Mesh Wi-Fi for Small Business
New possibility for modern-day small business
Simple, automatic setup
The old, complex way of configuring Wi-Fi controllers and APs can be overkill in many environments. Leveraging the latest mesh Wi-Fi technology, you can now create a network that self-configures, self-manages, and self-optimizes, automatically giving you the best route to the Internet.
- Flexible deployment options : Cut the clutter and expensive cabling costs by having the Wi-Fi points connect wirelessly with each other, or use Ethernet connection wherever cabling is in place to ensure the highest throughput. Daisy chain support helps you extend coverage effectively across floors.
- A smartphone to get the network up and running : Setting up an Internet connection on the primary RT2600ac and adding additional MR2200ac can be easily done with a mobile app.1 Future management and monitoring, too.
- Scale as your business grows : When the company expands its workspace, simply add more MR2200ac and see they apply the network configuration to themselves. Up to 7 nodes per network is recommended. 2

The next level of Wi-Fi experience
Say goodbye to dropped signals, spotty connections, and fragmented networks created by multiple routers and access points. Let uninterrupted Internet access bring you happier customers and employees.
Stay connected to one network as you move around the office: at your desk, in a meeting room, or at lunch. No more manually connecting to different SSIDs. Comprehensive support for 802.11k/v/r standards further ensures a smooth roaming experience.3
The system supports 802.11ac Wave 2 (with MU-MIMO and beamforming) to serve an ever-increasing number of devices with high speeds. Data transmission between Wi-Fi points is backed by the tri-band design of MR2200ac to deliver maximum performance.
To minimize the risk of ISP outages, Smart WAN allows you to failover or load-balance between two Internet connections (such as cable or 3G/4G dongles4). For businesses that utilize third-party VPN services, add a VPN connection to the network and easily route any specific devices through it.
Higher customer satisfaction & safer networks
Great in-store Wi-Fi is an effective way to keep customers coming back. Set up separate networks for employees and guests – it not only secures access to internal servers and point-of-sale systems but also lets you market to your customers better.
- Staff network : Among the first Wi-Fi routers to support the state-of-the-art WPA3™, Synology RT2600ac and MR2200ac offer better defenses against attacks.5 Companies that require Wi-Fi authentication via employees' own credentials can install a RADIUS server for free.
- Guest network : Use a Wi-Fi marketing splash page to promote your brand. Remember to keep them safe: support for Wi-Fi Enhanced Open™ (OWE) automatically encrypts communications in an “open” network to prevent eavesdropping and future disputes.

Business-grade security at no additional cost
Synology comes with a full-featured security system for network-wide traffic monitoring and threat response, helping even smaller companies defend themselves against malicious attacks and data breaches (tax records, payroll, customer data, etc.).
VPN for remote offices & employees
Whether it's employees on the road or working from home, or external freelancers doing auditing or design projects, Synology VPN Plus provides the increasingly mobile workforce with secure remote access to internal systems. Branch offices of a larger corporation can also connect their networks with the headquarters' via site-to-site IPsec VPN, making resource sharing across different locations a breeze.7

