Why a venue network needs VLANs before it needs more bandwidth

When a venue tells me the internet is slow during events, the problem is almost never the line speed. It is that every device in the building shares one flat network.

What goes wrong on a flat network

• A guest phone downloading updates competes with the point-of-sale terminal taking payments.
• Broadcast traffic from hundreds of devices reaches every other device.
• One infected laptop can reach the attendance system, the displays and the cameras.

How I segment a venue

I usually end up with separate VLANs for guest Wi-Fi, staff devices, point-of-sale, production and control-room equipment, and management interfaces. Each one gets its own subnet and its own firewall rules about what it can reach.

The point-of-sale VLAN, for example, needs to reach the payment processor and nothing else. Guest Wi-Fi needs the internet and nothing inside the building at all.

What changes afterwards

Events stop taking down payments. An incident on one VLAN stays there. And when something does break, the list of things it could be is short enough to work through during a match rather than after it.

If you run a venue in Erbil and events keep knocking your network over, this is usually a configuration problem rather than a hardware one.