Technical WiFi guides
Deep, expert-led technical guides on guest WiFi, analytics, captive portals, and venue technology.
Ready to move from research to rollout? See how Purple's captive portal software handles branded guest sign-in, analytics, and compliance in one platform.
473 guides
Step-by-Step Guide: Configuring Ruijie Wireless Controllers for Guest WiFi Captive Portals
This guide provides a complete technical walkthrough for configuring Ruijie wireless controllers and gateways to deploy enterprise-grade guest WiFi captive portals. It covers VLAN segmentation, external RADIUS authentication via WISPr protocol, walled garden configuration, and seamless integration with Purple's Identity-Based Networks platform to capture first-party data and drive measurable business value across hospitality, retail, and public-sector environments.
How to Configure SCEP for Secure BYOD and 802.1X Network Authentication
This guide provides a comprehensive technical reference for configuring SCEP to deploy certificate-based 802.1X network authentication. It covers the architectural shift from shared passwords to EAP-TLS, Mobile Device Management integration, and strict network segmentation for secure BYOD access in enterprise environments.
Staff WiFi Terms and Conditions: Legal and Compliance Essentials
This guide covers the legal and technical essentials of drafting and enforcing staff WiFi terms and conditions for enterprise venues. It details what to include in an Acceptable Use Policy (AUP), how to meet GDPR and PCI DSS requirements, and how to deploy identity-based authentication and network segmentation to protect corporate assets. IT managers, HR teams, and operations directors at hotels, retail chains, stadiums, and public-sector organisations will find actionable guidance they can implement this quarter.
Staff WiFi Captive Portal: Onboarding and Authenticating Employees
A comprehensive technical reference for IT leaders on designing and deploying staff WiFi captive portals. This guide covers EAP-TLS authentication, BYOD onboarding, VLAN segmentation, and bandwidth management to enhance operational efficiency and mitigate security risks.
Integrating WeChat WiFi Login: Capturing Engagement via Social Captive Portals
This guide details how to integrate WeChat WiFi authentication into enterprise captive portals, covering the OAuth 2.0 architecture, RADIUS integration, and step-by-step deployment across Cisco Meraki, HPE Aruba, and Juniper Mist hardware. It gives IT managers and network architects a practical framework for capturing first-party data from WeChat's 1.3 billion users while driving engagement via Official Account follows and post-login redirects.
Enterprise SCEP Setup Guide: Certificate-Based WiFi Authentication for Higher Education and Large Networks
This guide provides a comprehensive technical blueprint for deploying certificate-based WiFi authentication using SCEP. It covers the architectural transition from pre-shared keys to EAP-TLS, deployment sequences across MDM platforms, and critical risk mitigation strategies for large-scale networks.
Enterprise WiFi authentication without Active Directory or an on-prem server
This guide explains how to deploy secure WPA2/3-Enterprise WiFi authentication without an on-premises Active Directory, Windows NPS, or RADIUS server. It covers the protocol mismatch between cloud identity providers and 802.1X, the case for EAP-TLS over PEAP-MSCHAPv2, and how to deploy cloud RADIUS with MDM-issued certificates against Microsoft Entra ID, Okta, or Google Workspace. Written for IT leads at cloud-first and Mac/Chromebook-heavy organisations that are ready to retire on-premises infrastructure.
Per-Device PSK by Vendor: iPSK, DPSK, MPSK and PPSK Compared (and WPA3 Support)
A comprehensive comparison of per-device PSK implementations across Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Extreme, Fortinet, and Ubiquiti UniFi. Learn how WPA3-SAE impacts per-device key strategies and when to deploy transition modes versus moving to 802.1X.
How to Reduce the Number of WiFi SSIDs Using Per-Device PSK (iPSK, DPSK, MPSK)
This authoritative technical reference guide explains how IT teams can eliminate WiFi performance degradation caused by SSID beacon overhead by collapsing multiple purpose-built networks into a single SSID using per-device PSK (xPSK). It covers the vendor landscape across Cisco iPSK, HPE Aruba MPSK, Ruckus DPSK, Juniper Mist PPSK, and Ubiquiti UniFi PPSK, with practical implementation guidance on dynamic VLAN assignment, IoT onboarding, and PCI DSS compliance. Venue operators in hospitality, retail, stadiums, and public-sector organisations will find actionable architecture guidance and real-world worked examples.
Legal and Compliance Requirements for Shared WiFi Infrastructure
This authoritative technical reference guide outlines the critical legal, regulatory, and architectural requirements for deploying and managing shared WiFi infrastructure. It provides IT managers, network architects, and venue operators with actionable frameworks for ensuring robust data protection, strict payment security compliance, and high-performance tenant isolation using enterprise standards.
Roaming Optimization for VoIP and Video Calls on Corporate WiFi
This guide provides IT managers, network architects, and CTOs with a comprehensive, vendor-neutral blueprint for optimizing WiFi roaming to support seamless VoIP and video calls on corporate staff networks. It covers the IEEE 802.11k/r/v protocol stack, WMM QoS configuration, RF cell design, and end-to-end wired QoS mapping required to achieve sub-50ms handoff latency. Applicable across hospitality, retail, healthcare, and large-venue environments, this reference includes real-world implementation scenarios, troubleshooting frameworks, and a measurable ROI analysis.
Certificate-Based Authentication for Corporate Devices (EAP-TLS)
This authoritative technical reference guide covers the architecture, deployment, and operational best practices of EAP-TLS certificate-based authentication for corporate devices. Designed for IT architects and venue operations leaders, it provides a practical roadmap to eliminate password-based credential risks and achieve robust 802.1X network access control across multi-site enterprise environments.
