Networking, Wi-Fi & Fibre Optics

Technology for Hotels and Guesthouses in Zanzibar: A Practical Guide

A Zanzibar hotel needs guest Wi-Fi that reaches every room, a separate network for staff, payments and CCTV, and power backup that survives the daily cuts. This guide explains how to design that properly, from a six-room guesthouse in Stone Town to a beach resort.

  • Intermediate
  • About 15 min
  • Zanzibar resource
  • Last reviewed
Start the guide

Overview

What you will learn

  • Why guest, staff, POS and CCTV traffic should be on separate VLANs
  • How access points, PoE switches and a UPS keep Wi-Fi running in power cuts
  • Why buildings are joined with fibre, not copper
  • What to do first, second and third on a limited budget
  • Local factors: salt air, thick walls, heritage rules and receipting

Applies to

  • Business router or firewall with VLAN support
  • Managed PoE switches
  • Ceiling, wall and outdoor access points
  • CCTV recorder and cameras
  • UPS and surge protection

Tools Required

No tools needed.

Important

  • Do not open fire alarm panels or work on mains wiring yourself.
  • Roof, pole and ceiling work needs proper access equipment and a trained installer.
  • In Stone Town, visible external changes need conservation approval first.
  • Zanzibar accommodation providers must use a ZRA-approved PMS that works with VFMS. Check with ZRA or a tax adviser.

Step-by-Step Guide

How a well-designed hotel network fits together

1 / 7 steps

Primary Failover VLAN trunk Fibre ONT 4G backup Router / firewall Core PoE switch

Step 1

Start with two internet connections

  1. Fibre where available as the main link, with 4G or a second provider as backup, both into one business router.

    Expected result: If one provider fails, the router switches over and guests stay online.

  2. Guest Wi-Fi goes to the internet only, with client isolation so guests cannot see each other.

    Expected result: A guest's phone reaches the internet but nothing else on the property.

  3. Reception PCs, the property management system and printers sit on a staff VLAN with its own password.

    Expected result: Staff reach the PMS and printers; guests cannot.

  4. POS devices get a VLAN that can reach only their payment service, nothing on the guest or staff networks.

    Expected result: A problem on another network cannot reach the payment devices.

  5. Cameras and the recorder sit on their own VLAN, powered by PoE. Remote viewing uses a safe method, not open ports.

    Expected result: Cameras keep recording, and guests cannot reach the recorder's login page.

  6. Villas, the restaurant and staff quarters connect back by fibre to a switch in each building.

    Expected result: Long distances work, and lightning surges do not travel between buildings on the cable.

  7. The ONT, router, PoE switches and recorder all run from a UPS with surge protection in each rack.

    Expected result: When the mains drops, Wi-Fi, payments and cameras ride through until the generator takes over.

Troubleshooting

Common problems and how to fix them

1 Guests say Wi-Fi does not reach their room

Likely cause Too few access points for thick coral-stone walls.

Solution Add access points in or near the rooms, wired to a PoE switch.

2 Everything reboots in every power cut

Likely cause No UPS on the router, switches and recorder.

Solution Fit a UPS sized for the generator start-up, plus surge protection.

3 A guest can see the CCTV login page

Likely cause Guests and cameras share one network.

Solution Move CCTV to its own VLAN and block guest access in the firewall.

4 Card payments fail when the fibre goes down

Likely cause No backup connection or failover.

Solution Add a 4G or second-provider link and test failover.

5 Outdoor access point fails within a year

Likely cause Indoor equipment or unsealed connectors in salt air.

Solution Use outdoor-rated units with sealed connectors and stainless fixings.

6 Switch in another building dies after storms

Likely cause Copper cable between buildings carries surges.

Solution Replace the link with fibre and add surge protection.

In Depth

In Depth

A Zanzibar hotel needs guest Wi-Fi that reaches every room, a separate network for staff, payments and CCTV, and power backup that survives the daily cuts. This guide explains how to design that properly, from a six-room guesthouse in Stone Town to a beach resort.

Guests judge a hotel on the bed, the food and, increasingly, the Wi-Fi. A review that says "the Wi-Fi didn't reach our room" costs bookings, and a reception that cannot take card or mobile-money payments during a power cut costs money on the spot. Behind the scenes the same property needs CCTV, a working fire alarm and a back-office network that guests cannot reach.

What makes hotel technology harder in Zanzibar

Power is not steady. When the mains drops, the generator takes a few seconds to start, and every router, switch and recorder without a UPS reboots. Some never come back cleanly, and surges when power returns are a common cause of dead equipment.

