
FTTH Network • Resort fiber
Fiber Network for Resorts: Spread-Out Sites, Coastal Weather and Guest/Back-of-House Separation
A hotel is one building. A resort is a village: villas scattered across a hillside, a pool bar 300 metres from the lobby, a beach club on the other side of a road, and a salt wind blowing over all of it. The fiber that serves a resort has three jobs a city-block network never has: reach every corner of a spread-out site, survive the coast, and keep the guest’s phone away from the cash register. This page covers all three.
Quick answer: A resort fiber network works best as a star: a back-of-house core, buried duct trunks to splitter cabinets near each villa cluster, pool and beach area, then short drops to endpoints. Use aerial ADSS only where trenching is not possible. Specify 316L stainless or fiberglass enclosures with an IP66 or better rating for the coast, protect against lightning with all-dielectric cable, bonding and surge protection, and put guest, staff, POS and camera traffic on separate VLANs carried on the same fiber, with a firewall denying routing between them. Distance is rarely the limit: GPON reaches 20 km, while copper stops at 100 m.
In this page, aerial means cable hung on poles. ADSS is all-dielectric self-supporting cable, an aerial fiber cable with no metal in it. Buried covers cable in conduit (duct) and direct-buried armoured cable. A splitter cabinet is an outdoor box that holds passive splitters and fiber joints. A VLAN is a virtual LAN that keeps traffic from different zones apart on the same switches and fiber. POS means point-of-sale: the card terminals and systems in restaurants, bars and shops.
How do you link villas, pools and beach areas across a large resort site?
Build a star from the back-of-house core, with buried duct trunks to splitter cabinets and short drops from there. The passive splitters in each cabinet need no power, so the only powered equipment sits where you can service it: the core and the endpoints. Distance is rarely the constraint. The cable route is. Where you can trench, the same rules as underground FTTH network design apply: leave spare duct for the next expansion and repair.
Aerial or buried?
Both can work. The right choice depends on soil, existing poles and how exposed the route is to storms. The table sums up what the outside-plant sources say, with our resort recommendation in the last column. For thinly spread villas, the trade-offs are close to FTTH design for low-density areas.
| Method | Strengths | Limits | Resort use |
|---|---|---|---|
| Buried duct (conduit) | Spare innerducts let you add cable later; high pulling tension; splices kept in pedestals or vaults | Needs trenching or boring; bend radius and pulling limits apply | Default for trunks and anything you may expand |
| Direct-buried armoured | No conduit cost; armour resists rodents and crushing | Best in soil with few rocks; metallic armour must be grounded and bonded; no spare capacity | Short, open-ground drops to villas where you will not add cable |
| Aerial ADSS | No metal, so no bonding or grounding; fast on existing poles; spans to about 610 m | Costs about 3× standard aerial cable; wind and ice beyond the design load can cause an outage | Hard crossings only: roads, ravines, water edges |
| Lashed to a messenger | Higher fiber counts; messenger shields the cable; cheapest where strand already exists | Messenger and armour need bonding and grounding; not built for large wind and ice loads | Only on existing, sound strand |
The ADSS facts come from ISE Magazine’s guide to aerial cable types (2019), which also notes that if a weather event exceeds the design wind and ice loadings, “this can cause a service outage.” An earlier ISE comparison (first published 2013) adds that loose-tube cable lashed to a strand is not designed for large wind and ice tensile loads, while ADSS can carry loads up to thousands of pounds depending on the design. The buried-cable facts come from the Fiber Optic Association’s outside-plant guide. One resort-specific rule of our own: never hang cable from trees or building roofs. They move, rot and get cut.
Distance limits that matter
Fiber’s reach is generous. ITwissen’s GPON summary gives 20 km for the upstream rates of ITU-T G.984 and a splitter of 32 or 64 outputs. A resort site is almost always well inside that, so reach is not the limit. Copper is. A twisted-pair Ethernet channel, including PoE, stops at 100 m, which is why a pool bar, a beach club or a far villa cluster needs fiber to its door, with an ONT or switch placed near the endpoint. Fiber’s real limit is the optical budget: every splice, connector and splitter takes loss, so count them across the whole route before you fix the split ratio.
Outdoor-rated gear
Any equipment outside needs an ingress rating under IEC 60529. As Zenitel’s explainer puts it, IP66 means dust-tight and protected against high-pressure water jets from any direction. IP67 is equally dust-tight but covers temporary immersion between 15 cm and 1 m instead. For splitter cabinets and outdoor ONTs, IP66 is the practical minimum; choose IP67 where water can pool, such as a ground-level handhole.
Choose this if
Choose buried duct if…
- The route is long, exposed to storms or likely to grow.