Top 10 causes of DHCP timeouts on high-density wireless networks
A technical reference for network engineers, enterprise architects, and venue IT directors troubleshooting DHCP onboarding bottlenecks in high-density WiFi environments. Covers IP helper relay misconfigurations, lease pool starvation, broadcast airtime degradation, rogue DHCP servers, and multi-vendor remediation.
Using Packet Capture (PCAP) to Diagnose Slow WiFi Performance
This technical reference guide provides IT managers, network architects, and venue operations directors with a structured, packet-level methodology to diagnose and resolve slow enterprise WiFi performance using Packet Capture (PCAP) analysis. By dissecting raw 802.11 frames - including retransmission rates, airtime utilization, and physical layer metadata - teams can isolate RF-layer bottlenecks from wired or application issues with precision. Applicable across high-density venues including hotels, retail chains, stadiums, and convention centers, this guide delivers actionable diagnostic workflows, real-world case studies, and configuration remediation steps to reclaim network capacity and protect guest experience.
Troubleshooting 802.1X Authentication Failures (RADIUS/EAP)
Step-by-step diagnostic guide for resolving 802.1X, EAP-TLS, PEAP, and RADIUS authentication errors on enterprise WiFi networks.
A Step-by-Step Guide to Diagnosing WiFi Roaming Issues
This comprehensive guide provides enterprise IT leaders and network architects with an authoritative, step-by-step methodology for diagnosing and resolving WiFi roaming issues. By combining technical deep-dives into IEEE 802.11k/v/r standards with real-world case studies and packet-level analysis, this reference equips teams to eliminate the 'sticky client' problem and deliver seamless mobile connectivity. It covers the full diagnostic workflow from RF site surveys and controller configuration audits through to over-the-air packet capture analysis and post-remediation validation.
How to Implement Time and Bandwidth Restrictions on Guest WiFi
You will be able to set per-device and aggregate bandwidth caps, RADIUS session and idle timeouts, and SSID schedules for your guest WiFi. You can then choose values that fit your venue type, test each control from a real device, and fix the failures that most often stop limits from working.
Monetizing Guest WiFi Through Data Analytics and Splash Pages
This authoritative guide provides IT managers, network architects, and CTOs with a comprehensive technical framework for transforming guest WiFi from a cost centre into a high-yield first-party data asset. It outlines network architecture, data analytics integration, captive portal optimization, and global compliance strategies to drive measurable venue revenue.
Legal Liabilities and Content Filtering on Public Guest Networks
This guide provides IT managers, network architects, and CTOs with a definitive technical and legal framework for deploying content filtering on public guest WiFi networks. It covers the regulatory obligations under CCPA/CPRA, the UK Online Safety Act 2023, and PCI DSS, alongside a multi-layered architecture for DNS filtering, captive portal authentication, application-layer firewalling, and VLAN segmentation. Venue operators in hospitality, retail, healthcare, and transportation will find actionable implementation steps, real-world case studies, and decision frameworks to build a legally defensible, high-performance guest network.
Bandwidth Management and Quality of Service (QoS) in Co-Working Spaces
An authoritative technical reference guide for IT managers, network architects, and venue operations directors on implementing robust Bandwidth Management and Quality of Service (QoS) frameworks in co-working environments. This guide details network segmentation, traffic prioritization, vendor-neutral configurations, and real-world ROI metrics to deliver enterprise-grade connectivity. It covers IEEE 802.11e/WMM standards, VLAN design, per-user rate limiting, and troubleshooting strategies with measurable business outcomes.
VLAN Segmentation Best Practices for Multi-Tenant Environments
This guide provides IT managers, network architects, CTOs, and venue operations directors with an authoritative, vendor-neutral blueprint for implementing VLAN segmentation in multi-tenant WiFi environments. It covers the IEEE 802.1Q standard, Dynamic VLAN Assignment via 802.1X and RADIUS, and step-by-step deployment guidance for hospitality, retail, stadium, and public-sector venues. Proper VLAN segmentation is the foundational control for PCI-DSS and CCPA/CPRA compliance, lateral movement prevention, and delivering high-performance wireless connectivity across shared physical infrastructure.
Dynamic Pre-Shared Keys (DPSK) for Multi-Family Security
This authoritative technical reference guide explores Dynamic Pre-Shared Keys (DPSK) as a high-security, low-friction alternative to 802.1X for multi-family WiFi environments. It details the underlying architecture, vendor implementations, dynamic VLAN steering, and API-driven lifecycle automation. IT managers and network architects will find actionable guidance on deploying DPSK to achieve robust tenant isolation, regulatory compliance, and seamless device onboarding.
Why your captive portal is not loading on iPhone: Fix Apple CNA errors
Troubleshoot and fix captive portal popup failures on iPhone and iOS. Learn how Apple CNA, iCloud Private Relay, and MAC randomization break WiFi logins, and how to fix them.
Custom Captive Portal: HTML and CSS Guide
This authoritative technical reference guide outlines the development standards, CSS architecture, and network-level constraints required to design and code a custom captive portal landing page. It provides frontend developers and network architects with actionable strategies to navigate Apple CNA and Android webview environments, ensuring pixel-perfect, compliant, and highly performant guest WiFi experiences.
Got questions about your specific setup?
Our team works with venue operators, IT managers, and network engineers across 80,000 venues. Book a 20-minute call and we will show you how others like you solved it.
