How to separate guest and staff WiFi

If your customers connect to the same network as the till, the cameras or the office computers, you have a security and performance problem.

Guide · 5 min read · Updated

The problem with a single network

With one network, any connected device can "see" the others: a customer's phone, the payment terminal, the camera recorder or the accounts computer. And if guests use lots of bandwidth, the POS and orders slow down.

What is a VLAN?

A VLAN is a virtual network: over the same cabling and access points, you create several networks isolated from one another. Each WiFi network (SSID) can be mapped to a VLAN.

A typical layout

  • Guests: internet only, isolated from each other, with a speed limit.
  • Staff: access to work tools.
  • POS and payments: dedicated, prioritised network.
  • Cameras and IoT: closed network, no access from the guest network.
  • Administration: management computers and servers.

What you need

A router or firewall that supports VLANs, managed switches and professional access points. Operators' consumer routers usually don't offer enough control.

Bonus: backup connection

For businesses where the POS can't go down, you can add a backup mobile connection that takes over automatically if the main line fails.

Connect · Protect · Automate · Control

Tell us about your project

We look at what you need and propose a complete solution: one company, one point of contact, one project.