A shared use space needs a network that can support multiple companies in one building without allowing one company to access another company’s systems.
The goal is to provide shared internet and building services while keeping each tenant’s network separate and secure.
Recommended Infrastructure
Internet Connection
Use a business-grade fibre connection where possible. If the internet is critical, add a second connection using another provider or a 4G/5G backup.
Router and Firewall
Use a business-grade router or firewall that supports VLANs, firewall rules, VPN access, reporting, and multiple networks.
Managed Switches
Use managed switches that support VLAN tagging. This allows each company, wireless network, printer network, and shared service to be separated.
Wireless Access Points
Use business-grade wireless access points that support multiple SSIDs. Each SSID should connect to the correct VLAN.
Example wireless networks:
Company A Wi-Fi
Company B Wi-Fi
Guest Wi-Fi
Building Management Wi-Fi
Admin Wi-Fi
VLAN Setup
Each company should have its own VLAN.
Example:
VLAN 10 – Management
VLAN 20 – Company A
VLAN 30 – Company B
VLAN 40 – Company C
VLAN 50 – Guest Wi-Fi
VLAN 60 – Printers
VLAN 70 – CCTV
VLAN 80 – Phones
Guest Wi-Fi
Guest Wi-Fi should only allow internet access. It should not allow access to printers, computers, servers, CCTV, or other company networks.
Shared Printers
If printers are shared, place them on a separate printer VLAN and allow only approved companies to access them.
CCTV and Access Control
CCTV and door access systems should be isolated from normal user networks.
Documentation
Keep a record of:
VLAN numbers
IP address ranges
Switch port assignments
Wi-Fi names
Firewall rules
Admin passwords
Device locations
Support contacts
A shared use space should be designed for separation, security, and easy management. Each company should have its own private network while still being able to use shared services where approved.
Click here for step by step instructions for one way to do this with Grandstream products as ana example. each product range has a similar setup.