Recommended Settings for Unmanaged Wireless Access Points
This article outlines basic recommendations for configuring unmanaged wireless access points in a school environment. It is not intended to be a full configuration guide, but it provides a solid baseline for secure and consistent setup.
Assigning an IP address
- Configure each access point with a static IP address from the school’s allocated range.
- A common approach is to start at the highest available address and work backwards.
- Clearly label the access point with its assigned IP address so it can be identified easily during maintenance.
Naming the wireless network (SSID)
- Create an SSID that the school can recognise.
- An abbreviated school name is usually sufficient, but confirm the naming convention with the school.
Setting a secure wireless password
- Create a strong encryption key or passphrase.
- Schools often base this on a phone number, school code, or postcode, but ensure the final password is reasonably secure.
- Avoid simple or easily guessable passwords.
Wireless security settings
- Configure the access point to use WPA2 as a minimum.
- If the device supports WPA3, consider enabling it for improved security.
- Avoid outdated standards such as WEP, which are no longer secure.
Documenting access point locations
- Record the physical location of each access point on a school site map.
- Include the SSID, IP address, and any identifying labels.
- Store this information securely in the school’s comms cabinet or near the main internet router so staff can access it when needed
Recording configuration details
- Keep a record of all passwords, IP addresses, and configuration notes.
- Ensure the school has a copy of this information for future troubleshooting or audits.
Important security reminder
The school is responsible for all activity that takes place through its internet connection, including access via wireless networks. An unsecured or poorly configured access point can allow unauthorised users to connect from within range of the building. To reduce this risk, always use a secure password and appropriate encryption settings.
kb3047
Last Reviewed 12/01/2026