Mesh Wi-Fi for Small Business

As the BYOD (Bring Your Own Device) trend accelerates, blanketing the facilities with Wi-Fi has become a vital step when setting up any office. Yet small firms, shops, and cafés need a solution that addresses their specific requirements – easy enough to manage without specialized IT staff, and secure enough to protect sensitive business data.

Feature
Technical Specifications

New possibility for modern-day small business

Many business owners know that it’s time for a Wi-Fi upgrade, but introducing enterprise access points implies a daunting amount of IT resources for installation and maintenance. Synology presents a new alternative.

solution_secure_wi_fi.main_banner_01_title

For companies moving to a new office space, it’s a perfect chance to get started with a refreshing Wi-Fi experience: single Wi-Fi name across all rooms and floors, plus greatly improved speeds.

solution_secure_wi_fi.main_banner_02_title

The majority of companies that fell victim to cybercrime are small businesses who lack dedicated security budget and staff. A Synology network installs multiple layers of protection at the perimeter to safeguard all connected things – IoT devices included.

solution_secure_wi_fi.main_banner_03_title

Simple, automatic setup

The old, complex way of configuring Wi-Fi controllers and APs can be overkill in many environments. Leveraging the latest mesh Wi-Fi technology, you can now create a network that self-configures, self-manages, and self-optimizes, automatically giving you the best route to the Internet.

Flexible deployment options : Cut the clutter and expensive cabling costs by having the Wi-Fi points connect wirelessly with each other, or use Ethernet connection wherever cabling is in place to ensure the highest throughput. Daisy chain support helps you extend coverage effectively across floors.
A smartphone to get the network up and running : Setting up an Internet connection on the primary RT2600ac and adding additional MR2200ac can be easily done with a mobile app.¹ Future management and monitoring, too.
Scale as your business grows : When the company expands its workspace, simply add more MR2200ac and see they apply the network configuration to themselves. Up to 7 nodes per network is recommended. ²

The next level of Wi-Fi experience

Say goodbye to dropped signals, spotty connections, and fragmented networks created by multiple routers and access points. Let uninterrupted Internet access bring you happier customers and employees.

Seamless

Stay connected to one network as you move around the office: at your desk, in a meeting room, or at lunch. No more manually connecting to different SSIDs. Comprehensive support for 802.11k/v/r standards further ensures a smooth roaming experience.³

Fast

The system supports 802.11ac Wave 2 (with MU-MIMO and beamforming) to serve an ever-increasing number of devices with high speeds. Data transmission between Wi-Fi points is backed by the tri-band design of MR2200ac to deliver maximum performance.

Always-on

To minimize the risk of ISP outages, Smart WAN allows you to failover or load-balance between two Internet connections (such as cable or 3G/4G dongles⁴). For businesses that utilize third-party VPN services, add a VPN connection to the network and easily route any specific devices through it.

Higher customer satisfaction & safer networks

Great in-store Wi-Fi is an effective way to keep customers coming back. Set up separate networks for employees and guests – it not only secures access to internal servers and point-of-sale systems but also lets you market to your customers better.

Staff network : Among the first Wi-Fi routers to support the state-of-the-art WPA3^™, Synology RT2600ac and MR2200ac offer better defenses against attacks.⁵ Companies that require Wi-Fi authentication via employees' own credentials can install a RADIUS server for free.
Guest network : Use a Wi-Fi marketing splash page to promote your brand. Remember to keep them safe: support for Wi-Fi Enhanced Open^™ (OWE) automatically encrypts communications in an “open” network to prevent eavesdropping and future disputes.

Business-grade security at no additional cost

Synology comes with a full-featured security system for network-wide traffic monitoring and threat response, helping even smaller companies defend themselves against malicious attacks and data breaches (tax records, payroll, customer data, etc.).

