A dedicated, properly set up local network is key to keeping Lightspeed Restaurant running smoothly. This guide covers our network requirements for internet speed, Wi-Fi signal, and hardware. It also explains how to set up your router, manage IP addresses, configure firewall rules, and adjust device settings.

Internet connectivity

Ensure your network meets Lightspeed Restaurant's minimum bandwidth and Wi-Fi signal requirements, and follow the right testing procedure to verify performance throughout your service areas.

• Internet bandwidth: A 20 Mbps minimum download and upload speed is required for each POS device and payment terminal. Select an internet package fast enough to handle the total number of devices you’ll be using, along with any other network activity.
• Wi-Fi strength: Wi-Fi devices must have a Received Signal Strength Indicator (RSSI) above -67 dBm. The closer to 0, the stronger the signal.

• Here are definitions for the technical terms used in the previous bullets. Learn more in our full networking glossary.

  Bandwidth:
  Measures the amount of data that can be transmitted across a network or internet connection.

  dBm:
  Decibel milliwatts, a unit of measurement for RSSI (the Wi-Fi signal strength). Values closer to 0 indicate a stronger signal. Lightspeed Restaurant requires that POS devices maintain an RSSI greater than -67 dBm.

  Internet:
  The global system of interconnected computer networks that uses standard protocols to connect devices worldwide.

  Mbps:
  Megabits per second, a measure of data transfer speed. 1 Mbps equals 1,000 Kbps. Lightspeed requires minimum download and upload speeds of 20 Mbps for each POS device.

  RSSI:
  Received Signal Strength Indicator, a measurement of Wi-Fi signal strength for a device, typically expressed in dBm. Test the connectivity of each POS device to ensure it meets our -67 dBm minimum RSSI.

  Wi-Fi:
  A wireless networking technology that allows capable devices to connect to a network without physical cables. Wi-Fi signals are broadcast by wireless routers and access points.

Testing connectivity

After setting up your network hardware, test your internet speed and RSSI in areas of the restaurant where POS devices will be stationed or roaming.

1. While the restaurant is full, walk to the furthest corner of each service area. Make sure to include outdoor and patio sections.

   Testing at full capacity ensures your POS devices meet our connectivity requirements during your busiest hours. Peak traffic can slow speeds, which may require adjusting your network setup or internet plan.

2. On a phone or tablet, visit an online speed test and follow the prompts to test your upload and download speeds.
   • Download speed (minimum required): 20 Mbps or faster
   • Upload speed (minimum required): 20 Mbps or faster

3. Use Apple's AirPort Utility or a third-party Wi-Fi analyzer app to test your RSSI.

   The minimum required RSSI is -67 dBm or stronger (closer to zero). If yours is too weak, add new access points or move existing ones to increase signal coverage.

4. Repeat the previous steps to test other service areas.

• Checking RSSI with Apple's AirPort Utility

  1. Download Apple's AirPort Utility app on an iOS or iPadOS device.
  2. Open the iOS or iPadOS Settings app.
  3. Scroll down on the left side and select AirPort Utility.
  4. Toggle on the Wi-Fi Scanner setting.
  5. Open the AirPort Utility app.
  6. If prompted, tap OK to allow AirPort Utility to find and connect to devices on your local network.
  7. Tap Wi-Fi Scan in the upper-right corner.
  8. Tap Scan to begin the scan.

  9. As nearby Wi-Fi networks begin to appear, search for your network on the list. Look for the RSSI, the signal strength, under the network name.

  10. When finished, tap Stop to halt the scan. Then, repeat steps 2-4 to toggle off the Wi-Fi Scanner setting.

      Important: Skipping this step and leaving the Wi-Fi scanner active may drain the battery life of your device.

Hardware and cabling

Deploy business-grade network hardware and follow standardized cabling practices to build a reliable local network infrastructure for your POS system.

We recommend buying network hardware directly from Lightspeed so our Support team can remotely configure, manage, and troubleshoot your network.

