01. WiFi Router Setup Procedures
SOP 01: WiFi Router Setup Procedures
Definitions:
- WISP (Wireless ISP) Mode: The router connects to an upstream WiFi network (e.g., hotel/venue WiFi) as its internet source, then creates its own local network for Pod devices.
- DHCP: Dynamic Host Configuration Protocol -- automatically assigns IP addresses to devices on the local network.
- NAT (Network Address Translation): Allows multiple local devices to share a single upstream IP address. "Virtual Server" / "Port Forwarding" is a NAT feature that routes incoming traffic on specific ports to a specific local device.
- WPA/WPA2-PSK: WiFi security encryption standards. WPA2 is preferred. PSK = Pre-Shared Key (password-based).
- SSID: The visible (or hidden) name of a WiFi network.
Steps:
Part A -- Hardware Selection & Preparation
- Confirm the router model fits physically inside the Pod electronics box. Approved models:
- TP-Link MR3020
- TOTOLINK N200RE\_V5
- GL-iNet AXT1800
Note: Other models may work if they support WISP mode, DHCP, and NAT/Virtual Server. Physical dimensions are the constraint.
- If the router has been used before, RESET it to factory defaults using the physical reset button (hold 10 seconds) or via the admin interface.
- Connect a laptop to the router using a LAN cable. Refer to the router's user manual for which LAN port to use and the default login credentials.
Part B -- Router Configuration (Core Settings)
- Log in to the router's admin page from the laptop browser:
- TOTOLINK: http://172.19.199.1 (after LAN IP is set) or default IP per manual
- GL-iNet: http://192.168.199.xx/#/ (xx = Pod IP)
- TP-Link: per manual (usually http://192.168.0.1)
- Default password for all Pod routers: "Pod\_00001"
- Set the Operation Mode to "WISP" (Wireless ISP / Repeater mode).
- Configure Internet Settings:
- Connection Type: "Dynamic IP"
- IP Address: Assigned by parent router (automatic)
- Subnet Mask: Assigned by parent router (automatic)
- Gateway: Assigned by parent router (automatic)
- DNS Mode: "Dynamic"
- Primary DNS: Leave blank or assigned by parent router
- Secondary DNS: Leave blank or assigned by parent router
IMPORTANT: Do NOT hard-code DNS to a specific parent router IP -- this will fail outside that specific network. Always use Dynamic IP assignment.
- Configure LAN Settings:
- IP Address: 172.19.199.1
- Subnet Mask: 255.255.255.0
- DHCP Server: Enable
- DHCP Start: 172.19.199.100
- DHCP End: 172.19.199.199
- Configure Wireless Settings:
- SSID: "Regenesis Studio XY" (where XY = the Pod ID number, e.g., "Regenesis Studio 13")
- Encryption: Enable -- WPA/WPA2-PSK
- Wireless Password: "Pod\_00001"
- Hidden SSID: Enable (SSID will not broadcast publicly)
- Guest Network: Disable
- Configure NAT / Port Forwarding / Virtual Server:
- Set up port forwarding rules as required for Pod services (Anydesk, VerneMQ, etc.)
- Refer to the Pod Network Port Map (maintained by Fahmy) for the current list of ports and target local IPs.
Note: The NAT configuration interface differs by router brand. Consult the router manual or screenshots in the original SOP document for brand-specific steps.
- Configure Remote Management:
- Allow management from LAN only
- DENY management from WAN (external access to router admin must be blocked)
Part C -- Testing & Verification
- Disconnect the laptop LAN cable from the router.
- On the laptop, connect to the Pod SSID ("Regenesis Studio XY") using password "Pod\_00001".
- Open a browser and navigate to 172.19.199.1 to confirm access to the router admin page.
- Verify the router shows an active upstream connection to the venue WiFi (check the WISP status page).
- Connect the Pod's internal PC to the Pod SSID and confirm it receives an IP in the 172.19.199.100-199 range.
- From the laptop, use Anydesk to remotely access the Pod PC. Confirm the connection works.
- Use telnet from the laptop to test each port-forwarded service:
- Open a terminal/command prompt
- Run: telnet 172.19.199.1 \[port\] for each forwarded port
- Confirm each port responds (connection established, not refused/timed out)
- Attempt to access the router admin page from the WAN side (e.g., from a device on the venue's network, not the Pod network). Confirm access is DENIED.
Materials Required:
| Part | Quantity | Notes |
|---|---|---|
| WiFi router (approved model) | 1 | Must fit in Pod electronics box |
| LAN cable (Ethernet) | 1 | For initial laptop-to-router setup |
| Laptop with browser | 1 | For configuration |
Tools Required:
| Tool | Quantity |
|---|---|
| Laptop with web browser | 1 |
| Telnet client (built into OS or PuTTY) | 1 |
- Router is in WISP mode and connected to venue WiFi
- Pod SSID is broadcasting (hidden) with correct name and password
- Pod PC receives a DHCP address in the 172.19.199.100-199 range
- All port forwarding rules are verified via telnet
- Anydesk remote access to Pod PC works through the router
- Remote management is confirmed blocked from WAN
- Router admin page is accessible from LAN at 172.19.199.1
- Router won't connect to venue WiFi: Verify the venue SSID and password are correct. Ensure the router is within WiFi range. Try moving the Pod closer or using a WiFi extender. Check that WISP mode (not AP mode) is selected.
- Pod PC doesn't get an IP address: Confirm DHCP is enabled on the router (Step 7). Check that the PC's network adapter is set to "Obtain IP automatically." Restart the router.
- Port forwarding not working: Double-check the target local IP and port numbers match the Pod Network Port Map. Ensure the target device is powered on and the service is running. Confirm NAT/Virtual Server is enabled (not just saved but not applied).
- Can't access router admin page: Confirm you are connected to the Pod SSID, not the venue WiFi. Try 172.19.199.1 in a private/incognito browser window. Clear browser cache.
- Router admin accessible from WAN: Immediately disable WAN management. Re-check remote management settings (Step 10). This is a security risk -- do not leave the Pod deployed until fixed.
- Escalation: Contact Fahmy (IoT Lead) for router issues, or Jeddy/Nathan for Pod PC network integration issues.
Reference Tables:
Standard Pod Network Settings:
| Setting | Value |
|---|---|
| Router LAN IP | 172.19.199.1 |
| Subnet Mask | 255.255.255.0 |
| DHCP Range | 172.19.199.100 - 172.19.199.199 |
| Pod SSID Pattern | "Regenesis Studio XY" |
| WiFi Password | Pod\_00001 |
| Encryption | WPA/WPA2-PSK |
| Hidden SSID | Yes |
| Operation Mode | WISP |
| Internet Connection Type | Dynamic IP |
| Remote Management | LAN only (WAN denied) |
Approved Router Models:
| Model | Notes |
|---|---|
| TP-Link MR3020 | Legacy -- check physical fit |
| TOTOLINK N200RE\_V5 | Current standard |
| GL-iNet AXT1800 | Higher throughput, larger form factor |
Port Forwarding Map:
| Service | Port | Target IP | Notes |
|---|---|---|---|
| TBD | TBD | TBD | TBD -- to be confirmed by Fahmy |
v2 Suggested Update -- April 2026
Original: Google Drive > 11-Partnerships > SOP DOCUMENT V3
Rewritten to Regenesis SOP Standard (Finance SOP format)
Pending review by: Tav, Matt, Barrie, Ausi
Google Doc: https://docs.google.com/document/d/1nIel3tE2bW-PKZiOI\_0z5chQojk90DsQ8DNm0mJJ4Lg/edit