Networking Routers/Switches and Access Points

in technology •  6 years ago 

Today I'm going to be a geek and talk tech. Specifically Networking. I assume most of you know what a network router is? Most people would have such a router at home, to provide internet connectivity to all your home PCs and equipment. In fact, most if not all have a wireless router which also provides internet to your mobile devices like iPads and smartphones.
09ik6o7xve.png

A typical diagram for your home network :

uy6ej8cwf7.png

Most people just setup the router with a SSID and password and the mobile devices and wireless connect to the internet and you're all happy.

But consider if you now want to run a business - example, a Cafe, and you want to provide wireless internet for your paying customers... would you set up with the same equipment you did for your home?
q8jz125eok.png

Originally, I thought it would work, but in practice there are alot more issues to consider.

Can one router cover the entire cafe/restaurant?
Is the router robust, and capable of handling all the customers? Do I need access points to expand coverage. How do I run the cables to these additional devices? What about power for these devices? If they get "stuck/hung", how do I reset these devices if they were mounted on the ceiling?

These are all valid questions. And if your cafe has an outdoor aspect, what about weather resistant equipment?

Well, hence there are purposely business built equipment ranging from switches, routers, access points that will meet every need. But there is the cost aspect. As a small business, you'd want to keep initial cost low.


So after my initial idea of "Any home equipment" will do for a small cafe. I have nailed down two possible route/brands for more "business"-geared equipment, but keeping cost down.

Searching the internet, everyone seem to be using a brand called Unbiquiti Networks . They have a good range of products using the Unifi branding....
g6fyd9oz0d.png

I would look at their range

For the budget conscious, go with TP-Links EAP-225
prn5qvhlpy.png

They offer feature like Captive Portal and what not, that other routers do not. They also take PoE (Power over Ethernet) so you can simplify your wiring (you do need a switch that is PoE compliant). To give you an idea how much it cost today (16 Mar 2019), for a 8-port switch wth 4 ports PoE capable (802.11af), S$90. EAP-225 S$149
so, 2x EAP-225 plus the switch is less than S$400.
The two access point should provide sufficient coverage for the small cafe, and kind of a redundant feature if one Access Point failed, its not a total crap out. (This is assuming the router is already provided by the service provider)

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  

I have had the opportunity to audit a few small business networks. The security of the network is often not even thought of. At the very least, you really do not want to allow your guests onto the same network that your point-of-sale systems are attached to. That is, the computers handling the payments. Even if those are connected via ethernet, they can still be logically on the same network.

Ubiquiti's guest networks, in the few that I have tested, were truly separated from the main network with out any additional configuration. They're worth the money. The other small business equipment will usually spin up an additional wireless network, but someone with the right know-how can still reach into the main networks and attack them just the same; Guest networks are often a free entry point.

Did you have a chance to look at TP-Link's EAP AP ? I think they should be in the same class as Ubiquiti...

Not that I can recall. I wasn't trying to imply that TP-Link was subpar, but rather that I trust Ubiquiti's equipment based on recent experience. TP-Link could be just as good, and it is also possible that only the models of Ubiquiti that I happened to test were the only hardened models.

You can do a basic test by connecting one computer the secured network, and one computer to the guest network and attempt to ping the 'secure computer' form the guest. If you're able to ping successfully, it isn't fully separated. It isn't a thorough test, and just because a ping fails doesn't mean it is truly separated, but it is a great place to start. Most cheaper equipment fails this test out of the box. Most all of it can be reconfigured to be locked down tighter, but that can be beyond the expertise of their target consumers.

Ok... if I get the chance to test it, will do and post the results here ;)
Ubiquiti's range is quite widely adopted.. so they must be doing something right.

I'd love to hear it! It is a problem that is slowing getting taken care of across the board (because it is a requirement of Visa/Master Card to have guests separate), but it is a problem I commonly see in various ways. Every piece of technology will have problems :) That's just part of the game. We find them and fix them. Ubiquiti had some problems recently announced. https://www.zdnet.com/article/over-485000-ubiquiti-devices-vulnerable-to-new-attack/

Yeah, Ubiquiti just kind of popped up out of nowhere and started making a big impact on the market it seemed. I really only hear good things about them.

Bro. Sos required

!source

Posted using Partiko Android