SNAPguard lets you add new network segments to your venue router directly from the platform — no command-line access required. Each network can have its own IP range, VLAN, Wi-Fi SSID, and access rules. Changes are pushed to the device automatically, or queued and applied when the router next comes online.
To create a network, go to Networks & Settings and click Add.
Step 1 — Choose a Template
Templates pre-fill the most common settings for each use case so you do not have to configure everything from scratch. You can adjust any field after selecting a template.
| Template | What It Is For | What It Pre-Configures |
|---|---|---|
| Guest WiFi | The primary Wi-Fi network for paying customers and visitors | Captive portal on, SSID broadcast on, open or password-protected Wi-Fi, separate subnet from staff |
| Staff WiFi | An internal network for employees | No captive portal, SSID may be hidden, separate subnet from guests so staff traffic stays private |
| VLAN Trunk | Carries multiple VLANs over a single cable — typically used to connect managed switches or access points | Sets the router interface to ether1, no SSID, intended for wired infrastructure |
| IoT / Cameras | A dedicated isolated network for security cameras, card machines, smart displays, or other devices that should not mix with guest or staff traffic | Isolated subnet, no captive portal, no SSID broadcast by default |
| Custom | Blank slate — all fields are empty so you can configure exactly what you need | Nothing pre-filled |
Our recommendation: Most venues need a minimum of two networks — a Guest WiFi network for customers and a Staff WiFi network for back-of-house. If you have cameras or card machines, add an IoT / Cameras network to keep that traffic separated.
Step 2 — Name the Network
Give the network a clear, descriptive name. This name appears in SNAPguard, in the Activity tab client list, and in any reporting.
Examples: Guest Network, Staff Wi-Fi, CCTV & POS, Event Bar
Step 3 — Configure IPv4
This section defines the IP address range that devices on this network will receive.
| Field | What It Means |
|---|---|
| IP Address | The network address — the base of the range. Typically ends in .0 (e.g. 192.168.1.0) |
| Netmask | Controls how many addresses are available. /24 gives 254 usable addresses and is the standard choice for most venue networks |
| Gateway IP | The router's own IP address on this network — the address devices use to reach the internet (e.g. 192.168.1.1) |
| Broadcast IP | The address used to send messages to all devices on the network — automatically calculated, you do not need to change this |
| Usable IPs | How many devices can simultaneously receive an IP address on this network |
| IP Range | The full range of assignable addresses (e.g. 192.168.1.1 – 192.168.1.254) |
| Subnet Mask | The human-readable version of the netmask (e.g. 255.255.255.0) |
| DHCP Pool Size | How many addresses the router will automatically assign. The first few addresses are typically reserved for infrastructure |
| DHCP Range | The specific range the router will draw from when handing out addresses automatically |
Generate Address — Click this to automatically generate a valid, non-conflicting IP range. Useful if you are unsure what address space to use or want to avoid clashing with existing networks.
Our recommendation: Use 192.168.x.0/24 for guest and staff networks (e.g. 192.168.100.0/24 for guests, 192.168.101.0/24 for staff). A /24 gives enough addresses for any venue and keeps the setup simple. Use 10.x.x.x/16 for infrastructure and Corporate LAN segments where you need a larger pool.
Step 4 — Set the Router Interface
This tells SNAPguard which physical port or logical bridge on the router this network should be attached to.
| Option | When to Use It |
|---|---|
| Ports 2–5 Full Network (bridge) | The standard choice for any network that will serve Wi-Fi clients or wired devices plugged into the router's LAN ports. Use bridge for Guest WiFi and Staff WiFi networks |
| ether1 | Use this only for VLAN trunk setups where you need to tag traffic going out of the WAN/uplink port — typically when connecting a managed switch or upstream aggregation device |
If you are unsure, select bridge.
Step 5 — Set a VLAN ID (Optional)
A VLAN ID separates this network's traffic from other networks running on the same physical cable or switch.
- Leave blank if this network is the only network on that interface, or if you are using separate physical ports for each network.
- Set a VLAN ID if you have a managed switch or access points that expect tagged traffic. Choose a number between 1 and 4094 — common conventions are VLAN 10 for staff, VLAN 100 for guests, VLAN 200 for IoT.
- Do not use VLAN 1 — it is the default untagged VLAN and mixing tagged and untagged traffic on the same port can cause connectivity issues.
Step 6 — Options
Guest Network (Captive Portal)
Toggle this on to redirect all new devices to the Stampede splash portal before they can access the internet. Guests will see your branded registration page, submit their details, and then be granted access.
- Turn on for any customer-facing Wi-Fi network where you want to capture guest data.
- Turn off for staff networks, IoT devices, cameras, and card machines — these should connect directly without a registration step.
Broadcast SSID
Toggle this on to make the Wi-Fi network visible when guests search for available networks on their device.
- Turn on for any network guests should be able to find and connect to themselves.
- Turn off to create a hidden network — devices must be manually configured with the SSID and password to connect. Useful for staff or IoT networks where you do not want the network to be publicly visible.
Step 7 — Configure Wi-Fi
This section sets the wireless name and password guests will see and use.
| Field | What It Means |
|---|---|
| SSID | The Wi-Fi network name that appears on guests' devices. Default is __Venue Free Wi-Fi — change this to your venue's branded name (e.g. Buckies Bar Wi-Fi) |
| Password | Leave blank for an open network (no password required to join). Set a password of at least 8 characters to restrict access. Guest networks are typically left open so customers can join without asking staff for a password |
Our recommendation: For guest networks, leave the password blank and let the captive portal handle access control — guests connect freely but must register before getting internet. For staff networks, set a strong password and consider hiding the SSID.
Recommended Network Setup for Most Venues
| Network | Template | VLAN | Captive Portal | Broadcast SSID | Password |
|---|---|---|---|---|---|
| Guest Wi-Fi | Guest WiFi | 100 | On | On | None (open) |
| Staff Wi-Fi | Staff WiFi | 10 | Off | Optional (hide it) | Strong password |
| CCTV & Card Machines | IoT / Cameras | 200 | Off | Off | Not applicable (wired) |
This keeps guest, staff, and device traffic fully separated, protects payment card data by isolating POS hardware, and gives you clean data capture for all customer sessions.
When you are done configuring all fields, click Create New Network. If the device is online, the configuration will be pushed immediately. If offline, it will be applied automatically when the device reconnects.