ampersandresort

Mikrotik Main Switch (CCR1009-7G-1C-1S+):

Check all firewall settings to:

Separate Guest & Staff networks

Protect Staff Network & Server from hacking, malware, etc.

Protect Guest data and privacy.



Server: DELL PowerEdge R430, with Microsoft Windows Server 2012 R2, iDRAC 8

Purpose: Backup, file sharing, storage of Wifi log file, secure storage of guest data & biometrics.

Setup Active Directory

Setup antivirus (if necessary).



Load Balancing on Mikrotik switch.

Evaluate --> Redundancy (TOT+3BB) vs. failover (TOT or 3BB). Or dedicate TOT to Staff, 3BB to Guests.

Setup on load balancing switch.



Captive Portal:

Replace (upgrade) Captive Portal for Guest Login.

Use our font, background photo.

Issue password only (random, numerals & letters) to guest & staff (set duration, bandwidth).

No username necessary.

SmartTV in rooms must bypass captive portal.

Fine tune system:

Setup PPPoE

Static IP for Staff Network vs. DHCP

Setup kitchen printers LAN printers

Optimize performance



Internet Service Providers (current plans, upgradeable):

TOT Fttx (upload: 200/download: 200)

3BB Fttx (upload: 100/download: 100)



Network Existing Design:

Guest Network:

for hotel & restaurant guests and staff personal use.

On Wifi in guest rooms and in guest rooms and in public (open areas).

Includes Smart TV sets in guest rooms.

Each guest room has a router (ASUS RT-N12+) for SmartTV (by LAN cable) and for guest Wifi in room.



Staff Network:

Only on LAN CAT6 cables.

Uses Gigabit switches.

No Wifi.

Includes Dell Server.

Wiring and switches separate from Guest Network.