still connect poorly to a handheld device held at waist height. We typically specify mounting heights between 2.4 and 3 metres in clinical areas to balance the two.
ASSOCIATED BLOGS:
High availability means redundancy at every layer of your wireless infrastructure, not just the controllers. A single failed component shouldn't take down clinical Wi-Fi, or force emergency maintenance during patient care hours.
When the active controller fails, the standby takes over automatically. On platforms like Cisco's Catalyst 9800, this uses Stateful Switchover (SSO) — not to be confused with the identity SSO your users log in with. The pair mirrors AP and client state continuously over a dedicated Redundancy Port, so joined access points don't drop into a discovery state and clients don't get bounced mid-session.
Pro tip: that dedicated Redundancy Port isn't optional. Skip it and you've built a warm spare, not a true stateful pair — you'll still get an outage on switchover, just a shorter one.
For mission-critical sites, add a third controller as a hot spare. That way you keep full redundancy even while a failed controller is out for repair.
Redundancy doesn't stop at the controller. It needs to run through every component between your access points and the wired network:
Then test it. Deliberately fail switches, controllers, and uplinks before go-live, and confirm the failover is invisible to clinical applications — not just that the standby comes up.
Most enterprise access points run on Power over Ethernet (PoE) from the switch. Lose the switch's power, and every AP hanging off it goes dark with it — so power redundancy for switches in clinical areas matters just as much as network redundancy.
Uninterruptible power supplies (UPS) cover short outages. Generators handle the extended ones. Size your UPS runtime to bridge the gap until the generator starts and stabilises, not just until it starts.
ASSOCIATED BLOGS:
Hospital networks carry protected health information, and that puts real weight behind your wireless security architecture. It has to protect patient data while still supporting the wide mix of devices healthcare environments bring through the door.
WPA3-Enterprise with 802.1X ties network access to individual user credentials rather than a shared passphrase. Clinical staff authenticate with their hospital login, and that access gets logged for audit purposes.
Certificate-based authentication goes a step further for managed devices, authenticating the device itself before the user even logs in. Your IT team pushes certificates to corporate laptops and clinical workstations as part of the build.
We deploy authentication platforms including Cisco ISE and Aruba ClearPass to integrate with a hospital's identity systems and keep access policy consistent across wired and wireless.
Policy-based segmentation lets you set access rules by device type, user role, and authentication method. A clinician's badge phone lands on the voice virtual LAN (VLAN); a patient's personal device lands on the guest VLAN. Both can use the very same access points without ever seeing each other's traffic.
Unauthorised access points are a real risk, both for security and interference. Enterprise wireless systems scan continuously for rogue devices and can contain them, blocking clients from connecting.
Run regular security audits to confirm only authorised access points are live in your facility. Rogue detection also catches staff who've plugged in a personal Wi-Fi router that could quietly bypass your controls.
ASSOCIATED BLOGS:
Your hospital's wireless demands won't sit still. New clinical applications, more connected devices, and building expansions all add load over time — designing headroom in now avoids a costly retrofit later.
The number of wireless devices per staff member keeps climbing. A clinician might carry a laptop, phone, and badge; a single patient room might have several monitoring devices reporting at once. Plan your capacity for where that trajectory is heading, not just where it sits today.
The same goes for your IP addressing. Running out of address space in a clinical VLAN forces a disruptive re-addressing exercise during production hours — allocate generously upfront.
6GHz-capable access points also draw more power than older models. Check your switches can deliver the PoE wattage these APs need, or budget for power injectors where they can't.
Wi-Fi 8 (802.11bn) is still working its way through IEEE standardisation, with ratification not expected until 2028 and enterprise-grade hardware further out again. Worth knowing it's coming, but not something to design around yet — the safer bet is cabling and switch capacity with genuine headroom, so whatever arrives next has somewhere to plug in.
Hospitals are always adding wings or repurposing space. Design your wireless in modular blocks you can replicate for a new area, rather than redesigning the whole network every time the floor plan changes.
Document your design standards properly. When the next building opens, your design team should be able to apply the same principles without re-learning your requirements from scratch.
ASSOCIATED BLOGS:
Hospital Wi-Fi has to earn its keep every day, because the applications riding on it — EMR access, voice, RTLS, patient monitoring — are ones your clinical staff genuinely can't work around. Getting there means treating RF realism, redundancy, security segmentation, and growth headroom as core design requirements, not extras bolted on afterwards.
For context: a typical large hospital project runs three to six months from initial site surveys through to validated go-live. And if you're working with an existing network rather than starting fresh, the good news is most can be lifted to high-availability standard — extra controllers, denser AP coverage, better authentication — without a full rebuild.
We run Network Assessments to give your hospital's wireless environment a clear health check, from RF coverage through to redundancy and security posture. If that's useful, get in touch with the IPTel team.
ASSOCIATED ARTICLE: