Use this checklist to verify that your network meets all standards required to keep the Lightspeed Restaurant app running smoothly.

Choosing your hardware

1. Network hardware
   • You can purchase supported network hardware directly from Lightspeed.
   • Use a dedicated router for Lightspeed POS devices, printers, and payment terminals.
   • Other recommended brands for networking hardware: UniFi, IgniteNet.
   • (Advanced) If you purchase network hardware outside of Lightspeed, ensure it is business grade and supports Quality of Service (QoS) and PCI DSS compliance.
2. Extending your network
   • Extend Wi-Fi coverage using wired access points or a mesh system.
   • Avoid wireless range extenders.
   • Use network switches if you need additional Ethernet ports for LAN devices.
3. Printers
   • Use Ethernet cables (Category 5e or higher) to connect to your receipt and kitchen printers for reliability.
   • Avoid Wi-Fi or Bluetooth printers in environments with interference (for example, microwave ovens) or large physical barriers (for example, around corners or behind walls).
4. Payment terminals
   • Consider using payment terminals with 4G capability for standalone payments in case of outages by your ISP (Internet Service Provider).

Setting up your network

1. Physical setup
   • Place the router in an open, central, elevated area 
   • Keep the router away from sources of electronic interference, heat, and physical barriers.
   • Ensure ample airflow around the router.
   • Position the router close to Lightspeed devices for optimal internet speed and Wi-Fi strength.
   • Install any access points higher than 2.5 m (8 ft), roughly every 100 m² (1,000 ft²), and staggered across floors.
2. Network infrastructure
   • Connect LAN-based devices with an RJ45 (Ethernet) cable, Category 5e or higher.
   • Ensure a minimum internet speed of 20 Mbps download and 20 Mbps upload for each POS device and payment terminal.
3. Wi-Fi configuration
   • Set up a 2.4 GHz password-protected Wi-Fi network for POS devices.
   • Use WPA2-Personal (PSK) or WPA3-Personal (PSK) authentication on your network.
   • (Advanced) Configure your router to use 8.8.8.8 and 8.8.4.4 as its DNS servers.
   • (Advanced) Disable features that merge 2.4 GHz and 5 GHz bands into a single SSID.
4. Wi-Fi strength
   • Add or move access points as necessary to improve coverage.
   • (Advanced) Test Wi-Fi coverage on each POS device during peak times, maintaining signal strength above -67 dBm. The closer to 0, the stronger the signal.
5. iOS / iPadOS Wi-Fi settings
   • Under Settings > Wi-Fi, tap the blue (i) next to your connected network. Make sure the settings are as follows:
     • Auto-join: Enabled
     • Low Data Mode: Disabled
     • Private Wi-Fi Address: Disabled
     • Limit IP Tracking: Disabled
     • Configure DNS: Manual (8.8.8.8 and 8.8.4.4)

Network configuration

1. Network architecture
   • Use a dedicated network for POS devices and hardware.
   • Change your router's default admin username, password, and default IP address.
   • (Advanced) Set up DHCP reservations for printers and payment terminals.
2. Firewall and ports
   • (Advanced) Configure your firewall to dynamically check for IP updates at least every 60 seconds.
   • (Advanced) Open required outbound cloud ports: TCP 443, 8883.
   • (Advanced) Open required local LAN ports: TCP/UDP 22, 80, 8080, 8443, 9100, 9140, 9880.
3. Domains and IP addresses
   • (Advanced) Disable settings that block device communication: Client Isolation, AP Isolation, Wireless Isolation, Smart Connect/Band Steering, and IPv6.
   • (Advanced) Allow traffic to and from *.lightspeed.app, *.ikentoo.com, *.adyen.com, *.adyenpayments.com.
4. Active and passive POS devices
   • Use only one active POS device per location; configure all other POS devices as passive.
   • Connect the active POS device directly to the router using an Ethernet adapter.
   • Ensure the active POS device remains connected and powered on during service.
5. Security best practices
   • Regularly update operating systems, software, hardware firmware, and security tool signatures.
   • Keep a reference log of all hardware model and serial numbers to verify during regular inspections.
   • Secure physical POS areas, install physical port blockers on unused ports, apply tamper-evident seals, and run cables through concealed conduits.

What's next?