Three-Tier Campus Network Architecture

The three-tier campus architecture (access/distribution/core) is Cisco's longstanding model, adopted by 80% of enterprises over the past 25 years. It structures the network into 3 layers with distinct roles. It remains relevant in 2026 despite the emergence of SD-Access and collapsed-core designs. Complete guide.

The 3 layers

Access layer

• Connects endpoints: computers, IP phones, WiFi APs, printers, and cameras
• Ports: 24-48 GbE per switch, PoE+/UPOE for endpoints
• Features: VLAN, 802.1X, port security, DHCP snooping
• Typical equipment: Cisco Catalyst 9200/9300, Aruba CX 6200/6300, FortiSwitch-148F

Distribution layer (aggregation)

• Aggregates access switches within a building or area
• L3 routing: gateway for VLANs, OSPF/EIGRP
• Policies: ACL, QoS, inter-VLAN filtering
• Equipment: Cisco Catalyst 9500, Aruba CX 8320/8325, Juniper EX4650
• Redundancy: 2 distribution switches per area using VSS/StackWise Virtual

Core layer

• High-speed, low-latency, transport-only layer
• No policies: delegated to the distribution layer
• 40G/100G uplinks to the distribution layer
• Equipment: Cisco Catalyst 9500/9600, Arista 7280, Juniper QFX10000

Advantages

• Clear roles and fault-domain isolation
• Redundancy at every layer (2N)
• Horizontal scalability: adding a building means adding an access stack and distribution layer
• Fast STP/OSPF convergence with BFD

Disadvantages

• STP is required at the access layer (loop risk)
• Spanning Tree underutilizes bandwidth (blocked links)
• Configuration complexity (many configuration points)
• Less agile than SD-Access/SDN

Modern architecture options

Collapsed core (2-tier)

Combines the distribution and core layers for small and medium-sized campuses with <1500 users. It reduces hardware costs and is suitable for most SMBs and mid-market organizations.

SD-Access (Cisco)

Cisco fabric based on LISP + VXLAN + Cisco ISE. Eliminates STP. Provides dynamic segmentation using SGTs. Requires DNA Advantage.

Campus EVPN-VXLAN

Growing adoption: an EVPN-based campus fabric similar to data center deployments. Simpler and multi-vendor (Juniper Apstra, Arista CV, Aruba AOS10).

Three-tier sizing

SMB with 100 users

Two-tier collapsed core: 2× Catalyst 9500-24X in VSS for core+distribution + 3× Catalyst 9300-48P for access. Budget: ~€40,000 excluding tax.

Multi-building mid-market organization with 1500 users

Full three-tier architecture: 2× Catalyst 9600 for the core + 6× Catalyst 9500 for distribution + 30× Catalyst 9300 for access. Budget: ~€450,000 excluding tax.

Order from OPTINOC

Turnkey campus architecture: audit, three-tier or collapsed-core design, and deployment. Catalyst/Aruba/Juniper. Quote within 48 hours.