How to Design a Hotel Network: Guest Wi-Fi, PoE, Segmentation, and Operations

Start from the kinds of traffic and their trust levels.

• Guest network. Untrusted by definition. Internet access only, with client isolation so guests cannot reach each other's devices.
• Staff network. Staff devices and back-office systems, with access to internal applications.
• Payment systems. Card terminals and payment servers, isolated to reduce the scope of payment card compliance and exposure.
• Property management and reservations. Core business systems, reachable only from staff segments that need them.
• Building and IoT. Door locks, HVAC, lighting, cameras, TVs, and energy systems, with access only to their controllers and vendors.
• Voice. Phones, if IP-based, with quality of service.
• Management. Switch, controller, and firewall management, reachable only from administrator hosts.

Firewall policy between segments should allow only defined flows, and building systems should not reach guest or payment segments at all.

Hotel wireless has to handle dense guest rooms, conference spaces with bursts of hundreds of clients, and roaming through corridors.

Design from a survey of the building, not from floor area alone. Walls, mirrors, and bathrooms attenuate signal heavily, so in-room or corridor placement decisions matter. Plan for capacity in conference and lobby areas, use band steering toward less congested bands, and keep transmit power moderate so clients roam instead of clinging to distant access points. Limit the number of broadcast networks, since each one adds overhead.

Access points, cameras, IP phones, and some locks and sensors draw power over Ethernet. Add up the per-port power requirements for each switch and keep headroom, because newer access point generations and pan-tilt cameras draw more power than the devices they replace. A switch that runs out of PoE budget drops devices unpredictably.

Use a clear hierarchy: access switches per floor or wing, aggregation in a core or distribution layer, and redundant uplinks for areas where outages are costly, such as front desk and payment systems. Put critical switches on uninterruptible power, and plan for what fails when a closet loses power.

Choose between an open network with a captive portal, room-based credentials, or integration with the property management system so guests authenticate with their stay details. Apply per-device or per-room bandwidth limits so a few heavy users cannot degrade everyone. Keep portal and authentication services highly available, since a portal failure looks to guests like no internet at all.

Most properties have little on-site IT. Cloud or centralised controller management lets a remote team configure, monitor, and update devices across many sites. Monitor what guests and staff experience: access point health, client connection failures, PoE faults, uplink utilisation, and portal availability. Keep an inventory of every device, including building systems installed by other vendors, and route alerts into a ticketing workflow so issues are tracked to resolution rather than reset and forgotten.

Guests judge the whole network by internet access, and many hotel systems, including cloud-hosted property management, payments, and controller management, depend on it too. Use at least two uplinks from different providers, ideally over physically diverse paths, with automatic failover. Prioritise business traffic such as payments and property management over guest traffic when capacity is constrained, so a busy conference cannot stop the front desk from checking guests in.

Decide in advance what works offline. Some locks, card terminals, and property systems can operate in a degraded local mode; know which, and test it.

Building systems, locks, and entertainment platforms are often maintained by third parties who need remote access. Give each vendor access only to its own segment, through an authenticated and logged path, never through flat VPN access to the whole network. Vendor connections have been the entry point for serious breaches in other industries, and hotels are no different.