Retail Wi-Fi for shops and chains

What a store network carries

Even a small shop now runs on its network:

• Tills and card terminals, which stop the business if they go offline.
• Stock, ordering and click-and-collect systems used by staff on handhelds and back-office PCs.
• Staff devices for rotas, training and communication.
• Digital signage, music and building systems.
• Cameras at entrances, tills and stockrooms.
• Shoppers' phones on guest Wi-Fi.

For a chain, multiply that by every store, most of which have no one technical on site. The network has to be simple to install, consistent between stores and visible from head office.

Keep payment traffic separate

Card payment systems should sit on their own network segment, with firewall rules that allow only the traffic they need. PCI DSS, the card industry's data security standard, is a requirement that retailers and their payment providers must meet, and segmentation is one of the ways retailers limit which systems fall within its scope.

The Meraki MX at each store enforces these rules locally and can apply the same policy at every store through a template. We design the separation; your payment provider or assessor decides what it means for your PCI DSS compliance, and we make no compliance promises on their behalf.

Guest Wi-Fi for shoppers

Guest Wi-Fi helps shoppers check prices, look up products and use loyalty apps in store. On Meraki access points it is a separate SSID with:

• a branded splash page where shoppers accept your terms
• isolation from your own systems and from other shoppers
• per-client bandwidth limits so guest use cannot slow the tills
• a walled garden so your own website or app works before sign-in

See cloud managed Wi-Fi for the full set of guest options.

Footfall and location analytics

Meraki access points can show how many people pass a store and how many come in, using the Wi-Fi probe requests that phones send even when they are not connected. The dashboard's location analytics present this as:

• Capture rate: the share of passers-by who become visitors.
• Engagement: how long visitors stay.
• Loyalty: how often visitors return.

Meraki's Scanning API can export the underlying data to other analytics tools. Access points with a dedicated scanning radio listen on all channels; others hear devices as they scan.

Two cautions. First, modern phones randomise their Wi-Fi MAC addresses, which Meraki says makes location analytics less accurate; treat the figures as trends, not counts. Second, location data about people is personal data in some circumstances, so take advice on your UK GDPR obligations and privacy notices before using it.

Keeping tills online: cellular backup

When a store's internet line fails, card payments and stock systems usually fail with it. A Meraki MG cellular gateway provides 4G or 5G as a backup uplink to the store's MX, which fails over to it automatically, so the store can keep trading. The gateway can sit where the signal is best and connect back over Ethernet. The right mobile network depends on coverage at each store: Forever Group supplies EE Business and Three Business, and can also supply O2 Business and Vodafone Business. Where a store needs more capacity or has more to lose, a second wired connection or a leased line is the alternative.

Staff devices and stock systems

Store staff rely on Wi-Fi for more than email: handheld scanners for stock counts and deliveries, tablets for click-and-collect and customer service, and back-office PCs for ordering. These need:

• Coverage on the shop floor, in the stockroom and at the goods-in door, which are often the hardest areas because of shelving and stock.
• Their own SSID and VLAN, authenticated with certificates, identity PSK or, through Cisco Access Manager, Microsoft Entra ID sign-in, so a lost device can be removed without changing a shared password.
• Priority over guest traffic, using traffic shaping so a busy Saturday on guest Wi-Fi does not slow stock lookups.

If the store also has a warehouse or distribution centre behind it, see warehouse Wi-Fi for the design issues racking and scanners bring.

Opening a new store

1. Survey or review plans for the new unit to place access points and agree cabling.
2. Order the internet connection early, with a cellular gateway ready to provide connectivity if the line is late.
3. Create the store's network in the dashboard and bind it to the store template, so addressing, SSIDs and firewall rules are set before any equipment arrives.
4. Claim the equipment to the store's network and stage it, so it arrives configured.
5. Install and connect: staff or installers plug the equipment in; it downloads its configuration from the cloud.
6. Check from head office that every device is online, tills can reach the payment provider and guest Wi-Fi is isolated.

Many stores, one template

Meraki's own documentation uses retail as the example for configuration templates: many sites that share a common network design. For a chain that means:

• New stores are added by binding a network to the template; the equipment arrives configured.
• Addressing is allocated per store automatically from a range you set.
• Policy changes, such as a new payment provider's firewall rule, reach every store at once.
• Every store's Wi-Fi uses the same SSIDs, so staff connect wherever they work.
• Head office sees every store's status in one dashboard, with alerts when a store goes offline.

Stores connect back to head office or a cloud hub using Auto VPN. Our multi-site network page covers hub and spoke topologies and SD-WAN, and Meraki SD-WAN describes it as a supplied service.

Cameras and store security

Meraki MV smart cameras sit in the same dashboard as the store's network, store footage on the camera without a separate recorder and can be viewed centrally by authorised staff. They suit entrances, tills and stockrooms. Each camera needs a licence: see Meraki MV licence. On the network side, the MX's security features depend on its licence edition, and DNS-layer protection such as Cisco Umbrella with Meraki can protect every store from one policy.

How Forever Systems helps retailers

Forever Systems is a Cisco Partner. For retailers we can design a standard store network and template, supply MX, MS, MR, MG and MV equipment and licences, stage kit so each store's equipment arrives configured, and arrange internet connections through Forever Group. We can plan rollouts around trading hours.

Ask us for a quote: contact us with your number of stores and what each one runs.