Technical WiFi guides
Deep, expert-led technical guides on guest WiFi, analytics, captive portals, and venue technology.
Ready to move from research to rollout? See how Purple's captive portal software handles branded guest sign-in, analytics, and compliance in one platform.
466 guides
Airport WiFi platform providers: what to require in the RFP
You will be able to choose between a hardware-agnostic cloud overlay, a bundled managed service and a concession model before writing scoring criteria. You can then set testable RFP clauses for peak concurrency, Passpoint and OpenRoaming, accessible multilingual portals, CCPA/CPRA, zone dwell analytics, app integration and service levels. A weighted table scores each vendor only on documented evidence.
Paid WiFi monetization: vouchers, tiered access and payment gateways compared
Compare five ways to charge for WiFi - vouchers, tiered access, hosted card gateways, PMS posting and sponsorship - on PCI DSS scope, refund route, network requirements and running cost. You will be able to match your venue's money flow to a model and model the break-even against free WiFi with first-party data capture.
Managed WiFi for serviced offices and coworking: tenant isolation and billing
You will be able to choose a tenant isolation model for your serviced office or coworking space and keep the estate to three SSIDs. You can then design the VLANs and firewall rules behind it. You will also be able to set billing tiers the network enforces and trigger access changes from your workspace management system.
Footfall analytics for shopping centers: WiFi, cameras and sensors compared
You will be able to decide which footfall method your shopping center needs first: entrance counters for a defensible door count, WiFi presence analytics for dwell and zone movement, or mobile data panels for catchment. You can also cost each option per entrance, meet CCPA/CPRA duties and benchmark against national footfall series.
CCPA/CPRA data retention for shared WiFi operators: how long you can keep guest login data and network logs
Set a documented retention period for each category of shared WiFi data, from connection metadata to RADIUS accounting logs, and justify it under the TCPA and CAN-SPAM. You will also be able to decide whether you are a controller or processor for each tenant, and whether federal data retention laws actually oblige you to keep records for 12 months.
Multi-site guest WiFi for franchises: central control with local branding
You will be able to choose an operating model for guest WiFi across your franchise estate and decide who controls guest data under the TCPA and CAN-SPAM. You can then lock brand and consent centrally, give franchisees venue-scoped access and plan a vendor-grouped rollout. The approach runs as a cloud overlay on mixed Cisco Meraki, HPE Aruba, Ruckus and Ubiquiti UniFi hardware.
Per-unit VLAN and PSK architecture: a design walkthrough for MDU networks
You will be able to choose between a VLAN per apartment and policy carried by each resident's unique key, using four factors: wired ports, churn, segment count and hardware support. You can then size DHCP scopes, count segments against your real platform limits and estimate running cost for Multi-Family, Student Housing and aparthotel sites.
City council public WiFi providers: procurement routes and what to specify
You will be able to pick the right procurement route for city public WiFi, splitting the cloud platform from the physical build. You will also be able to write a specification bidders can price against and you can test at handover. It covers coverage, peak concurrency, IWF filtering, the ADA and Section 508, a CCPA/CPRA lawful basis and evidence-based supplier scoring.
Per-resident WiFi billing for MDU and Student Housing: platform options
You will be able to choose between bulk inclusion, landlord retail, third-party ISP retail and base-plus-upgrade WiFi billing for MDU and Student Housing properties. You can then check the US tax position of each model. You will also know which per-unit key, PMS integration and automatic revocation features to require in writing before you shortlist a platform.
Retrofit vs new build: planning MDU WiFi cabling and access point placement
Decide whether an apartment building needs corridor or in-unit access points, and plan the cabling, risers, fire-stopping and PoE budget each path demands. You will be able to scope an occupied-building retrofit around access limits, or bring network design into a new build by AIA Phase 3 so every AP sits within the 90-meter permanent link.
HIPAA Technical Safeguards for Hospital Staff WiFi: What the Security Rule Actually Requires
You will be able to map each of the five HIPAA technical safeguard standards at 45 CFR 164.312 to a specific staff WiFi control. You can then decide which SSID configurations survive an OCR audit, retire shared passphrases and assemble the evidence an auditor asks for before your next risk analysis.
Managed WiFi cost per door: a worked model for MDU operators
You will be able to build a defensible managed WiFi cost per door for an MDU property, line by line across cabling, access points, switching, licensing and support. You can then normalize managed service bids, test how scale and asset lives move the figure, and compare the fully loaded monthly cost with a retail broadband benchmark.
