Hotel Network Optimization & Wi-Fi Roaming
Budget: $10 – $30 USD
Hotel Network Optimization & Wi-Fi Roaming
1. Current Network Environment
Internet / ISP
• ISP: AT&T
• Plan:
o AT&T Internet 300 Mbps
o 8 Static Public IPs
• Modem/Gateway: AT&T provided
Core Network Hardware
• Router / Firewall:
o MikroTik RB1100AHx4
• Switching:
o Aruba 2530-24G PoE switches
• Wireless Access Points:
o Ruckus R510 (17 APs deployed across the property)
o Currently using Ruckus Unleashed (no SmartZone controller)
SSIDs
• Guest Wi-Fi: 1 SSID (with captive portal)
• Staff Wi-Fi: 1 SSID
• Owner / Management Wi-Fi: 1 SSID (no captive portal)
Other Systems on Network
• VOIP phones
• Security cameras (NVR + IP cameras)
• PMS / Front Desk systems
• Guest captive portal (currently not visible after recent update)
2. Major Issues We Are Facing (High Priority)
Wi-Fi Roaming Problem (Critical)
• When walking through the building:
o Devices disconnect from Wi-Fi
o Then reconnect to the next AP
• Wi-Fi calls drop when roaming (very noticeable on owner SSID)
• Guest experience likely affected the same way
Expected behavior:
• Seamless roaming (802.11k / v / r where applicable)
• Device should hand off to next AP without disconnecting
Captive Portal Issue
• After a recent system update:
o Guest captive portal is no longer appearing
• Unsure whether captive portal is:
o MikroTik-based
o Ruckus-based
o Third-party
Engineer must:
• Identify where captive portal logic currently lives
• Restore or redesign captive portal cleanly
3. What We Want to Achieve (Project Goals)
Core Goals
1. Stable, seamless Wi-Fi roaming across entire property
2. Secure and properly segmented network
3. Reliable captive portal for guests
4. Zero interference between guest, staff, cameras, and VoIP
5. Enterprise-grade configuration using existing hardware
4. Required Scope of Work
A. Network Architecture & VLAN Design
• Design and document VLANs for:
o Guest Wi-Fi
o Staff Wi-Fi
o Owner Wi-Fi
o VOIP
o Cameras
o PMS / Back-office
o Network management
• Ensure:
o Proper isolation
o No lateral movement
o Clear firewall rules
B. MikroTik Configuration (Very Important)
Engineer must be strong with MikroTik, not learning on the job.
Required:
• Firewall rules (input / forward / NAT)
• Guest isolation
• DDoS protection (reasonable for hotel scale)
• Bandwidth shaping / queues:
o Guest limits
o Fair usage
• DHCP scopes per VLAN
• NAT & static IP handling
• Logging & basic monitoring
C. Ruckus Wireless Optimization
• Optimize Ruckus R510 AP configuration for:
o Roaming
o Power levels
o Channel planning (2.4 GHz & 5 GHz)
• Enable / tune:
o 802.11k / v / r (where supported)
o Minimum RSSI
o Band steering
• Confirm Unleashed vs controller recommendation
• Ensure APs are:
o Properly adopted
o On correct management VLAN
D. Captive Portal
• Recommend best captive portal approach:
o MikroTik captive portal
o Ruckus captive portal
o External / cloud option
• Requirements:
o Simple guest experience
o Stable sessions (no frequent re-auth)
o Session timeout control
o Works correctly with roaming
• Restore portal visibility ASAP
E. Validation & Testing
• Walk test across floors
• Test:
o Roaming while on Wi-Fi call
o Guest portal behavior
o Speed and latency
• Provide before/after confirmation
5. Deliverables Expected
• VLAN & network diagram
• MikroTik configuration (exported + documented)
• Ruckus configuration summary
• Captive portal setup explanation
• Recommendations for future scalability
• Short admin guide (how to maintain / basic troubleshooting)
6. What We Do NOT Want
• ❌ Replacing hardware unless strongly justified
• ❌ Trial-and-error approach
• ❌ Someone unfamiliar with hotel environments
We already use enterprise-grade hardware (Ruckus + Aruba + MikroTik).
The issue is configuration and design, not equipment quality.
7. Ideal Engineer Profile
• Experience with:
o Hotels / multi-AP environments
o MikroTik firewall & VLANs
o Ruckus Unleashed
• Understands:
o Wi-Fi roaming fundamentals
o Guest networks at scale (200+ concurrent users)
• Can explain decisions clearly
Max budget for this project is $30. if you plan to charge more than $30, please ignore this project.
