Technical Guides
Deep, expert-led technical guides on guest WiFi, analytics, captive portals, and venue technology.
Ready to move from research to rollout? See how Purple's captive portal software handles branded guest sign-in, analytics, and compliance in one platform.
341 guides
Enterprise WiFi authentication without Active Directory or an on-prem server
This guide explains how to deploy secure WPA2/3-Enterprise WiFi authentication without an on-premises Active Directory, Windows NPS, or RADIUS server. It covers the protocol mismatch between cloud identity providers and 802.1X, the case for EAP-TLS over PEAP-MSCHAPv2, and how to deploy cloud RADIUS with MDM-issued certificates against Microsoft Entra ID, Okta, or Google Workspace. Written for IT leads at cloud-first and Mac/Chromebook-heavy organisations that are ready to retire on-premises infrastructure.
Per-Device PSK by Vendor: iPSK, DPSK, MPSK and PPSK Compared (and WPA3 Support)
A comprehensive comparison of per-device PSK implementations across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Extreme, Fortinet, and Ubiquiti UniFi. Learn how WPA3-SAE impacts per-device key strategies and when to deploy transition modes versus moving to 802.1X.
How to Reduce the Number of WiFi SSIDs Using Per-Device PSK (iPSK, DPSK, MPSK)
This authoritative technical reference guide explains how IT teams can eliminate WiFi performance degradation caused by SSID beacon overhead by collapsing multiple purpose-built networks into a single SSID using per-device PSK (xPSK). It covers the vendor landscape across Cisco iPSK, HPE Aruba MPSK, Ruckus DPSK, Juniper Mist PPSK, and Ubiquiti UniFi PPSK, with practical implementation guidance on dynamic VLAN assignment, IoT onboarding, and PCI DSS compliance. Venue operators in hospitality, retail, stadiums, and public-sector organisations will find actionable architecture guidance and real-world worked examples.
Legal and Compliance Requirements for Shared WiFi Infrastructure
This authoritative technical reference guide outlines the critical legal, regulatory, and architectural requirements for deploying and managing shared WiFi infrastructure. It provides IT managers, network architects, and venue operators with actionable frameworks for ensuring robust data protection, strict payment security compliance, and high-performance tenant isolation using enterprise standards.
Roaming Optimization for VoIP and Video Calls on Corporate WiFi
This guide provides IT managers, network architects, and CTOs with a comprehensive, vendor-neutral blueprint for optimizing WiFi roaming to support seamless VoIP and video calls on corporate staff networks. It covers the IEEE 802.11k/r/v protocol stack, WMM QoS configuration, RF cell design, and end-to-end wired QoS mapping required to achieve sub-50ms handoff latency. Applicable across hospitality, retail, healthcare, and large-venue environments, this reference includes real-world implementation scenarios, troubleshooting frameworks, and a measurable ROI analysis.
Certificate-Based Authentication for Corporate Devices (EAP-TLS)
This authoritative technical reference guide covers the architecture, deployment, and operational best practices of EAP-TLS certificate-based authentication for corporate devices. Designed for IT architects and venue operations leaders, it provides a practical roadmap to eliminate password-based credential risks and achieve robust 802.1X network access control across multi-site enterprise environments.
Top 10 Causes of DHCP Timeouts on High-Density Wireless Networks
This authoritative technical reference guide identifies the top ten causes of DHCP timeouts on high-density wireless networks and provides actionable, vendor-neutral remediation strategies. Designed for senior IT leaders, network architects, and venue operations directors, it covers deep-dive engineering principles, step-by-step implementation workflows, and measurable business outcomes. Learn how to eliminate connection bottlenecks and optimize your wireless infrastructure to deliver seamless connectivity in demanding enterprise environments.
Troubleshooting 802.1X Authentication Failures (RADIUS/EAP)
Step-by-step diagnostic guide for resolving 802.1X, EAP-TLS, PEAP, and RADIUS authentication errors on enterprise WiFi networks.
A Step-by-Step Guide to Diagnosing WiFi Roaming Issues
This comprehensive guide provides enterprise IT leaders and network architects with an authoritative, step-by-step methodology for diagnosing and resolving WiFi roaming issues. By combining technical deep-dives into IEEE 802.11k/v/r standards with real-world case studies and packet-level analysis, this reference equips teams to eliminate the 'sticky client' problem and deliver seamless mobile connectivity. It covers the full diagnostic workflow from RF site surveys and controller configuration audits through to over-the-air packet capture analysis and post-remediation validation.
How to Implement Time and Bandwidth Restrictions on Guest WiFi
An authoritative technical reference guide on implementing time and bandwidth restrictions on enterprise guest WiFi networks. This guide provides actionable architectural blueprints, vendor-neutral configurations, and real-world case studies to help IT leaders balance network performance, security compliance, and visitor experience.
Monetizing Guest WiFi Through Data Analytics and Splash Pages
This authoritative guide provides IT managers, network architects, and CTOs with a comprehensive technical framework for transforming guest WiFi from a cost centre into a high-yield first-party data asset. It outlines network architecture, data analytics integration, captive portal optimization, and global compliance strategies to drive measurable venue revenue.