- You can trench or bore the ground, and soil is workable.
- You want spare capacity for future villas and services.
- You want to avoid wind and ice loading on the cable.
Choose aerial ADSS if…
- You must cross a road, ravine or water edge where trenching is not possible.
- Sound poles already exist and the span is within the cable’s design.
- You want a no-metal cable that needs no bonding.
- The design wind and ice loads match your site, and you can accept the risk beyond them.
What fiber network equipment survives salt air, humidity, storms and lightning?
Glass fiber is the easy part. The enclosures, fasteners, glands and any metal in the path are what fail. A coastal resort needs equipment chosen for chlorides and condensation, a cable route sized for storms, and a lightning plan that keeps metal out of the signal path. If you need to explain the result to owners, our look at how reliable fiber internet really is covers the uptime question in plain terms.
The numbers above come from one vendor knowledge-base article on marine junction boxes. It describes itself as general information, so treat it as a guide and confirm against the datasheet of the enclosure you buy. Its points line up with common practice: specify 316L, not 304; use A4-80 stainless fasteners; use stainless or nickel-plated brass glands with EPDM seals, because nylon glands degrade quickly in salt spray; slope enclosure tops at least 15° so water does not pool; and add anti-condensation heating when the temperature swing exceeds 15°C.
| Hazard | What it does | What to specify |
|---|---|---|
| Salt air | Chlorides attack metal enclosures, fasteners and glands | 316L stainless or FRP enclosures; A4-80 fasteners; stainless or nickel-plated brass glands with EPDM seals; check salt-mist test data (IEC 60068-2-52) |
| Humidity | Condensation forms inside sealed boxes when temperature swings | Sealed glands, a heater where the swing exceeds 15°C, desiccant in rarely opened boxes; water-blocked cable (gel or dry tape) |
| Storm wind and ice | Loads beyond the cable’s design rating can cause an outage | Buried duct on exposed routes; ADSS rated for your site loads where aerial is unavoidable; no tree attachments |
| Lightning | Surges travel along any metal path into the building | All-dielectric cable; ground and bond any armour or strength members; surge protection where copper or mains enters; short outdoor copper runs |
For lightning, start from the cable. ADSS has no metal, so ISE notes it needs no bonding or grounding. Armoured cable has a metallic layer that, per the Fiber Optic Association, must be grounded and bonded. The ITU-T publishes guidance on protecting telecom lines against lightning: K.47 covers protection of telecommunication lines against direct lightning flashes (edition May 2012), and the ITU lists the older K.25 on optical fibre cables as withdrawn, with its requirements incorporated into K.47. Ask your designer which edition and national code they follow. The practical rule is simple: the weak point is usually copper, such as PoE runs to a pool-side camera, not the fiber.
Plan the storm message and the inspection checklist now. After a storm, guests and staff want to know what is down and when it returns. TheWriter.id’s free Outage Message Generator drafts copy-ready notices for email, SMS and status pages. For the six-monthly coastal inspection, the Technician Checklist Generator builds a checklist technicians can follow the same way every time.
How do you separate POS, cameras, staff and guest traffic on one fiber backbone?
Give each zone its own VLAN on the shared fiber, then control routing at a firewall that denies traffic between zones by default. One fiber backbone can carry all four lanes. What matters is where the lanes are separated and who can cross them. IEEE 802.1Q is the standard that specifies virtual LANs and VLAN bridges.
Segmentation is not only a security habit. According to Purple’s guide to PCI DSS for hotel Wi-Fi, a vendor source, guest Wi-Fi is treated as in scope until it is shown to be segmented from the cardholder data environment, and segmentation is the practical way to reduce scope. The PCI Security Standards Council’s supplement (September 2024) covers scoping and segmentation in modern network designs, and states that it is supplemental and does not replace any PCI standard. Confirm your design with your assessor.
| Zone | What is on it | Rule of thumb |
|---|---|---|
| Guest | Villa and public Wi-Fi, in-room devices, guest TVs | Internet only; client isolation on; no route to any other zone |
| Staff | Back-office PCs, property management, staff Wi-Fi | Internet and staff apps; limited, named access to POS and cameras |
| POS and payments | Card terminals and POS servers in restaurants, bars, spa and shops | Only the payment processor and POS hosts; nothing from guest or camera zones |
| Cameras and security | CCTV, access control, the recorder | Cameras reach the recorder only; no internet; view-only access for authorised staff |
Where to separate on a PON
- Carry zones as VLANs end to end. Use a PON ONT or switch that supports multiple VLANs, so every zone rides the same fiber to the same outlet without being mixed.
- Enforce rules at one firewall. Terminate the VLANs at the back-of-house core, and deny routing between zones by default. Allow only named exceptions.