Network hardware

• Modem: A modem is required to convert the signal from your internet service provider (ISP) into a format your local network can use.
• Router: Set up a dedicated router used only for Lightspeed Restaurant at your business. The router you choose should be:
  • Purchased separately, not supplied by your ISP.
  • Business-grade, not made for home use.
  • Able to manage traffic through quality of service (QoS).
• Extending your network: If a single router isn't enough to cover your space or connect all your devices, expand your network using:
  • A mesh system or wired access points to extend the router’s Wi-Fi signal into areas it does not sufficiently cover. Avoid wireless range extenders.
  • Switches to add additional ports for LAN devices, such as certain printers or payment terminals.
• PCI compliance: Use network hardware that supports PCI DSS security requirements.
• Hardware placement: Where you position your network hardware is just as important as the hardware you choose.
  • Set up all wireless network hardware away from electronics (microwaves, cordless phones, etc.), physical barriers (concrete walls, metal objects, etc.), and heat sources (kitchen, etc.).
  • Routers should be placed somewhere open, central, and elevated.
  • Access points should be placed about every 100 m² (1,000 ft²) as needed, mounted higher than 2.5 m (8 ft). Install on floors where your router is not located, staggering to minimize interference.

• Here are definitions for the technical terms used in the previous bullets. Learn more in our full networking glossary.

  Access point:
  The network hardware that extends Wi-Fi signal coverage to areas not reached by the main wireless router. Access points typically cover about 100 m² (1000 ft²). Add new access points or move existing ones to increase signal coverage if your RSSI doesn’t meet our internet connectivity requirements.

  Business-grade hardware:
  Hardware that is built to higher performance standards than consumer-grade hardware, which makes it more reliable in a commercial setting. Business-grade hardware often has a longer lifespan, advanced security features, and extended support. Lightspeed recommends using business-grade hardware in your restaurant.

  Consumer-grade hardware:
  Hardware that is built for personal use in the home. Consumer-grade hardware often has a shorter lifespan than business-grade hardware, is built with lower-quality components, but costs less to purchase. Lightspeed recommends using business-grade hardware in your restaurant.

  Internet service provider (ISP):
  A company that provides internet access to subscribers. An ISP connects your local network to the broader internet, enabling Lightspeed Restaurant to communicate with cloud-based services. Consider a business-grade package from your ISP for enhanced reliability and support.

  Local area network (LAN):
  A type of network that exists in a physical location, such as your business. POS devices, LAN, and Wi-Fi hardware must connect to the same dedicated LAN you set up for Lightspeed Restaurant.

  Mesh network:
  A type of network that's set up using multiple connected nodes, instead of a single router, in order to broadcast a uniform Wi-Fi signal throughout an area. With a mesh network, your devices connect to a single network name (SSID) and intelligently roam between nodes as needed.

  Modem:
  Network hardware that connects your local network to your internet service provider. It converts the incoming internet signal into a format that your devices can use.

  Payment Card Industry Data Security Standards (PCI DSS):
  A set of regulations established by the PCI Security Standards Council (SSC) to protect cardholder data. Every merchant who accepts card transactions must adhere to these standards to do business with credit card companies, banks, and payment processors.

  Quality of Service (QoS):
  A set of networking features used to prioritize certain traffic and manage bandwidth to ensure reliable performance.

  Router:
  Network hardware that manages the flow of data between your local network and the wider internet.

  Switch:
  A device that provides additional Ethernet ports for connecting multiple wired devices to a network, such as certain printers or payment terminals. Use a switch if you need more ports than your router provides for LAN devices, and connect it back to the router for your Lightspeed Restaurant network.

Cabling

• Cabling: Use Cat 5e or better Ethernet cables with RJ45 connectors for all wired network connections. Terminate all connectors using the same wiring scheme.
• Wall jacks: Ethernet wall jacks must have a direct connection to your router or to a switch leading back to the router. Terminate all wall jacks to the same wiring scheme as your RJ45 connectors.

• Here are definitions for the technical terms used in the previous bullets. Learn more in our full networking glossary.

  Cabling:
  The physical wires and cables used to connect network hardware, typically referring to Ethernet cables in a network setup.

  Cat 5e:
  A category of Ethernet cable capable of supporting speeds up to 1 Gbps. This is the minimum requirement for network cabling in your Lightspeed Restaurant system, but you can also use newer variants like Cat 6.

  Ethernet:
  A wired networking technology that uses cables to connect devices to a local area network. We recommend using printers and payment terminals with Ethernet connections as they are generally more reliable than wireless technologies.

  RJ45:
  A standard type of connector for Ethernet cables. This connector is what you plug into the Ethernet ports on devices like routers, computers, Lightspeed-compatible printers, and payment terminals.

