Owen Bradley A ceiling-mounted access point solves a problem that no amount of router shuffling ever will. Wi-Fi radiates outward and slightly downward from a flat antenna array, so a unit sitting on a shelf in the corner of one room wastes most of its signal on walls and furniture. Put the same radio in the centre of a ceiling and the coverage pattern lines up with the space it is meant to serve. The catch is that the job involves drilling into a ceiling, fishing cable through a void, and delivering power over that cable rather than from a nearby socket. None of it is hard, but all of it goes badly if you improvise. This walkthrough covers bracket placement, cable routing, choosing between a PoE injector and a switch, and planning channels when you install more than one access point.
Why Ceilings Beat Shelves
Three things improve the moment the radio goes overhead. Coverage becomes symmetrical, because the unit sits at the centre of the area rather than at its edge. Obstructions drop away, since the path from ceiling to head height passes over furniture, appliances, and interior walls instead of through them. And interference falls, because ceiling height puts distance between the radio and the microwave ovens, monitors, and cordless devices that clutter the 2.4 GHz band at desk level.
The trade-off is permanence. A ceiling access point is not something you nudge two feet to the left after testing. That makes the planning stage disproportionately important, and it is where most of the effort in this project should go.
Tools and Parts You Will Need
- Ceiling access point with its mounting bracket and any supplied screws or T-rail clips.
- Cat 6 solid-core cable for the in-wall run, plus a short stranded patch lead at each end.
- A PoE injector or a PoE-capable switch, matched to the access point’s power standard.
- Keystone jacks or a punch-down tool, plus an RJ45 crimper if you are terminating your own ends.
- A cable tester that confirms all eight conductors, not just continuity.
- Stud finder, drill, hole saw sized for your ceiling box or cable pass-through, and fish tape or glow rods.
- Drywall anchors rated well above the access point’s weight, a stepladder, safety glasses, and a dust mask.
- A phone or laptop with a Wi-Fi analyser app for surveying before and after.
Step by Step: Mounting and Cabling
- Survey before you drill. Walk the space with a Wi-Fi analyser and note where signal currently drops. Sketch a rough floor plan and mark the rooms that must be covered. As a rule of thumb, one access point comfortably serves an open area of roughly 1,500 square feet, and far less through masonry or multiple stud walls.
- Choose the mounting position. Aim for the centre of the coverage area, in a hallway or landing rather than tucked into a bedroom corner. Keep at least three feet of clearance from ductwork, recessed metal light housings, and structural steel, all of which reflect and block signal badly.
- Confirm what is above the ceiling. Use a stud finder and, where you can, inspect from the floor above or an attic hatch. You are looking for joists, mains cable, and plumbing. Never cut a hole you have not first checked from the other side or probed carefully.
- Plan the cable route back to the switch. The run must reach your network cabinet or router in a single unbroken length, ideally under 250 feet and absolutely under 328 feet, which is the limit for Ethernet including patch leads. Keep the route at least six inches away from mains wiring and cross it at right angles where you cannot avoid it.
- Cut the opening and fish the cable. Drill a small pilot hole first, then enlarge to your final size. Push glow rods or fish tape through the void from the access point position toward the cabinet, tape the cable to the tip, and pull it back. Leave a service loop of two to three feet coiled above the ceiling so the cable can be re-terminated later without a new run.
- Terminate both ends properly. Punch the solid-core cable down onto keystone jacks at each end rather than crimping plugs directly onto it, since solid conductors break inside moving plugs. Follow one wiring standard, usually T568B, at both ends. Keep the untwist at each pair under half an inch.
- Test the run before mounting anything. Plug in the cable tester and confirm every conductor passes with correct pairing. Fixing a miswire now takes two minutes; fixing it after the access point is screwed to the ceiling takes an afternoon.
- Fit the bracket. Screw directly into a joist wherever possible. If you must anchor into drywall alone, use toggle bolts rated far above the unit’s weight rather than plastic plugs. For suspended ceilings, use the T-rail clips supplied with the access point and rest the unit on the grid, never on the tile itself.
- Connect and mount the access point. Attach the short patch lead to the unit, tuck the slack into the void, and twist or clip the unit onto the bracket until it locks. Check it is genuinely seated; a partially engaged bracket will let go weeks later.
- Apply power and verify. Energise the PoE port or injector and watch the status light complete its boot sequence. Adopt the unit in its controller or app, apply your network name and security settings, then walk the space with the analyser again and compare against your original survey.