Salt air and humidity. Near the sea, unprotected connectors, brackets and enclosures corrode quickly. Outdoor access points, cameras and joints need a suitable outdoor IP rating, sealed connectors and stainless or coated fixings.

Thick walls. Coral-stone and concrete block Wi-Fi far more than the plasterboard consumer routers are designed for. One powerful router at reception will not cover rooms two walls away. Our guide to Wi-Fi dead zones explains why.

Heritage buildings. Stone Town is a UNESCO World Heritage Site. Antennas, external cable runs, cameras on façades and new wall openings are visible changes that need approval from the conservation authority. Plan discreet internal routes and ask before work starts.

Lightning. Outdoor cable runs to a pool bar, gate camera or another building pick up surges in storms. Earthing and surge protection are essential on those runs.

Uneven connectivity. Parts of Unguja town have fibre; many coastal areas rely on fixed wireless or 4G. Almost everywhere, a second connection on a different technology is worth having.

Seasons and spares. The long rains are the quiet time for cabling and upgrades, but installers and parts get busy before high season. Spares often come from Dar es Salaam, so a failed switch with no spare on site can mean days of downtime.

Receipting rules. Zanzibar businesses issue receipts through the Zanzibar Revenue Authority's Virtual Fiscal Management System (VFMS). The VFMS Amendment Regulations, 2026 (Legal Notice 106 of 2026, signed on 5 August 2026) say a business providing accommodation and related hospitality services must use a property management system (PMS) approved by the ZRA Commissioner General. They also require the companies that supply or run that software to integrate it with the ZRA system. Press reports give 2 November 2026 as the compliance date in a ZRA public notice. Before you choose or renew a PMS, ask the supplier for proof of ZRA approval and check the current position with ZRA or your tax adviser. This is not tax advice.

Think of the property as several networks sharing one cable system and one or two internet connections. On a business-grade router or firewall and managed switches, each is a VLAN (virtual network). One cable to an access point can carry the guest and staff networks at the same time, so you do not need a cable per network.

Network Who uses it Key rules
Guest Wi-Fi Guests' phones and laptops Internet only; client isolation so guests cannot see each other; fair limits per device
Staff and office Reception PCs, managers, accounts, PMS Password-protected; reaches printers and the PMS
Payments (POS) Card terminals, POS tills Separate from guests and staff; only reaches what it needs
Security CCTV cameras, recorder, access control, intercoms No guest access; remote viewing only by a safe method
Building systems Fire alarm interfaces, PA, smart controls Managed only by authorised people

The firewall rules between VLANs matter as much as the VLANs. Guests should reach the internet and nothing else; the POS network should reach its payment service and nothing else.

The physical layer

  • A small central rack in a cool, dry, lockable room: router or firewall, core switch, patch panel and CCTV recorder, all on a UPS.
  • Managed PoE switches that power access points and cameras over the network cable, so the UPS keeps them running too. Check the power budget with the PoE budget calculator. Our explainer on what a network switch does covers managed and PoE switches.
  • Ceiling or wall access points close to where guests use their devices: in or just outside rooms, not only in corridors. In coral-stone buildings, plan on one per room or per small group of rooms. Copper runs stay within 100 metres.
  • Fibre between buildings. Fibre covers longer distances than copper, and a non-metallic fibre cable does not conduct surges between buildings. See fibre optic vs Ethernet and, for resorts, network planning for large properties.
  • Two internet connections with automatic failover.

For a step-by-step Wi-Fi plan, read business Wi-Fi network design. For mesh kits versus centrally managed access points, see mesh Wi-Fi vs managed access points.

Safety and security systems

Extrion has not yet published a hospitality project. The engineering is the same as our hospital work, where we installed LAN, fibre, CCTV, fire, public address and nurse-call systems in occupied 24-hour buildings, such as the Pediatric Hospital at Mnazi Mmoja and the Mental Hospital at Kidongo Chekundu. A hospital ward and a hotel corridor share the same problems: people sleeping, systems that must not go down and safety systems that must work.

Build it in phases

Phase 1: essentials (any size). A business-grade router with separate guest and staff networks; a UPS on the router, main switch and recorder; surge protection; a 4G or second-provider backup with failover; CCTV on entrances, reception and the cash point; working smoke detection in every room.

Phase 2: proper coverage. Structured cabling to every room or room cluster into a labelled patch panel; centrally managed access points with room-level coverage and outdoor-rated units at the pool, restaurant and garden; VLANs for POS, CCTV and building systems; a guest portal (terms or room codes) and per-device limits.