Threat Prevention

With intrusion prevention technology, RT2600ac is capable of scanning the network traffic for malicious packets and automatically dropping them once identified, while Synology's optimization allows it to deliver stellar throughput.⁶ This is backed by several threat intelligence databases that block access to dangerous domains and IPs.
Web filtering

To enforce company-wide Internet usage policy, access to social media, gaming, or adult websites can be blocked and logged using customized profiles. Retail stores can also limit staff access to white-listed domains, such as the corporate website and email.
Bandwidth control & visibility

Use device- and application-based control to prioritize business-critical apps like VoIP and throttle non-productive ones. Traffic monitoring and reporting features then help you analyze network usage and identify rogue devices – even remotely with a mobile app.

VPN for remote offices & employees

Whether it's employees on the road or working from home, or external freelancers doing auditing or design projects, Synology VPN Plus provides the increasingly mobile workforce with secure remote access to internal systems. Branch offices of a larger corporation can also connect their networks with the headquarters' via site-to-site IPsec VPN, making resource sharing across different locations a breeze.⁷

Remote employee

SSL VPN

Branch office

Site-to-Site VPN

Headquarters

"With its reliable performance and granular traffic/IP management features, Synology’s mesh system has helped us solve all the Wi-Fi challenges we faced in our staff dormitory." Learn more

Chen Yong-Qi, IT Manager, Grand Mayfull Hotel Taipei

Start building a wireless office today

Check the tech specs of RT2600ac and MR2200ac to plan an ideal Wi-Fi network, or contact us to know more.

Buy through our partners

Ask a Synology expert

Notes:

Currently, RT2600ac can serve as the primary Wi-Fi point, while MR2200ac can be the primary Wi-Fi point or extend the signal of another RT2600ac/MR2200ac.
Based on real-world test results. The coverage may vary depending on the number and placement of units.
Also depends on client support of the roaming standards.
Check the compatibility list for supported models.
Client support for WPA3^™ is required for compatibility.
External storage is required.
Access by one concurrent user account to SSL VPN and WebVPN is free. For site-to-site VPN, a one-month free trial is available. To add more user accounts or unlock the site-to-site VPN feature, please refer to Client VPN Access License and Site-to-Site VPN License.

Network Center

Wide Area Network (WAN) support

Internet connection types include static IP, PPPoE, DHCP client and DS-Lite
VPN connection types include PPTP, OpenVPN, and L2TP over IPSec
Supports network load-balance and fail-over
Access the Internet via 3G/4G dongle (compatibility list)
Access the Internet via USB Tethering (compatibility list)

Local Area Network (LAN) support

Supports DHCP reservation with DHCP server
Supports static network routing and policy network routing
Supports IPv4 forwarding with UPnP protocol and static rules
Supports DMZ hosting, port forwarding, and port triggering rules

Traffic Control

Fully control the Internet access by device
Application layer QoS by device
Supports traffic monitor for network traffic live view
Supports traffic reports to keep track of network access trends

IPv6 Support

Connection types include native IPv6, 6in4, 6to4, 6rd, DS-Lite, DHCPv6-PD, IPv6 Relay (pass-through) and FLET’s IPV6 Service
IPv6 auto configuration includes SLAAC, DHCPv6 and SLAAC + DHCPv6

IPTV / VoIP

Supports VLAN tag customization
Supports IGMP snooping and IGMP proxy

Operation Modes

Wireless Router mode
Wireless Access Point mode (AP mode)
Wireless Client mode (only supported on RT1900ac)
Wireless Distribution System (WDS, only supported on RT2600ac)

Wireless Control

Overview

Network status monitor includes real-time statuses and transmission rates of your Wi-Fi, Guest Network, Wi-Fi points, and connected devices

Wireless

Supports flexible tri-band configurations (only available on MR2200ac)
Supports band steering and roaming
Supports security standards including Wi-Fi Enhanced Open (OWE), WEP, WPA/WPA2-Personal, WPA/WPA2-Enterprise, WPA2-Personal, WPA2-Enterprise, WPA2/WPA3-Personal, WPA3-Personal and WPA3-Enterprise (only available on RT2600ac & MR2200ac)
Supports DFS channels by country
Supports 802.11k, 802.11v, 802.11r (only available on RT2600ac & MR2200ac)
Supports Wi-Fi Protected Setup (WPS)