  Wall jacks:
  Also known as Ethernet jacks, these are network connection points installed in walls or floors for convenient access to the network.

Configuration and access

Configure your router and wireless settings for optimal performance, then ensure all POS hardware connects to the dedicated network you set up for Lightspeed Restaurant with managed IP assignments.

Network configuration

• Router login: Change your router's default admin username and password to prevent unauthorized access to its settings. If possible, also change the router's default IP address (for example, 192.168.1.1).
• Wi-Fi setup: Set up a dedicated, password-protected 2.4 GHz network for your POS hardware, keeping 5 GHz networks on a separate SSID for non-POS devices.
• Security: Use WPA2-Personal (PSK) or WPA3-Personal (PSK) authentication.
• DNS: Configure your router to use 8.8.8.8 and 8.8.4.4 as its DNS servers. This routes traffic through Google's more reliable servers rather than your internet service provider's.
• Features to disable: Disable any features that might block communication between your POS devices and hardware, including:
  • "Isolation" settings like Client Isolation, AP Isolation, and Wireless Isolation.
  • Settings that merge 2.4 GHz and 5 GHz Wi-Fi frequencies into a single SSID, such as Smart Connect and Band Steering.
  • IPv6.

• Here are definitions for the technical terms used in the previous bullets. Learn more in our full networking glossary.

  Domain:
  The human-readable address you enter in your browser to access a website or service on the internet. For example, lightspeedhq.com.

  Domain Name System (DNS):
  Converts the domain you enter in your browser to the IP your browser visits to access a given webpage. By default, your router will typically use the DNS provided by your internet service provider. However, we recommend configure your router to use 8.8.8.8 and 8.8.4.4 as its DNS to route traffic through Google's more reliable servers.

  GHz:
  An abbrieviation for gigahertz, a measure of frequency. Wi-Fi signals commonly broadcast on three different wireless bands:

  • 2.4 GHz (standard): Longest range, lowest bandwidth and speed. Best for compatible devices that are farther from the router.
  • 5 GHz (high speed): Shorter range, higher bandwidth and speed. Best for compatible devices that are physically close to the router.
  • 6 GHz (new): Shortest range, highest bandwidth and speed. Only compatible with new hardware that supports 6 GHz.

  IPv4 and IPv6:
  Two versions of the Internet Protocol used to format IP addresses and route data across networks. IPv4 is still more widespread today, while IPv6 is a newer standard that was created to accommodate a much larger set of potential IP addresses.

  SSID:
  Service Set Identifier, the name given to a Wi-Fi network.

  WPA:
  Wi-Fi Protected Access, a security protocol for wireless networks. Use WPA2-Personal (PSK) or WPA3-Personal (PSK) authentication for your Lightspeed Restaurant network's security.

Device connectivity and IP addressing

• Devices: Connect all POS devices and hardware to the network created by the router you're using for Lightspeed Restaurant.
• Active vs. passive POS devices: Use only one active POS device per location and set others to passive. Each type of POS device has a different role and data pathway on your network.
• DHCP reservations: Set up DHCP reservations in your router for printers, payment terminals, and other POS hardware that's connected to your network. If you are unable to create DHCP reservations, setting a static IP on each piece of hardware is an alternative.

• Here are definitions for the technical terms used in the previous bullets. Learn more in our full networking glossary.

  DHCP:
  Dynamic Host Configuration Protocol, a network protocol that automatically assigns IP addresses and other configuration settings to devices on a network. We recommend setting up DHCP reservations for LAN printers and payment terminals to ensure they always receive the same IP address.

  DHCP reservation:
  A router feature that assigns a fixed local IP address to specific devices. This ensures devices always get the same IP from the router, meaning you won’t need to update the IP address in Lightspeed Restaurant after initially entering it. We recommend setting up DHCP reservations for printers, payment terminals, and other hardware peripherals that connect to your network.

Security and compliance

Protect your network and maintain PCI DSS compliance by updating security tools, configuring firewall rules, permitting traffic for essential domains and ports, and following security best practices.

• Firewall: Configure your firewall to allow open communication between your devices and Lightspeed Restaurant.
• Updates: Regularly update the firmware and signatures of any network security tools, including intrusion detection (IDS) and prevention systems (IPS).
• PCI compliance: Ensure your network is configured to comply with the PCI DSS security requirements.
• Domains and ports: Allow network traffic to and from the domains and network ports in the sections below.
• Security best practices: Follow all guidelines for securing your physical setup and preventing social engineering attacks to protect your sensitive information and that of your customers.