802.11r and 802.11k on Android: fast roaming deployment on Cisco Meraki, HPE Aruba and Ubiquiti UniFi
You will be able to decide whether to enable 802.11r, 802.11k and 802.11v for your Android fleet on Cisco Meraki, HPE Aruba or Ubiquiti UniFi, and which 802.11r strategy to run. You will also be able to pilot the change safely, confirm each handset model in a packet capture and fix the six most common association failures.
Cisco Meraki 802.11r adaptive vs enabled: fixing roaming on MR access points
You will be able to choose between disabled, enabled and adaptive 802.11r on each Cisco Meraki MR SSID, based on your device mix and security mode. You will also diagnose join failures and slow roams with a test SSID, the event log and a packet capture, then segment SSIDs by device class.
Microsoft Cloud PKI for WiFi: EAP-TLS certificate deployment with Intune and Entra ID
You will be able to decide whether Microsoft Cloud PKI, a Cloud PKI root or bring your own CA (BYOCA) fits your estate. You can then deploy EAP-TLS WiFi certificates to Intune-managed devices without NDES. The guide also covers making RADIUS trust the chain, revoking certificates through the CRL and fixing the eight most common failures.
FortiGate captive portal setup with an external portal server
You will be able to configure a FortiGate to enforce an external captive portal hosted by Purple, with RADIUS authentication and accounting, a working exempt list and a trusted certificate. You can also decide between the built-in and external portal, test on real devices and fix the faults that most often block guest logins.
Configuring 802.1X on Juniper Mist with cloud RADIUS
You will be able to configure a WPA2 or WPA3-Enterprise WLAN on Juniper Mist that authenticates against cloud RADIUS, decide between UDP RADIUS, RadSec and a Mist Edge proxy, and map RADIUS attributes to dynamic VLANs. You will also know where Mist's client insights timeline and Marvis show exactly where a failed authentication broke.
White label captive portal software: what MSPs and resellers should check before signing
You will be able to choose between full white label, co-branded and referral models, then score vendors on multi-tenancy, branding depth, hardware coverage, billing, TCPA and CAN-SPAM consent records, APIs and support escalation. The guide ends with 15 RFP questions and a red-flag table you can send to every shortlisted vendor before you sign.
Captive portal pricing compared: per site, per access point and per user models
Decide which captive portal pricing model fits your estate: per site, per access point, per user or session, or bundled with hardware. Apply your venue count, AP count and monthly logins to every quote. Then add SMS, support, integration, compliance and exit costs, and rank vendors on a single three-year total.
Network topology mapping guide: building a live device map from CDP, LLDP, and MTR
You will be able to build a network map that stays current by merging CDP and LLDP neighbor tables, MTR path hops and a LAN subnet sweep. You can then check the map for accuracy, fix common discovery faults and decide whether a free, paid or discovery-driven mapper fits your estate.
Network device management guide: SNMP, TFTP, and syslog without a full NMS
You will be able to manage a small switch and router estate with SNMP polling, TFTP config backups and a syslog and trap receiver run from one management host. You can also decide when that lightweight setup is enough, and when continuous monitoring, trend history or multi-site scale justify a full NMS.
How Staff WiFi Helps You Meet ISO/IEC 27001: Mapping Annex A Controls to Your Wireless Network
You will be able to decide whether your staff WiFi can evidence 12 ISO/IEC 27001:2022 Annex A controls, including A.5.15, A.8.5 and A.8.22. You will also be able to replace a shared WPA2-PSK key with IEEE 802.1X and dynamic VLANs. Finally, you can assemble the RADIUS logs, segregation tests and supplier records an auditor accepts at stage 2.
Guest WiFi ROI: calculation methodology and venue benchmarks
You will be able to build a guest WiFi ROI model your finance director will sign, using gross margin and holdout groups rather than revenue and attribution. Calculate four value streams, stress-test them by halving lift assumptions, and replace every year-one estimate with your own 90-day baseline before you request year-two budget.
SOC 2 Type II and Staff WiFi: Passing the Key Controls on Your Wireless Network
You will be able to map each of the key SOC 2 Type II controls to your staff WiFi and close the gaps auditors find. You can then choose between 802.1X, iPSK and a segregated WPA2-PSK network for each device class. Finally, you will know how to prepare access points, controllers and BYOD for a SOC 2 Type II audit.
Got questions about your specific setup?
Our team works with venue operators, IT managers, and network engineers across 80,000 venues. Book a 20-minute call and we will show you how others like you solved it.