Wi-Fi Point (only available on RT2600ac & MR2200ac)

Supports additional and removable Wi-Fi points in the network
Centralized Wi-Fi system management
Supports network topology to monitor the Wi-Fi system as a whole
Supports transmission tests between the primary Wi-Fi point and other Wi-Fi points
Provides real-time Wi-Fi transmission rates of all Wi-Fi points
Provides transmission rates from connected devices to each Wi-Fi point

Guest Network support

Supports Wi-Fi portal page customization
Supports network access scheduling
Supports password rotation
Supports smart connect

MAC Filter

Allow or block devices with the corresponding MAC addresses

Security Advisor

Supports malware detection and removal
Supports security scans for account and password, network, and system
Supports version checks for SRM and installed packages

Firewall

Supports access allowance and denial of selected ports or services on specific IP addresses
Supports geographical firewall rules
Internet access can be disabled for connected devices
Supports traffic control of services and TCP/UDP ports
Supports DDoS protection
Supports VPN pass-through

Auto Block

Supports access block after a specified number of attempts
Supports customization of expiration time
Supports black and white list

Safe Access

Supports User Profile to manage specific connected devices
Supports Network Profile to manage the connected devices in your local and guest network
Supports Internet access time management with Internet Schedule, Time Quota, Pause, and Rewards
Supports Access Request for users to ask permission to browse specific websites
Supports Web Filter to protect users from inappropriate websites
Supports Safe Search on Google, Bing, and YouTube
Integrates up-to-date Google Safe Browsing and the Threat Intelligence Database to ensure Internet security
Supports Internet usage reports

Note

Learn more about how to enable Google Safe Browsing here.

Threat Prevention

Supports network invasions detection
Supports self-defined class and signature policy
Supports details of malicious events
Supports scheduled signature updates
Supports notifications via Email, SMS, and push notification services
Supports auto-drop of high-risk packets
Supports geographical distribution of malicious sources
Supports limitation of storage usage of log files
Support the configuration of backup and restoration

VPN Plus Server

Supports VPN services including WebVPN, SSL VPN, SSTP, OpenVPN, L2TP over IPSec, and PPTP
Supports portal page customization for WebVPN
Supports split tunnel for SSL VPN
Client application support for SSL VPN
- Synology SSL VPN Client (for Windows/macOS/Linux)
- VPN Plus mobile app (for iOS/Android)
Supports Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS), and DNSSEC Validation for Site-to-Site VPN
Supports Remote Desktop
- Remote Desktop Protocol (RDP) is supported in Windows 10 Enterprise (Professional), Windows 8.1 Enterprise (Professional), Windows 7 Enterprise (Professional)
- Virtual Network Computing (VNC) is supported in macOS 10.11, 10.12, and 10.13, along with the application support in TightVNC and XVNC.
Supports real-time monitoring and connection management
Supports traffic reports for activated VPN services
Supports permission settings to allow VPN connections for selected users and groups
Licenses
- Client VPN Access License: One free license has been installed on each VPN Plus
- Site-to-Site VPN License: Each VPN Plus supported Synology product is eligible for a one-time 30-day free trial
Check the maximum connections for different models

DNS Server

Master and slave zones
Forward and reverse domain resolution
NS, A, AAAA, CNAME, MX, SPF, SRV, TXT, PTR records
TSIG (Transfer Signature) keys
Split-horizon DNS

Log Center

Events per second: 50-3000
Historical log activity chart
Archiving logs by specified time, number of logs, the data size, and different hosts
Download archives as HTML or CSV files
Proactive email notification according to log severity or specified keywords
Customize log transferring protocol
Customized log formats
Advanced log search engine
SSL connection
Log rotation: 1 month, 3 months, 6 months, 1 year

RADIUS Server

Supported Protocols: PAP,MS-CHAP,PEAP,EAP-MSCHAPv2,EAP-TTLS

Notes:

Please note that the figures marked in asterisks are derived from the Synology lab by using high-performance client computers with optimized network settings, and could vary in different environments.