Wi-Fi for Cafe and Coworking: Ready-to-Deploy Solution 2026

Cafe Wi-Fi Is Not Home Wi-Fi

Cafe Wi-Fi solves 3 jobs:

Guest access — longer stays, more orders

Internal traffic — POS, kitchen tablets, music

Security — guests must NOT see cashier, each other, or router

Home = one router. Cafe = minimum 2 SSIDs (Cafe Guest, Cafe Staff) on isolated VLANs.

Minimum Equipment

ItemModelPriceWhy GatewayUCG-Ultra or MikroTik hEX S1.5-2M UZSRouting, VLAN, firewall APUniFi U7-Lite1.8MWi-Fi 6, 100 m² CableLW Cat6 FTP100k/30mRouter→AP Minimum total: 4-5M UZS hardware + 1-1.5M install.

Guest Network with Vouchers

Modern: guest connects → captive portal → enters voucher (from receipt) → access.

In UniFi: Create Guest Network → enable Hotspot Portal → enable Voucher Auth → set time limit (e.g., 2 hrs).

Barista hands voucher with receipt: 1) blocks street walk-by usage, 2) collects analytics, 3) time-limits.

POS Protection

POS, accounting PC, video recorder — separate VLAN, isolated from guests. Critical because:

Guest's infected laptop can't see POS

Network scanner won't reveal internal services

Guest network attack doesn't affect operations

UniFi setup in 5 steps: VLAN 10 Staff, VLAN 20 Guest, SSID Staff→VLAN 10, SSID Guest→VLAN 20, firewall block 20→10.

Full Solutions by Size

Small ≤60 m² (from 5M UZS) — UCG-Ultra + 1× U7-Lite + cable Medium 100-150 m² (from 9M) — UCG-Ultra + 2× U7-Lite + USW-Lite-8-PoE Large 250-400 m² (from 18M) — UDM-Pro + 4× U7-Pro + USW-24-PoE + UNVR

Often Missed

Backup link. No internet = no QR orders. 4G LTE backup (Cudy LT300, 1.2M UZS) auto-fails in 10 sec.

Bathroom coverage. Guests leave phones on tables.

Outdoor terrace. Indoor AP doesn't cover patio through glass — need outdoor AP.

Music separate. Audio system on separate line from Wi-Fi/POS.

UPS on network. Power blip = POS reboot 2 min. UPS-1000 (~1.5M) holds 30-40 min.

Real Mistakes

Cheap home TP-Link → freezes every 20 min at 30 guests → replaced with U7-Lite

No POS VLAN → guest saw "Cashier 1" in network, tried to connect

One SSID for all → couldn't disable guests after hours

Opening Checklist

☐ 2 SSIDs in separate VLANs

☐ Firewall: guests can't see POS/cashier/NVR

☐ Captive portal with vouchers

☐ 4G backup

☐ Outdoor AP for terrace

☐ UPS on networking

☐ Wi-Fi name/password on menus

Bottom Line

Minimum: UCG-Ultra + 1-2 U7-Lite + USW-Lite-8-PoE for a standard 50-150 m² cafe with guest net, POS protection, backup link.

Ubiquiti catalog | Contact