• Here are definitions for the technical terms used in the previous bullets. Learn more in our full networking glossary.

  Allowlist:
  A list of approved items, such as IP addresses and domains, that are allowed access through network security measures. There are a few domains that need to be added to your allowlist for Lightspeed Restaurant.

  Firewall:
  A network security system that monitors and controls incoming and outgoing network traffic based on predetermined security rules. Configure your firewall to open specific network ports that allow open communication between your devices and Lightspeed servers.

  Payment Card Industry Data Security Standards (PCI DSS):
  A set of regulations established by the PCI Security Standards Council (SSC) to protect cardholder data. Every merchant who accepts card transactions must adhere to these standards to do business with credit card companies, banks, and payment processors.

  Ports:
  Can refer to the software channels used for specific types of network traffic or the physical connectors on network hardware for plugging in Ethernet cables.

Domains allowlist

Allow traffic to and from the following domains to enable communication with the Back Office and payment processing through Lightspeed Payments. Ensure your firewall dynamically checks for IP updates at least every 60 seconds.

• *.lightspeed.app
• *.ikentoo.com
• *.adyen.com
• *.adyenpayments.com

Ports to open

Ensure the following inbound and outbound network ports are open to enable communication between your POS devices, local peripherals, and cloud services.

Security best practices

Adopting security best practices helps protect your POS environment from physical vulnerabilities and unauthorized access. Learn how to secure your physical hardware setup and prevent social engineering attacks targeting your business.

Securing your physical setup

Scammers can exploit in-person vulnerabilities to access sensitive information. For example, watching an employee's screen as they enter a password, physically installing a device that steals credit card information, or tampering with existing hardware.

To improve in-person security, control physical access to your systems and devices by:

• Using supported hardware: Ensure network hardware and other devices can be updated to remain compliant with the latest security standards. Avoid hardware that is end-of-life or no longer supported by its manufacturer.
• Logging model and serial numbers: Make a reference log of all model and serial numbers to verify during regular inspections that no hardware is swapped out or removed.
• Securing the POS area: Position POS devices, payment terminals, PIN pads, and screens for privacy. Use shelves and stands that cannot easily be removed. Mount equipment securely on your counter, or use locking stands and security cables. Consider also installing surveillance cameras.
• Conducting frequent audits: Periodically inspect all POS devices, credit card terminals, PIN-entry terminals, network hardware, and other POS equipment. Make sure that:
  • Handheld devices are accounted for at all times.
  • All devices on your hardware log are physically present and have matching model and serial numbers.
  • There are no broken seals, missing screws, extraneous wiring, additional labels, or evidence of tampering.
  • You can identify everything plugged into your USB and network ports. If something was plugged in by an unknown party, take immediate action.

Preventing social engineering attacks

Social engineering is the strategy of tricking someone into compromising their own security by divulging sensitive information. 

To avoid someone compromising your physical setup, always check credentials and confirm unannounced service calls directly with your support vendor or ISP before giving anyone physical access to your POS devices or networking gear.

To help keep your devices safe, consider also implementing:

• Off-hours storage: Lock mobile registers, handheld card terminals, and spare payment hardware inside a secure safe or locked cabinet overnight when the store is closed.
• Physical port lockdown: Install physical port blockers on exposed USB and RJ45 (Ethernet) ports on registers, routers, and switches to prevent rogue hardware or keyloggers from being plugged in.
• Tamper-evident seals: Place serial-numbered security stickers across device seams and unused ports. If a seal shows a VOID pattern or is broken, treat the device as compromised immediately.
• Concealed cabling: Route Ethernet and power cables inside counter conduits, mounting stands, or secure raceways to prevent unauthorized physical network taps or accidental disconnections.

iOS / iPadOS network settings

Configure the network settings on each iOS or iPadOS device to our recommended standards. This can help prevent potential disruption to certain POS functions.

• Auto-Join: Enabled
• Low Data Mode: Disabled
• Private Wi-Fi Address: Disabled
• Limit IP Address Tracking: Disabled
• Configure DNS: Manual, use 8.8.8.8 and 8.8.4.4

Apple's networking guide provides additional recommendations for its products.

Troubleshooting

If you're having issues related to your network, visit our troubleshooting guide on networking for help.

What's next?