This guide shows you how to create your Guest, Staff, and POS networks in SnapGuard using easy templates. You’ll learn when to use captive portal, when VLAN IDs are needed, and how to set up your networks correctly whether you're using a controller or the SnapGuard as the main router.
1. Go to Network Settings
In SNAPguard:
Select Settings.
Scroll to Network Rules.
Click 'Add Network' button.
2. Choose a Network Template
You will see a list of templates such as:
Guest Network
Staff Network
POS / Printers
Custom Network
Choosing a template automatically fills in the correct:
Network name
IP range
Subnet mask
What is a Subnet Mask? (Simple Explanation)
A subnet mask tells the router how big your network is and which devices are “allowed” to talk to each other.
You don’t need to change this the template fills in the correct numbers for you
3. Enable the Captive Portal (Only If Needed)
You will see an option: Enable Captive Portal: Yes/No
When to Enable It
Enable it only if the SnapGuard is the main router broadcasting your Guest Wi-Fi.
When NOT to Enable It
If your Wi-Fi is coming from:
Access points (e.g. Ubiquiti, Ruckus, Cambium)
A controller (e.g. Armada)
Then do NOT enable captive portal here. Instead, you will use VLAN IDs (explained next).
4. Understanding VLANs (Simple Explanation)
What is a VLAN?
A VLAN is a way to keep your networks separate while using the same physical equipment.
Think of it like:
One building (your Wi-Fi system),
With different locked rooms (Guest, Staff, POS),
Each room has its own number → that number is the VLAN ID.
Your VLAN IDs
Stampede uses:
Guest Wi-Fi = VLAN 192
Staff Wi-Fi = VLAN 100
These numbers allow the controller to know where to send the traffic.
You only need VLANs if:
Your SnapGuard connects to access points, OR
You are using a Wi-Fi controller like Armada.
5. If You Are Using a Wi-Fi Controller (e.g. Omada)
Here’s the easy version of what to do:
For the Guest Network
In your controller:
Go to Wireless Networks.
Select or create the Guest Wi-Fi SSID.
Enable:
SSID Broadcast
VLAN
Enter VLAN 192.
That’s it — the controller will send Guest traffic to Stampede correctly.
For the Staff Network
Go to the Staff SSID.
Keep SSID Broadcast enabled.
No VLAN needed unless you're separating staff traffic — in most cases leave VLAN disabled.
6. When the SnapGuard Is the Router
If the SnapGuard itself is broadcasting your Wi-Fi (not using other access points):
You do not need VLAN IDs.
You do enable the captive portal for Guest Wi-Fi.
Networks will work "as-is" from the templates.
7. Final Checks
Once your networks are added:
Confirm they appear correctly under Network Rules.
Check they match the setup your venue uses:
Guest Wi-Fi → VLAN 192 (if using a controller)
Staff Wi-Fi → no VLAN (unless requested)
Let your Account Manager know when everything is complete so we can run a final test.