Legal Liabilities and Content Filtering on Public Guest Networks
This guide provides IT managers, network architects, and CTOs with a definitive technical and legal framework for deploying content filtering on public guest WiFi networks. It covers the regulatory obligations under CCPA/CPRA, the UK Online Safety Act 2023, and PCI DSS, alongside a multi-layered architecture for DNS filtering, captive portal authentication, application-layer firewalling, and VLAN segmentation. Venue operators in hospitality, retail, healthcare, and transportation will find actionable implementation steps, real-world case studies, and decision frameworks to build a legally defensible, high-performance guest network.
Bandwidth Management and Quality of Service (QoS) in Coworking Spaces
An authoritative technical reference guide for IT managers, network architects, and venue operations directors on implementing robust Bandwidth Management and Quality of Service (QoS) frameworks in coworking environments. This guide details network segmentation, traffic prioritization, vendor-neutral configurations, and real-world ROI metrics to deliver enterprise-grade connectivity. It covers IEEE 802.11e/WMM standards, VLAN design, per-user rate limiting, and troubleshooting strategies with measurable business outcomes.
VLAN Segmentation Best Practices for Multi-Tenant Environments
This guide provides IT managers, network architects, CTOs, and venue operations directors with an authoritative, vendor-neutral blueprint for implementing VLAN segmentation in multi-tenant WiFi environments. It covers the IEEE 802.1Q standard, Dynamic VLAN Assignment via 802.1X and RADIUS, and step-by-step deployment guidance for hospitality, retail, stadium, and public-sector venues. Proper VLAN segmentation is the foundational control for PCI DSS and GDPR compliance, lateral movement prevention, and delivering high-performance wireless connectivity across shared physical infrastructure.
Why Your Captive Portal Isn't Loading on iPhone
An authoritative technical reference guide explaining why captive portals fail to load on iOS devices. It dives deep into Apple's Captive Network Assistant (CNA) daemon detection logic, identifies key iOS-specific interference factors like iCloud Private Relay and Private MAC addresses, and outlines comprehensive mitigation strategies for network engineers and venue operators.
Custom Captive Portal: HTML and CSS Guide
This authoritative technical reference guide outlines the development standards, CSS architecture, and network-level constraints required to design and code a custom captive portal landing page. It provides frontend developers and network architects with actionable strategies to navigate Apple CNA and Android webview environments, ensuring pixel-perfect, compliant, and highly performant guest WiFi experiences.
Captive Portal vs Splash Page
This authoritative guide breaks down the critical distinction between captive portals and splash pages in guest WiFi networks. It clarifies how the underlying network interception mechanism works in tandem with the visual guest interface, helping IT leaders and venue operators make informed architectural and procurement decisions.
Managing BYOD (Bring Your Own Device) Security on Staff Networks
An authoritative, technical reference guide for enterprise IT managers and network architects on securing Bring Your Own Device (BYOD) access on staff networks. This guide outlines the exact network architecture, authentication protocols, and MDM integration workflows required to mitigate data leakages and maintain regulatory compliance across high-footfall venues.
Captive portal login troubleshooting: Fix WiFi splash page errors
Troubleshoot captive portal login failures step by step. Learn HSTS bypass, DNS redirection, DHCP pool fixes, and client-side resolution techniques.
How to Implement 802.1X Authentication with Cloud RADIUS
This technical reference guide provides a comprehensive framework for implementing 802.1X authentication with Cloud RADIUS across distributed enterprise estates. It details the architecture, EAP method selection, deployment sequencing, and risk mitigation strategies required to secure network access while eliminating the operational overhead of on-premises infrastructure.
What is Cloud RADIUS? A Comprehensive Guide to RADIUS as a Service
This comprehensive guide explores Cloud RADIUS (RADIUS as a Service), detailing its architecture, EAP methods, and implementation strategies. It provides IT leaders with actionable insights on migrating from on-premises servers to a scalable, secure, and compliant cloud-based authentication model.
Migrating from On-Premises RADIUS (NPS) to RADIUS-as-a-Service
This authoritative guide details the technical architecture, implementation methodology, and business impact of migrating from on-premises Microsoft Network Policy Server (NPS) to a cloud-native RADIUS-as-a-Service model. It provides IT leaders and network architects with practical frameworks to reduce operational overhead, eliminate single points of failure, and secure enterprise authentication across distributed venues.
Understanding RSSI and Signal Strength for Optimal Channel Planning
This guide provides a comprehensive technical deep-dive into RSSI, Signal-to-Noise Ratio (SNR), and RF propagation principles for optimal channel planning. It equips IT managers, network architects, and venue operations directors with actionable strategies to mitigate Co-Channel and Adjacent Channel Interference, optimize AP placement, and leverage analytics for measurable business impact across hospitality, retail, and public sector environments.
20MHz vs 40MHz vs 80MHz: Which Channel Width Should You Use?
This guide provides a definitive, vendor-neutral technical reference for IT managers, network architects, and venue operations directors on selecting the correct WiFi channel width - 20MHz, 40MHz, or 80MHz - across enterprise deployments in hospitality, retail, events, and public-sector environments. It covers the underlying IEEE 802.11 mechanics, real-world capacity trade-offs, and step-by-step deployment guidance to help teams make the right call this quarter. Understanding channel width selection is one of the highest-leverage decisions in any wireless LAN design, directly impacting throughput, interference, client density support, and the reliability of guest-facing services.
Got questions about your specific setup?
Our team works with venue operators, IT managers, and network engineers across 80,000 venues. Book a 20-minute call and we will show you how others like you solved it.
