IT Setup for a Retail Store: POS, Internet, Wi-Fi and Cameras

The short answer

A reliable store rests on four things: a separate network for POS and card terminals, backup internet, video surveillance with clear retention, and a UPS for everything involved in a sale. Guest Wi-Fi and cameras should not share a network with the tills, and one ISP failing should not stop card payments.

Network layout: separate the segments

A minimal setup for one store is several VLANs on one managed switch and router:

Why it matters:

• Payment security. Bank requirements and the PCI DSS standard come down to isolating the card processing environment. A customer on guest Wi-Fi should not be able to see a till, even in theory.
• Stability. A guest downloading updates should not slow down receipt printing.
• Troubleshooting. With separate segments, problems are easier to pin down.

Backup internet for card payments

If the internet drops and tills and terminals only work online, card sales stop. Backup options:

• A second ISP using a different technology: for example fiber plus an LTE router.
• A dual-WAN router with automatic failover that checks link availability itself.
• Terminals with a built-in SIM card as an extra fallback — ask the bank whether the model supports this mode.

Check that after switching to LTE the POS software and fiscal data keep flowing, and that cameras do not eat the backup link with cloud traffic. Prioritize POS and payment traffic on the router.

Wi-Fi in the store

• One or more access points managed by a single controller instead of consumer routers in the corners.
• Separate SSIDs for staff (handheld scanners, tablets) and guests.
• A guest network with client isolation and a speed limit.
• Power access points over PoE from the switch — fewer power adapters and easier UPS backup.
• Metal shelving and fridges noticeably block signal: check access point placement with a survey, not by eye.

Cameras

• A view of every till from above showing the cashier's hands and the counter, not a close-up of faces.
• Entrance, sales floor, stockroom, goods receiving area.
• The NVR in a locked cabinet, not under the till.
• Choose the retention period in advance and size the disk for it: storage depends on resolution, codec, bitrate and number of cameras.
• PoE cameras on a separate switch or VLAN.
• Change default passwords on cameras and the recorder, and do not expose recorder ports to the internet — view footage via VPN or the vendor's cloud.
• Check audio recording and camera placement against local law and lease terms.

UPS: what to connect

Put on the UPS everything you need to complete a sale or keep recording:

• till PCs and receipt printers;
• router, switch, LTE modem;
• video recorder and the camera PoE switch.

Size power and runtime from total load and how long you need to hold out: long enough to close the shift, or to keep trading through a short outage. UPS batteries age and need periodic checks.

Launch checklist for a new store

1. Primary and backup internet are connected; failover is tested by unplugging the primary cable.
2. Tills are in their own VLAN; the guest network cannot see tills or terminals.
3. Test sale: cash, card, refund, receipt printing, fiscal data upload.
4. A test card payment while running on the backup link only.
5. All cameras record, recorder time is synced, footage opens remotely.
6. The UPS holds the load: cut the power and confirm the till and router keep running.
7. Default passwords are changed everywhere; credentials are stored securely.
8. Network diagram, equipment list and ISP and bank contacts are saved.