The Networks & Settings tab is where you configure and manage the networks running on the venue router, control guest session behaviour, monitor the VPN connection, and manage firmware updates. Changes made here are pushed directly to the physical device.
Networks
This section lists every network (SSID or LAN segment) configured on the router. Each network row shows the key technical parameters for that segment.
What each field means
| Field | What It Means |
|---|---|
| Network name | The label given to this network in SNAPguard (e.g. "Corporate LAN", "Home/Small Office or Guest Network Free Wi-Fi") |
| VLAN | The VLAN tag used to separate this network's traffic from others on the same physical infrastructure. VLAN 99 and VLAN 999 are common internal conventions for separating staff and guest traffic |
| Interface | The physical port on the router this network is tied to — ether1 is the primary WAN/uplink port |
| Subnet | The IP address range assigned to devices on this network. 10.1.0.0/16 gives up to 65,534 addresses (staff/infrastructure); 192.168.100.0/24 gives 254 addresses (guests) |
| Wired only | This network is delivered over a physical cable connection. No wireless SSID is broadcast for this network — it exists as a VLAN on the wired infrastructure |
| DHCP | The router automatically assigns IP addresses to devices joining this network |
| Captive Portal | The network redirects new devices to the Stampede splash portal before granting internet access. This is what captures guest data and delivers the Wi-Fi registration experience |
Can be added in (example on what has been added into this demo account - this is also the VLAN ID's - all examples and can be changed)
Corporate LAN (VLAN 99)
- Purpose: Internal staff and infrastructure network. No captive portal, so devices connect directly without going through the registration flow.
- Subnet:
10.1.0.0/16— a large range suitable for managed devices, access points, and back-of-house equipment. - No captive portal — staff and infrastructure devices bypass the guest registration entirely.
Home/Small Office (VLAN 999)
- Purpose: Guest-facing Wi-Fi network. All new devices are redirected to the Stampede splash portal before they can access the internet.
- Subnet:
192.168.100.0/24— a smaller range for the guest pool. - Captive Portal active — this is the network where guest data capture and session management happen.
Add Button
Use Add to create a new network segment on the router — for example a separate SSID for events or a dedicated IoT network. The new configuration is pushed to the device when it is next online.
Session Policies
Session policies control how long a guest stays connected and how much bandwidth they are given once they have completed the portal.
| Setting | What It Means |
|---|---|
| Session: 7 days | Once a guest completes registration, they remain connected for 7 days before being asked to register again |
| Speed: 100M/100M | Each guest session is rate-limited to 100 Mbps download and 100 Mbps upload. This prevents any one device from consuming all available bandwidth |
Click Click to edit on the policy row to change the session duration or speed limits.
Add Policy allows you to create multiple policies — for example a shorter session with lower speeds for a free tier, and a longer session with higher speeds for a paid or loyalty tier.
VPN
Shows the current state of the WireGuard VPN tunnel between the venue router and the Stampede platform.
| State | What It Means |
|---|---|
| Online | The encrypted tunnel is active. SNAPguard can communicate with the router in real time |
| Offline | The tunnel is down. SNAPguard cannot push changes or read live data from the device |
| Last seen X ago | The timestamp of the last successful tunnel connection. "Last seen 4 months ago" means the device has not reconnected since that point and the VPN issue should be investigated |
To restore the VPN connection, go to the Overview tab and follow the steps under "What to do next", or click Open VPN Setup to verify the WireGuard configuration on the router matches what was generated in the setup wizard.
Firmware Upgrade
SNAPguard can manage firmware updates for the venue router remotely. The upgrade process follows four sequential steps.
Step 1 — Check for Updates
Click Check to query the update server and find out whether a newer firmware version is available for this device. The current channel is shown above (e.g. Stable).
- Stable channel — Only tested, stable firmware releases are offered. This is the recommended setting for live venue routers.
Step 2 — Download Firmware
Once an update is found, click Download to pull the firmware file to the router. The router must be online for this step.
Step 3 — Install & Reboot
Click Install to apply the downloaded firmware. The router will reboot during this step.
- The VPN connection will be temporarily lost while the device restarts. This is expected — the tunnel will re-establish automatically after the reboot completes.
- Guest Wi-Fi will be unavailable for the duration of the reboot (typically 1–3 minutes).
Step 4 — Upgrade Routerboard
MikroTik routers have two layers of firmware: the RouterOS software and the lower-level Routerboard firmware (the hardware bootloader). This step upgrades the Routerboard firmware separately.
- This also requires a reboot.
- It is typically only needed when a major hardware-level update is available.
- It is safe to run but should be scheduled outside peak hours.
Setup Wizard and Console
These two shortcuts appear at the bottom of the tab.
- Setup Wizard — Returns you to the guided setup flow for linking a device, configuring VPN, and provisioning networks from scratch. Use this if you need to re-provision the venue or link a replacement router.
- Console — Opens a direct command-line interface to the router via the Stampede platform. For advanced use only — changes made here are not tracked by SNAPguard's configuration management.