Skip to content
Guest Wi-Fi

Why we recommend a SnapGuard box at every venue

What a SnapGuard box does for your guest Wi-Fi, and why running the login page on your own controller works but is less reliable.

2 min read

In short: run every venue's guest Wi-Fi through a SnapGuard box. Your own controller can work, but more has to go right for guests.

The SnapGuard sits beside your network, not inside itYour access point keeps every SSID it runs today; staff, POS and events VLANs carry on through your router unchanged, and only the guest SSID on VLAN 912 goes to the SnapGuard.Your access pointAs many SSIDs as you run todayStaff · VLAN 10POS · VLAN 20Events · VLAN 30Guest · VLAN 912Your routerUnchanged, DHCPfor your LANSnapGuardGateway + DHCPfor 912 onlyOnly 912 turns toward the box.Everything else carries on as today.
beside your network, not inside it

What the box does

The SnapGuard is a small box that plugs into your network and runs your guest Wi-Fi: the login page, and the addresses guests get when they join.

  • Its own secure tunnel: the box opens one encrypted connection out to Stampede. You add no inbound rule and no port forward.
  • A separate guest network: guests sit on their own network. Your staff Wi-Fi, tills and other kit carry on as they are.
  • Health you can see: Health checks VPN connected, API login and Provisioning active, and Hardware shows each box Online or Offline.
  • Control from Stampede: see and disconnect guests, set how long sessions last, set speed limits, block websites and see the devices on your network.
  • Less reliance on your own kit: your access points only carry the guest network to the box. See SnapGuard IT setup.
One tunnel out through your firewall, nothing inFrom its LAN address the SnapGuard opens one outbound tunnel through your firewall to Stampede: UDP 51820 to vpn.stampede.ai, TCP 443 and DNS out, and no inbound rule.TCP 443 + DNSto anywhereUDP 51820Nothing inSnapGuardLAN addressYour firewallOutbound onlyStampedevpn.stampede.ai
one tunnel out, nothing in

Using your own controller instead

You can run the login page through your own Wi-Fi kit. See connect your own Wi-Fi hardware. It is less reliable, because more depends on your network:

  • The login page relies on the Stampede values staying in your controller's settings, so a change made there can stop it.
  • On UniFi, Stampede has to reach your controller over the internet. A firewall in the way is the most common thing that blocks it.
  • On UniFi, Stampede signs in with an admin login on your controller, and asks it to let each guest online. If that password changes, or the site is removed, guests get an error page or stay on the login screen.

Get a box

  1. Order a box from Hardware.
  2. When it arrives, set it up.
  3. Send your IT provider SnapGuard IT setup.

Check it worked

On Wi-Fi › SnapGuard › Health, the box says Healthy, and your login page opens on your own phone.

Good to know

Still stuck, or have account-specific questions?

  1. Log in to stampede.aiWith your usual details.
  2. Hold Command, press /On Windows, hold Control (Ctrl) and press /.
  3. Ask the agentIt answers about your own venues and account.
Log in to stampede.ai