1. Current Network Environment
Internet / ISP
• ISP: AT&T
• Plan:
o AT&T Internet 300 Mbps
o 8 Static Public IPs
• Modem/Gateway: AT&T provided
Core Network Hardware
• Router / Firewall:
o MikroTik RB1100AHx4
• Switching:
o Aruba 2530-24G PoE switches
• Wireless Access Points:
o Ruckus R510 (17 APs deployed across the property)
o Currently using Ruckus Unleashed (no SmartZone controller)
SSIDs
• Guest Wi-Fi: 1 SSID (with captive portal)
• Staff Wi-Fi: 1 SSID
• Owner / Management Wi-Fi: 1 SSID (no captive portal)
Other Systems on Network
• VOIP phones
• Security cameras (NVR + IP cameras)
• PMS / Front Desk systems
• Guest captive portal (currently not visible after recent update)
2. Major Issues We Are Facing (High Priority)
Wi-Fi Roaming Problem (Critical)
• When walking through the building:
o Devices disconnect from Wi-Fi
o Then reconnect to the next AP
• Wi-Fi calls drop when roaming (very noticeable on owner SSID)
• Guest experience likely affected the same way
Expected behavior:
• Seamless roaming (802.11k / v / r where applicable)
• Device should hand off to next AP without disconnecting
Captive Portal Issue
• After a recent system update:
o Guest captive portal is no longer appearing
• Unsure whether captive portal is:
o MikroTik-based
o Ruckus-based
o Third-party
Engineer must:
• Identify where captive portal logic currently lives
• Restore or redesign captive portal cleanly
3. What We Want to Achieve (Project Goals)
Core Goals
1. Stable, seamless Wi-Fi roaming across entire property
2. Secure and properly segmented network
3. Reliable captive portal for guests
4. Zero interference between guest, staff, cameras, and VoIP
5. Enterprise-grade configuration using existing hardware
4. Required Scope of Work
A. Network Architecture & VLAN Design
• Design and document VLANs for:
o Guest Wi-Fi
o Staff Wi-Fi
o Owner Wi-Fi
o VOIP
o Cameras
o PMS / Back-office
o Network management
• Ensure:
o Proper isolation
o No lateral movement
o Clear firewall rules
B. MikroTik Configuration (Very Important)
Engineer must be strong with MikroTik, not learning on the job.
Required:
• Firewall rules (input / forward / NAT)
• Guest isolation
• DDoS protection (reasonable for hotel scale)
• Bandwidth shaping / queues:
o Guest limits
o Fair usage
• DHCP scopes per VLAN
• NAT & static IP handling
• Logging & basic monitoring
C. Ruckus Wireless Optimization
• Optimize Ruckus R510 AP configuration for:
o Roaming
o Power levels
o Channel planning (2.4 GHz & 5 GHz)
• Enable / tune:
o 802.11k / v / r (where supported)
o Minimum RSSI
o Band steering
• Confirm Unleashed vs controller recommendation
• Ensure APs are:
o Properly adopted
o On correct management VLAN
D. Captive Portal
• Recommend best captive portal approach:
o MikroTik captive portal
o Ruckus captive portal
o External / cloud option
• Requirements:
o Simple guest experience
o Stable sessions (no frequent re-auth)
o Session timeout control
o Works correctly with roaming
• Restore portal visibility ASAP
E. Validation & Testing
• Walk test across floors
• Test:
o Roaming while on Wi-Fi call
o Guest portal behavior
o Speed and latency
• Provide before/after confirmation
5. Deliverables Expected
• VLAN & network diagram
• MikroTik configuration (exported + documented)
• Ruckus configuration summary
• Captive portal setup explanation
• Recommendations for future scalability
• Short admin guide (how to maintain / basic troubleshooting)
6. What We Do NOT Want
• ❌ Replacing hardware unless strongly justified
• ❌ Trial-and-error approach
• ❌ Someone unfamiliar with hotel environments
We already use enterprise-grade hardware (Ruckus + Aruba + MikroTik).
The issue is configuration and design, not equipment quality.
7. Ideal Engineer Profile
• Experience with:
o Hotels / multi-AP environments
o MikroTik firewall & VLANs
o Ruckus Unleashed
• Understands:
o Wi-Fi roaming fundamentals
o Guest networks at scale (200+ concurrent users)
• Can explain decisions clearly
Max budget for this project is $30. if you plan to charge more than $30, please ignore this project.