Wi-Fi for Cafe and Coworking: Ready-to-Deploy Solution 2026
2026-04-20 11 min readITNET
wificafecoworkingubiquitiunifiguest-network
Cafe Wi-Fi Is Not Home Wi-Fi
Cafe Wi-Fi solves 3 jobs:
- Guest access — longer stays, more orders
- Internal traffic — POS, kitchen tablets, music
- Security — guests must NOT see cashier, each other, or router
Home = one router. Cafe = minimum 2 SSIDs (Cafe Guest, Cafe Staff) on isolated VLANs.
Minimum Equipment
| Item | Model | Price | Why | |
|---|---|---|---|---|
| Gateway | UCG-Ultra or MikroTik hEX S | 1.5-2M UZS | Routing, VLAN, firewall | |
| AP | UniFi U7-Lite | 1.8M | Wi-Fi 6, 100 m² | |
| Cable | LW Cat6 FTP | 100k/30m | Router→AP |
Guest Network with Vouchers
Modern: guest connects → captive portal → enters voucher (from receipt) → access.
In UniFi: Create Guest Network → enable Hotspot Portal → enable Voucher Auth → set time limit (e.g., 2 hrs).
Barista hands voucher with receipt: 1) blocks street walk-by usage, 2) collects analytics, 3) time-limits.
POS Protection
POS, accounting PC, video recorder — separate VLAN, isolated from guests. Critical because:
- Guest's infected laptop can't see POS
- Network scanner won't reveal internal services
- Guest network attack doesn't affect operations
UniFi setup in 5 steps: VLAN 10 Staff, VLAN 20 Guest, SSID Staff→VLAN 10, SSID Guest→VLAN 20, firewall block 20→10.
Full Solutions by Size
Small ≤60 m² (from 5M UZS) — UCG-Ultra + 1× U7-Lite + cable Medium 100-150 m² (from 9M) — UCG-Ultra + 2× U7-Lite + USW-Lite-8-PoE Large 250-400 m² (from 18M) — UDM-Pro + 4× U7-Pro + USW-24-PoE + UNVROften Missed
- Backup link. No internet = no QR orders. 4G LTE backup (Cudy LT300, 1.2M UZS) auto-fails in 10 sec.
- Bathroom coverage. Guests leave phones on tables.
- Outdoor terrace. Indoor AP doesn't cover patio through glass — need outdoor AP.
- Music separate. Audio system on separate line from Wi-Fi/POS.
- UPS on network. Power blip = POS reboot 2 min. UPS-1000 (~1.5M) holds 30-40 min.
Real Mistakes
- Cheap home TP-Link → freezes every 20 min at 30 guests → replaced with U7-Lite
- No POS VLAN → guest saw "Cashier 1" in network, tried to connect
- One SSID for all → couldn't disable guests after hours
Opening Checklist
- ☐ 2 SSIDs in separate VLANs
- ☐ Firewall: guests can't see POS/cashier/NVR
- ☐ Captive portal with vouchers
- ☐ 4G backup
- ☐ Outdoor AP for terrace
- ☐ UPS on networking
- ☐ Wi-Fi name/password on menus
Bottom Line
Minimum: UCG-Ultra + 1-2 U7-Lite + USW-Lite-8-PoE for a standard 50-150 m² cafe with guest net, POS protection, backup link.
Ubiquiti catalog | Contact