SSL VPN

Site-to-Site VPN

Notes:
- Currently, RT2600ac can serve as the primary Wi-Fi point, while MR2200ac can be the primary Wi-Fi point or extend the signal of another RT2600ac/MR2200ac.
- Based on real-world test results. The coverage may vary depending on the number and placement of units.
- Also depends on client support of the roaming standards.
- Check the compatibility list for supported models.
- Client support for WPA3™ is required for compatibility.
- External storage is required.
- Access by one concurrent user account to SSL VPN and WebVPN is free. For site-to-site VPN, a one-month free trial is available. To add more user accounts or unlock the site-to-site VPN feature, please refer to Client VPN Access License and Site-to-Site VPN License.
Network Center
Wide Area Network (WAN) support
- Internet connection types include static IP, PPPoE, DHCP client and DS-Lite
- VPN connection types include PPTP, OpenVPN, and L2TP over IPSec
- Supports network load-balance and fail-over
- Access the Internet via 3G/4G dongle (compatibility list)
- Access the Internet via USB Tethering (compatibility list)
Local Area Network (LAN) support
- Supports DHCP reservation with DHCP server
- Supports static network routing and policy network routing
- Supports IPv4 forwarding with UPnP protocol and static rules
- Supports DMZ hosting, port forwarding, and port triggering rules
Traffic Control
- Fully control the Internet access by device
- Application layer QoS by device
- Supports traffic monitor for network traffic live view
- Supports traffic reports to keep track of network access trends
IPv6 Support
- Connection types include native IPv6, 6in4, 6to4, 6rd, DS-Lite, DHCPv6-PD, IPv6 Relay (pass-through) and FLET’s IPV6 Service
- IPv6 auto configuration includes SLAAC, DHCPv6 and SLAAC + DHCPv6
IPTV / VoIP
- Supports VLAN tag customization
- Supports IGMP snooping and IGMP proxy
Other Network Services
- DNS Server
- DNS Relay
- DDNS
- QuickConnect
- NTP
- SNMP
- SSH
- FTP
- SAMBA
Operation Modes
- Wireless Router mode
- Wireless Access Point mode (AP mode)
- Wireless Client mode (only supported on RT1900ac)
- Wireless Distribution System (WDS, only supported on RT2600ac)
Wireless Control
Overview
- Network status monitor includes real-time statuses and transmission rates of your Wi-Fi, Guest Network, Wi-Fi points, and connected devices
Wireless
- Supports flexible tri-band configurations (only available on MR2200ac)
- Supports band steering and roaming
- Supports security standards including Wi-Fi Enhanced Open (OWE), WEP, WPA/WPA2-Personal, WPA/WPA2-Enterprise, WPA2-Personal, WPA2-Enterprise, WPA2/WPA3-Personal, WPA3-Personal and WPA3-Enterprise (only available on RT2600ac & MR2200ac)
- Supports DFS channels by country
- Supports 802.11k, 802.11v, 802.11r (only available on RT2600ac & MR2200ac)
- Supports Wi-Fi Protected Setup (WPS)
Wi-Fi Point (only available on RT2600ac & MR2200ac)
- Supports additional and removable Wi-Fi points in the network
- Centralized Wi-Fi system management
- Supports network topology to monitor the Wi-Fi system as a whole
- Supports transmission tests between the primary Wi-Fi point and other Wi-Fi points
- Provides real-time Wi-Fi transmission rates of all Wi-Fi points
- Provides transmission rates from connected devices to each Wi-Fi point
Guest Network support
- Supports Wi-Fi portal page customization
- Supports network access scheduling
- Supports password rotation
- Supports smart connect
MAC Filter
- Allow or block devices with the corresponding MAC addresses
Security Advisor
- Supports malware detection and removal
- Supports security scans for account and password, network, and system
- Supports version checks for SRM and installed packages
Firewall
- Supports access allowance and denial of selected ports or services on specific IP addresses
- Supports geographical firewall rules
- Internet access can be disabled for connected devices
- Supports traffic control of services and TCP/UDP ports
- Supports DDoS protection
- Supports VPN pass-through
Auto Block
- Supports access block after a specified number of attempts
- Supports customization of expiration time
- Supports black and white list
Safe Access
- Supports User Profile to manage specific connected devices
- Supports Network Profile to manage the connected devices in your local and guest network
- Supports Internet access time management with Internet Schedule, Time Quota, Pause, and Rewards
- Supports Access Request for users to ask permission to browse specific websites
- Supports Web Filter to protect users from inappropriate websites
- Supports Safe Search on Google, Bing, and YouTube
- Integrates up-to-date Google Safe Browsing and the Threat Intelligence Database to ensure Internet security
- Supports Internet usage reports
Note
- Learn more about how to enable Google Safe Browsing here.
Threat Prevention
- Supports network invasions detection
- Supports self-defined class and signature policy
- Supports details of malicious events
- Supports scheduled signature updates
- Supports notifications via Email, SMS, and push notification services
- Supports auto-drop of high-risk packets
- Supports geographical distribution of malicious sources
- Supports limitation of storage usage of log files
- Support the configuration of backup and restoration
VPN Plus Server
- Supports VPN services including WebVPN, SSL VPN, SSTP, OpenVPN, L2TP over IPSec, and PPTP
- Supports portal page customization for WebVPN
- Supports split tunnel for SSL VPN
- Client application support for SSL VPN
- Synology SSL VPN Client (for Windows/macOS/Linux)
- VPN Plus mobile app (for iOS/Android)
- Supports Dead Peer Detection (DPD), Perfect Forward Secrecy (PFS), and DNSSEC Validation for Site-to-Site VPN
- Supports Remote Desktop
- Remote Desktop Protocol (RDP) is supported in Windows 10 Enterprise (Professional), Windows 8.1 Enterprise (Professional), Windows 7 Enterprise (Professional)
- Virtual Network Computing (VNC) is supported in macOS 10.11, 10.12, and 10.13, along with the application support in TightVNC and XVNC.
- Supports real-time monitoring and connection management
- Supports traffic reports for activated VPN services
- Supports permission settings to allow VPN connections for selected users and groups
- Licenses
- Client VPN Access License: One free license has been installed on each VPN Plus
- Site-to-Site VPN License: Each VPN Plus supported Synology product is eligible for a one-time 30-day free trial
- Check the maximum connections for different models
DNS Server
- Master and slave zones
- Forward and reverse domain resolution
- NS, A, AAAA, CNAME, MX, SPF, SRV, TXT, PTR records
- TSIG (Transfer Signature) keys
- Split-horizon DNS
Log Center
- Events per second: 50-3000
- Historical log activity chart
- Archiving logs by specified time, number of logs, the data size, and different hosts
- Download archives as HTML or CSV files
- Proactive email notification according to log severity or specified keywords
- Customize log transferring protocol
- Customized log formats
- Advanced log search engine
- SSL connection
- Log rotation: 1 month, 3 months, 6 months, 1 year
RADIUS Server
- Supported Protocols: PAP,MS-CHAP,PEAP,EAP-MSCHAPv2,EAP-TTLS
Notes:
- Please note that the figures marked in asterisks are derived from the Synology lab by using high-performance client computers with optimized network settings, and could vary in different environments.