Mikrotik Main Switch (CCR1009-7G-1C-1S+):
Check all firewall settings to:
Separate Guest & Staff networks
Protect Staff Network & Server from hacking, malware, etc.
Protect Guest data and privacy.
Server: DELL PowerEdge R430, with Microsoft Windows Server 2012 R2, iDRAC 8
Purpose: Backup, file sharing, storage of Wifi log file, secure storage of guest data & biometrics.
Setup Active Directory
Setup antivirus (if necessary).
Load Balancing on Mikrotik switch.
Evaluate --> Redundancy (TOT+3BB) vs. failover (TOT or 3BB). Or dedicate TOT to Staff, 3BB to Guests.
Setup on load balancing switch.
Replace (upgrade) Captive Portal for Guest Login.
Use our font, background photo.
Issue password only (random, numerals & letters) to guest & staff (set duration, bandwidth).
No username necessary.
SmartTV in rooms must bypass captive portal.
Fine tune system:
Static IP for Staff Network vs. DHCP
Setup kitchen printers LAN printers
Internet Service Providers (current plans, upgradeable):
TOT Fttx (upload: 200/download: 200)
3BB Fttx (upload: 100/download: 100)
Network Existing Design:
for hotel & restaurant guests and staff personal use.
On Wifi in guest rooms and in guest rooms and in public (open areas).
Includes Smart TV sets in guest rooms.
Each guest room has a router (ASUS RT-N12+) for SmartTV (by LAN cable) and for guest Wifi in room.
Only on LAN CAT6 cables.
Uses Gigabit switches.
Includes Dell Server.
Wiring and switches separate from Guest Network.