- Give POS its own path where audit demands. A dedicated ONT or port for the payment zone is a simple way to prove separation.
- Isolate cameras. Put them on their own VLAN reaching only the recorder, and check that power over copper stays inside the building or in short, surge-protected runs.
- Test the separation. From a guest device, try to reach a POS or camera address, and record that it fails. Repeat after every change.
One line in a network brief, written two ways (illustrative)
What should you confirm before building a resort fiber network?
Confirm the route, the gear, the weather plan and the zones, in that order. This list turns the sections above into questions for a designer or integrator.
- Which routes can be trenched or bored, and which need aerial ADSS?
- Is the trunk in duct with spare innerducts for future villas?
- What is the optical budget for the longest route, counting every splice, connector and splitter?
- Are all outdoor boxes IP66 or better, in 316L stainless or FRP, with stainless fasteners and glands?
- Are boxes mounted at least 500 mm above grade, sloped to shed water, and heated or desiccated where needed?
- Is the cable all-dielectric where possible, with armour bonded and surge protection where copper or mains enters?
- Are outdoor copper and PoE runs short, and is the rest done in fiber?
- Are guest, staff, POS and camera traffic on separate VLANs, with a firewall denying routing between them?
- Who inspects coastal equipment, how often, and from which checklist?
Fiber network for resorts: frequently asked questions
What is the best fiber layout for a large resort?
A star of buried duct trunks from a back-of-house core to splitter cabinets near each villa cluster, pool area and beach club, with short drops to each endpoint. Passive splitters need no power in the field. Use aerial ADSS only where trenching is not possible, and size every route against the optical budget.
Should resort fiber be aerial or buried?
Buried duct is the safer default for coastal, storm-exposed sites because it avoids wind and ice loads, and spare innerducts let you add cable later. Aerial ADSS suits point-to-point crossings where trenching is not possible. It is all-dielectric, so it needs no bonding or grounding, but a storm beyond its design wind and ice loading can cause an outage.
How far can fiber run on a resort site?
GPON is specified for up to 20 km in ITU-T G.984, so reach is rarely the limit on a resort site. Copper is: Ethernet and PoE channels are limited to 100 m. That is why long runs to pools and beach areas should be fiber, with the ONT or switch placed near the endpoint.
What outdoor rating should resort network equipment have?
IP66 means dust-tight and protected against high-pressure water jets. IP67 means dust-tight and protected against temporary immersion between 15 cm and 1 m. On a coastal site the enclosure material matters as much as the rating: specify 316L stainless or fiberglass, and check the datasheet for salt-mist testing.
How do you protect resort fiber from lightning?
Use all-dielectric cable where you can, because it carries no metallic path for a surge. Ground and bond any metallic armor or strength members, add surge protection where copper or mains enters a building, and keep outdoor copper runs short. ITU-T K.47 covers protection of telecommunication lines against direct lightning flashes.
How do you separate guest, POS, staff and camera traffic on one fiber?
Put each on its own VLAN (IEEE 802.1Q), carry them all on the same fiber backbone, and enforce rules at a firewall that denies routing between zones by default. Under PCI DSS, guest Wi-Fi counts as in scope until it is shown to be segmented from the payment environment, so segmentation also reduces audit scope. Confirm your design with your assessor.
Sources
- ISE Magazine: Don’t Leave It Up in the Air, telecom aerial cable applications and types (August 2019)
- ISE Magazine: Aerial deployment comparison, ADSS and loose tube cable (first published 2013, republished December 2016)
- Fiber Optic Association: Outside plant cable types
- ITwissen: gigabit PON (GPON), line rates, reach and splitter outputs
- Zenitel: IP66 explained
- Industrial Monitor Direct: Marine-grade junction box selection for coastal installations (vendor knowledge base)
- ITU-T: Recommendation K.47, Protection of telecommunication lines against direct lightning flashes (05/2012)
- ITU-T: Recommendation K.25, Protection of optical fibre cables (withdrawn 2013, incorporated into K.47)
- IEEE 802.1 Working Group: 802.1Q, Virtual LANs and VLAN Bridges
- Purple: PCI DSS 4.0.1 for hotel WiFi (vendor guide)
- PCI Security Standards Council: Information supplement on PCI DSS scoping and segmentation (September 2024)
Figures 1 to 6, the comparison and rules tables and the checklists are our illustrations and recommendations, not published standards. The ISE articles (2019, 2016) and the vendor sources (Industrial Monitor Direct, Purple) are older or commercial, so confirm figures against manufacturer datasheets and your assessor. The 100 m twisted-pair limit is the IEEE 802.3 channel length. Enclosure life figures are a vendor’s for a small marine box. Example VLAN IDs are illustrative.