Phase 3: resort scale. A fibre backbone between blocks and villas with distributed switches on UPS; addressable fire alarm and zoned PA; access control on staff areas and stores; monitoring that alerts you when an access point, camera or connection fails, before a guest complains.

Hotel technology checklist

  • Walk the property with a phone and note every room or area with weak or no Wi-Fi.
  • Confirm guest Wi-Fi is separated from staff, POS and CCTV networks, and test that a guest cannot reach the recorder.
  • Turn on client isolation on the guest network.
  • Put the router, switches and recorder on a UPS, and test it by switching off the mains.
  • Fit surge protection on the incoming supply and on outdoor cable runs.
  • Arrange a second internet connection and test failover.
  • Check outdoor equipment for corrosion, loose seals and water inside enclosures.
  • Confirm CCTV records for as many days as you need, using the CCTV storage calculator.
  • Change all default passwords and give staff their own accounts.
  • Confirm your PMS is approved by ZRA and connected to VFMS, and that your POS meets current ZRA receipting requirements.
  • Test smoke detectors and the fire alarm on a schedule, and log the results.
  • Keep spares on site: at least one access point, one PoE switch and patch cables.
  • Label every cable at both ends and keep a network diagram.
  • In Stone Town, confirm conservation approval before visible external work.
  • Schedule upgrades for the low season and book your installer early.

Common mistakes we see

  • One big router at reception. Coverage comes from more access points near guests, not more power.
  • Consumer equipment in a 24-hour business. Home routers struggle with dozens of guests and often hang after power cuts.
  • Guests and the CCTV recorder on one network. Anyone on guest Wi-Fi may find the recorder's login page.
  • No UPS on the network. The generator starts, but every device has rebooted.
  • Copper cable between buildings. It is the path lightning takes into your rack.
  • Indoor equipment outdoors. Indoor access points at the pool bar rarely last a year in salt air.
  • No documentation. When the installer leaves, nobody knows which cable goes where or what the passwords are.
  • Upgrading in high season. Work is rushed and parts take days to arrive.

Warning Do not open the fire alarm panel, work on mains wiring or climb onto roofs to fix cameras or antennas yourself. Use a qualified electrician or installer with proper access equipment.

Relevant Extrion services

More on the sector is on our hospitality and tourism page.

When to call Extrion

If guests complain about Wi-Fi, equipment keeps failing after power cuts, or you are planning a new property, Extrion carries out Wi-Fi site surveys and can design a network that suits the site. See our network architecture service or contact us to arrange a visit.

This guide is general information. Procedures, product features and firmware change, so check your own equipment's documentation before you start.

FAQs

Frequently asked questions

How many access points does a small guesthouse need?

It depends on the walls more than the floor area. In a coral-stone building, expect roughly one per room or per two adjacent rooms, plus one for each outdoor area guests use. A site survey gives a real number.

Can guest Wi-Fi and staff Wi-Fi run on the same access points?

Yes. Business access points broadcast several network names at once, and VLANs keep the traffic separate all the way to the router. Firewall rules then decide what each network can reach.

Why should CCTV and card terminals be on their own networks?

If they share the guest network, anyone with the Wi-Fi password can try to reach the recorder or the payment devices. Separate VLANs with strict firewall rules keep a guest's infected laptop away from them.

Is 4G good enough as a backup connection?

For most guesthouses, yes, if signal is good at the property. Test more than one mobile network before choosing, and set data limits so a stuck failover does not use the whole bundle.

How do we keep Wi-Fi running during power cuts?

Power the access points from a PoE switch, and put the switch, router and ONT on a UPS sized to cover the generator start-up with margin. Add surge protection for when power returns.

Can we run cables in a Stone Town building without visible changes?

Often, with careful internal routing, but every building is different. Check with the conservation authority before any work that could alter the exterior.

When is the best time to upgrade?

During your quietest months, usually the long rains, with planning and ordering done well before.

Need a Reliable Business Network?

We design, cable and configure routers, switches and firewalls that stay up, with documentation you can hand to the next engineer.

Still stuck, or want more detail?

Ask for clarification, tell us a problem this did not solve, or suggest a topic. An engineer reads every message, and we use them to improve the Knowledge Center.

What would you like to do?
online now People browsing Extrion Tech right now

Scan to open this page

Point your phone camera at the code to open this page on your phone, or share it with someone nearby.

QR code that opens this page

https://mail.extrion.co.tz/knowledge-center/technology-for-hotels-and-guesthouses-zanzibar

Download QR

Let’s start with you Who should our team speak to about this service?
How should we reach you?

Spam protection