Guest Wi-Fi & Captive Portal
A secure, branded guest Wi-Fi experience, with a captive portal, time limits, and full isolation from your internal network.
Key highlights
- Captive portal with branded splash page
- Guest network fully isolated from staff and servers
- Configurable session duration and bandwidth limits
- Voucher-based or click-through authentication options
Guest Wi-Fi that protects your business
Offering Wi-Fi to visitors, clients, and customers is standard practice. But guest Wi-Fi that isn't properly isolated is a security risk. A visitor who connects to the same network as your file server can, intentionally or not, attempt connections to internal resources. A well-configured guest Wi-Fi with captive portal gives visitors a good experience while keeping your internal network completely separate.
What a captive portal does
A captive portal intercepts the guest's browser when they connect to Wi-Fi and presents a branded splash page before granting internet access. This page can require a password, a voucher code, or a click to accept terms. It is the standard approach for hospitality, retail, offices, and any environment where guest Wi-Fi access needs to be controlled and logged.
Authentication options
Simple password
A single shared password displayed at reception or on a printed card. Easy to change weekly or monthly. Suitable for small offices and meeting rooms.
Voucher codes
Time-limited single-use or multi-use codes generated from the controller dashboard. Printed at reception and handed to guests. Ideal for hotels, co-working spaces, and hospitality environments where session duration needs to be controlled per guest.
Click-through with terms
Guest clicks accept on the terms of use page to gain access. No password or code required. Useful for retail environments and reception areas where friction-free access is the priority.
Network isolation and bandwidth controls
Guest devices on the captive portal VLAN can reach the internet and nothing else. They cannot see, ping, or connect to any device on the staff VLAN, server VLAN, or any internal resource. This isolation is enforced at the switch and gateway level, it holds regardless of what the guest device attempts.
Bandwidth limits per client and per SSID prevent a single user from consuming the full internet capacity. A guest streaming video will not degrade call quality on the VoIP VLAN or slow down file uploads from staff workstations.
Hotels, serviced offices, and co-working spaces
Guest Wi-Fi with captive portal is a standard requirement for hospitality and shared workspace environments. Sentire has deployed guest Wi-Fi solutions across hotels, serviced offices, and co-working facilities. Contact us to discuss the right setup for your environment and guest volume.
Also in Networking & Infrastructure
Structured Cabling
Cat6 and fibre installation with professional patch panels, labelling, and documentation. Build clean, certified, future-proof network infrastructure for offices of any size in Nairobi.
Wi-Fi Design & Deployment
A properly designed wireless network, not just access points plugged into walls. Full-site survey, Omada EAP deployment, and managed ongoing performance.
Enterprise WiFi Deployment
Site surveys, professional access point placement, and controller configuration for Ubiquiti and Cisco Meraki. Reliable coverage across open-plan offices, multi-floor buildings, and warehouses.
Omada SDN Controller
Centralised management for your entire TP-Link Omada network, access points, switches, and gateways, from a single dashboard. On-premise or cloud-hosted.
Firewall and Network Security
Sophos XGS or Mikrotik firewall installation and configuration with VPN, VLAN segmentation, and traffic policies. Build a secure perimeter that protects your Kenyan business.
Get it done right
Let Sentire handle your Guest Wi-Fi & Captive Portal.
Our engineers are based in Nairobi and support businesses across Kenya. No lengthy contracts. Just reliable, expert IT delivered as a service.