This document is intended to provide merchants with requirements and recommendations to keep Salido running as efficiently, quickly, and reliably as possible. Please email hospitalitysupport@north.com with any additional concerns. This was last updated on February 12, 2025.
Internet Access
- Main Connection: This should be a high-speed connection with at least 100 Mbps download speed and 10 Mbps upload speed. You can test your Internet speed using a free tool like fast.com. If you plan to offer guest Wi-Fi, consider getting an even faster plan.
- Cellular Failover Backup: Merchants are required to have a backup as a secondary network to ensure Salido stays operational if your primary Internet Service Provider (ISP) fails. We help merchants purchase Cisco Meraki as a backup solution.
- Response Time: We recommend that your Internet connection have an average round-trip response time of no more than 200ms (over a 10x test) to the Salido Cloud API. We offer a built-in latency testing tool for merchants to use on-site as needed. If your average round-trip response time from this tool is greater than 500ms, contact our implementation team to identify ways we can improve network latency.
- Firewall Configuration: Your ISP modem/router settings should be bridged or put into "pass-through mode" to disable functions that might interfere with our system, like built-in firewalls (especially SIP alg & H.225 when using VoIP phones), NAT, DHCP, and Wi-Fi broadcasting.
- NOTE for Verizon Customers: If you use Verizon FiOS, you should connect directly to the Optical Network Terminal (ONT), removing the wireless router provided by FiOS. If your property uses cable TV from FiOS, then you must keep the FiOS modem connected and supply it with one of your static IPs.
Wireless Access Points
- Placement and Antenna: Place your Wireless Access Points (WAP) in locations that provide good coverage for your POS Terminals and printers, with a direct line of sight when possible. We recommend using WAPs with omnidirectional antennas mounted on the ceiling.
- Dual-Band Capability: Your Wireless Access Points should be able to broadcast on both the 2.4 GHz and 5 GHz bands, using the same network name or Service Set Identifier (SSID), and should be capable of band steering—the ability to automatically direct devices to the best available band based on network conditions. Both bands are required for the Salido installation.
Physical Infrastructure
- Dedicated Network Area: Designate a clear, unobstructed space for your network equipment, including your modems, routers, cables, and wires. A network rack is a great organizational tool.
- High-Quality Cabling: For your connections, use high-quality CAT6 Ethernet cables. For longer runs (over 175 feet), use CAT6A cables. Be sure to label all cables on both ends clearly.
- Clear Labeling: Patch Panels, Switches, and all other network equipment should be clearly labeled, especially to identify segmented networks.
- Gigabit Speed Equipment: Ensure all network devices, including cables, switches, and routers, support at least a gigabit connection speed.
- Network Segmentation: To enhance security and performance, utilize managed switches to isolate your POS, office, and guest networks. It is recommended that you use a firewall, switch, and access point capable of supporting VLAN configurations.
- PoE for Wi-Fi: We recommend using a Power over Ethernet (PoE) firewall or switch to power your wireless access points, simplifying installation and reducing clutter.
- Hardwired Connections: Terminals and printers should be connected to the network via a hardwired ethernet connection in order to provide a more stable network experience.
Network Setup
-
Network and Equipment Segmentation: POS equipment should be on a separate virtual local area network (VLAN) that cannot be reached from any other on-premise network.
-
- We recommend segmenting all internal networks on a single firewall using virtual local area networks (VLAN) and necessary firewall rules to help control traffic and protect your system.
-
- Bandwidth Prioritization: To ensure smooth operations, prioritize the bandwidth for your POS network. You can throttle the guest network or use Quality of Service (QoS) to allocate bandwidth.
-
IP Addresses: Merchants should use specific IP address ranges for each network, for example:
-
-
Native/Office Network: Class C Private IP subnet, e.g. 192.168.2.0/24
-
- Fixed or reserved IPs should be used on the native network to prevent IP conflicts with statically assigned devices
-
- Salido Network: Class B Private IP subnet, e.g., 172.16.0.0/24 (preferably keeping the POS network off of VLAN ID 1)
- Guest Network: Class A Private IP subnet, e.g.10.0.0.0/16
-
Native/Office Network: Class C Private IP subnet, e.g. 192.168.2.0/24
-
PCI Compliant Network
The POS network MUST be PCI compliant and should be scanned and tested for compliance. Independent networking partner MacADEPT can perform a network audit upon request, which is recommended prior to the Salido installation.
- PCI Compliance Testing: Regularly scan and test your POS network for vulnerabilities and implement any necessary changes to maintain PCI compliance.
- Network Segmentation: Keep your POS network completely segmented and secure from other networks (Office, Guest, etc.). No communication should be allowed between internal networks unless specifically designated. No network traffic should ever be allowed to cross onto the POS Local Area Network (LAN) or WLAN.
- Wireless Network Security: Hide the SSID of your POS Wi-Fi network and use strong, complex passwords for all network access points, especially for the POS network (8+ characters, containing at least three character types: uppercase, lowercase, numbers, symbols).
- Device Restrictions: Only connect devices approved by Salido to your POS network to minimize security risks.
Comments
0 comments
Please sign in to leave a comment.