PoE Injector or PoE Switch
Power over Ethernet sends both data and electricity down the same cable, which is the entire reason a ceiling install is practical. There are three standards worth knowing. 802.3af delivers up to 15.4 W at the source and suits older or simpler access points. 802.3at, often called PoE+, delivers up to 30 W and covers most modern dual-band and tri-band units. 802.3bt goes higher still and is aimed at high-power hardware you are unlikely to need at home.
A single-port injector is the cheaper route for one access point. It sits beside your router, takes a patch lead in and sends powered data out. For two or more units, a PoE switch is neater, cheaper per port, and removes the tangle of separate power bricks. Our roundup of the best PoE routers covers models that supply power directly, and the best switches list includes PoE-capable options with enough budget for several access points at once.
Whichever you choose, check the total power budget, not just the per-port rating. A switch advertising 30 W per port may only offer 60 W across all of them, which caps you at two PoE+ devices regardless of how many ports it has. Avoid unbranded passive injectors that push voltage down the line without negotiating; they can destroy equipment that was expecting a standards-compliant handshake.
Planning Channels for Multiple Access Points
Two access points on the same channel interfere with each other worse than a single unit covering the area alone. On 2.4 GHz only channels 1, 6, and 11 do not overlap, so alternate between them and never use anything in between. On 5 GHz there is far more room, so give each unit a distinct channel and keep width at 40 MHz or 80 MHz rather than the maximum, which trades a little peak speed for much better resistance to interference.
Reduce transmit power too. It feels wrong, but turning every unit to maximum makes devices cling to a distant access point instead of switching to the nearer one. Lower power creates cleaner boundaries and faster roaming. Aim for an overlap of roughly 15 to 20 percent between coverage areas, which is enough for a seamless handoff without the two radios fighting.
Use the same network name and password on every unit so devices roam automatically. If you are extending coverage across a big footprint, our guides to the best home Wi-Fi access points and the best routers for large homes explain how many units a given layout usually needs, while the best access point routers suit setups where one device handles both roles.
Safety Notes
Switch off the circuit at the consumer unit before cutting into any ceiling where lighting cable may run. PoE voltage itself is low and not dangerous to touch, but mains cable sharing the same void absolutely is. Wear safety glasses and a dust mask when cutting drywall or plaster, keep the ladder on level ground with a second person steadying it, and never lean beyond the stiles. In an attic, step only on joists. If your ceiling is old lath and plaster or you suspect asbestos in the board, stop and get a professional opinion before disturbing it.
Common Mistakes
- Mounting above a metal duct or recessed light housing. Metal directly behind the antenna cripples the coverage pattern.
- Crimping plugs onto solid-core cable. The conductors fracture with movement and the link fails intermittently months later.
- Skipping the cable test. A single crossed pair drops a gigabit link to 100 Mbps or kills PoE entirely.
- Using a passive injector. Non-negotiating power can damage the access point permanently.
- Running all radios at full power. It creates sticky clients and worse roaming, not better coverage.
- Leaving no service loop. A cable cut exactly to length cannot be re-terminated when a connector fails.
Frequently Asked Questions
Can I use Cat 5e instead of Cat 6?
Yes for gigabit links and standard PoE. Cat 6 costs slightly more and gives better headroom for multi-gigabit speeds later, which matters when the cable is buried in a ceiling you would rather not open again.
How far can the PoE cable run?
328 feet total, including the patch leads at both ends. Beyond that both data and power degrade. For longer distances you need a powered switch positioned partway along the route.
Do I still need my old router?
Usually yes. The access point provides Wi-Fi only; the router still handles internet connection, addressing, and firewalling. Many people disable the router’s own Wi-Fi once the ceiling units are live.
How many access points does an average home need?
One well-placed ceiling unit covers most single-storey homes. Two-storey properties or houses with thick masonry walls typically need one per floor, positioned near the centre of each level rather than stacked directly above one another.
Final Thoughts
Getting a ceiling access point right is mostly about the decisions you make before the drill comes out. Survey the space, pick a central position clear of metal, check what sits above the ceiling, run good cable with a service loop, and test it before anything gets mounted. Match your PoE standard to the hardware, watch the switch’s total power budget rather than the per-port figure, and set channels and transmit power deliberately if you install more than one unit. Do that and the result is coverage that simply works everywhere, with no visible hardware and no cable trailing down a wall.
