Wi-Fi Connection at School: Technical and Legal Considerations

Organizing wireless internet in educational institutions is a task that requires taking into account dozens of factors: from technical limitations to strict requirements Roskomnadzor And Federal Law No. 152-FZ on personal data protection. Unlike a home network, school Wi-Fi must not only provide stable coverage for 50-500 devices simultaneously, but also guarantee content filtering, protection from cyberattacks, and traffic separation for students, teachers, and administrative staff.

This article will help you understand the key stages: from choosing optimal equipment (access points Ubiquiti UniFi, routers MikroTik or solutions from Cisco Meraki) before setting up VLAN and project approval with the provider. We will consider this in detail. Mandatory requirements for school networks in 2026, including new amendments regarding the storage of connection logs for 6 months and mandatory authentication through Unified Identification System (ESIA).

Important: If your school is located in a historic building with thick walls or on a large site (e.g., a training and industrial complex), standard solutions may not work. In such cases, you will need network design taking into account radio frequency survey — We'll tell you about that too.

1. Legal requirements for school Wi-Fi in 2026

Before purchasing equipment, review the regulatory framework. Changes that came into effect in 2023 require schools to:

• 📜 Filter content according to the unified register of prohibited sites (Roskomnadzor) with mandatory integration with the system Cerebral palsy (Children's protected content).
• 🔐 Use two-factor authentication for teachers to access administrative resources (e.g. through Government services or corporate portal).
• 📡 Provide coverage at least 90% of educational premises (including gyms and auditoriums) at minimum speed 50 Mbps to the device.
• 📊 Store connection logs within 6 months (previously it was 3 months) with the possibility of providing them upon request of the inspection authorities.

Pay special attention Order of the Ministry of Education No. 185 from 2026, which regulates the division of the network into three zones:

⚠️ Attention: From January 1, 2026, schools are required to use only certified FSTEC equipment. The list of approved models is published on the website. reestr.digital.gov.ru — check it before buying!

2. Choosing Equipment: What to Buy for a School with 300+ Devices

For a secondary school with 20 classrooms and 300 simultaneously connected devices (smartphones, laptops, interactive whiteboards), the minimum equipment set includes:

• 📶 Wi-Fi controller: Ubiquiti UniFi Dream Machine Pro (supports up to 500 clients) or MikroTik CCR2004-1G-12S+2XS for large schools.
• 🔄 Switch: Cisco SG350-28P (24 PoE+ ports for powering access points).
• 📡 Access points: Ubiquiti U6-Pro (1 point for 2 classes) or Ruckus R750 for rooms with high device density.
• 🛡️ Firewall: Fortinet FortiGate 60F with content filtering module.

The cost of a school kit for 500 devices is from 400,000 to 1,200,000 rubles Depending on the brand and the need for channel redundancy. It's not worth skimping on equipment: cheap routers (TP-Link or D-Link home series) will not handle the load and will "drop" when 100+ gadgets are connected simultaneously.

When choosing access points, please pay attention to:

• 📶 Wi-Fi 6 standard (802.11ax) - mandatory for schools (supports up to 8 data streams simultaneously).
• 🔋 PoE++ (802.3bt) — power supply via network cable up to 60 W (necessary for points with multiple antennas).
• 📊 MU-MIMO support — allows you to exchange data with multiple devices simultaneously.

3. Connection diagram: from provider to classes

A typical Wi-Fi deployment scheme in a school looks like this:

1. Provider login → optical terminal (For example, GPON ONT from Rostelecom).
2. ONT → firewall (FortiGate or MikroTik) with setting NAT And VLAN.
3. Firewall → managed switch (For example, Cisco SG350) with division into VLAN.
4. Switch → Wi-Fi controller (For example, UniFi Cloud Key).
5. Controller → access points in classrooms, assembly hall, cafeteria.

Example of setup VLAN to separate traffic:

# Configuring VLAN on MikroTik
/interface vlan
add interface=bridge name=vlan_students vlan-id=10
add interface=bridge name=vlan_teachers vlan-id=20
add interface=bridge name=vlan_admin vlan-id=30

/ip address
add address=192.168.10.1/24 interface=vlan_students
add address=192.168.20.1/24 interface=vlan_teachers
add address=192.168.30.1/24 interface=vlan_admin

For schools with several buildings it will be necessary fiber optic connection between buildings (or radio bridge Ubiquiti AirFiber, if cable laying is not possible). In this case, each case has its own switch, connected to the central one via L2TP tunnel.

Coordinate the project with Roskomnadzor|

Check your provider's bandwidth (minimum 1 Gbps)|

Order a radio frequency survey (if the building is older than 1980) |

Sign a contract with your provider for a static IP address|

Train the school's IT specialist to use the Wi-Fi controller-->

4. Setting up a Wi-Fi controller: step-by-step instructions

Let's look at the setup using an example Ubiquiti UniFi Controller (valid for versions 7.4+):

1. Installing the controller

   Download UniFi Network Application from the official website and install it on the server (or use a cloud solution UniFi Cloud). For schools, a local controller based on Ubuntu Server 22.04.

2. Creating networks (SSID)

   Go to the section Settings → Wireless Networks and add three networks:

   • SCHOOL-STUDENTS (VLAN 10, speed limited to 30 Mbps).
   • SCHOOL-TEACHERS (VLAN 20, priority traffic).
   • SCHOOL-ADMIN (VLAN 30, hidden network with WPA3-Enterprise).

ssh ubnt@[controller_IP]
sudo apt-mark hold unifi
sudo apt install unifi=7.3.83 # specify the stable version