Municipal Wi-Fi for Lerums kommun · Netgraph case study

Municipal Wi-Fi, delegated
by design with Telia.

Guests, students, staff, vendors and elderly-home residents. Lerums kommun delivers five audiences on one Netgraph platform. Telia handles the Meraki edge and the Datanet transport. The municipality administers identity and policy from a single cloud admin and delegates day-to-day work to the people closest to it.

Customer Lerums kommun

Edge Cisco Meraki via Telia

Transport Service Gateway · Telia Datanet

Platform Sign In · EntryPoint · EasyPSK

One platform.
Each Wi-Fi service with its own logic.

Lerum WiFi is the captive-portal front door for the whole municipal estate: schools, offices, arenas and public spaces. Lerum IoT is the vendor-and-internal segmented network. Lerum Bo is personal Wi-Fi for every apartment across the residential properties. Same admin, same audit log, completely different operational models per service.

Built on Sign In

Lerum WiFi

One captive portal for every Lerum audience.

The municipality's main Wi-Fi service across schools, offices, arenas and public spaces. Students, staff, sports clubs, substitutes and visitors all join here, each through the access path that fits them.

Click-to-Connect for 2h guest sessions in squares, arenas and libraries.
Subscription-password for small classes, sports clubs and substitutes (short-lived shared keys).
BYOD via email: students on @edu.lerum.se get a term-bound device quota; staff on @lerum.se get a year.
Per-audience policy applied automatically based on identity domain.

BYOD policy · two domains

One captive portal, two automatic policies

Students

@edu.lerum.se

Devices5 devices

ValidityEnd of term

Staff & teachers

@lerum.se

Devices10 devices

Validity1 year

Built on EntryPoint

Lerum IoT

Vendor-delegated segments. Internal micro-segmentation.

The IoT network is split into segments by vendor and purpose. Each vendor administers their own slice through the Self-Service portal: onboard devices, rotate the PSK, retire equipment — without touching the rest of the network. The same model delivers internal micro-segmentation so a noisy talker in one segment doesn't bring down the others.

One Group per vendor or fleet. Own PSK, own admin, own MAC list.
Internal micro-segmentation isolates faults and broadcast domains.
Per-Group VLAN / SGT applied by EntryPoint on every authentication.
Bulk CSV import for fleet rollouts. Rotation without breaking other groups.

Built on EasyPSK

Lerum Bo

A private Wi-Fi per apartment across elderly and group homes.

Across the municipality's elderly homes and group homes, every apartment gets its own EasyPSK key. Resident devices see only their own household: no leakage between apartments, no shared SSID secrets, no IT calls when staff change. Personal Wi-Fi where it matters the most.

Per-apartment PSK — apartment-level isolation, household-level privacy.
QR-code onboarding. Staff hand it out at move-in, residents scan and connect.
Cisco Meraki MR + Catalyst 9800 support.
Self-Service portal. Care staff manage their own residents without IT tickets.

Telia at the edge.
Netgraph runs the policy.

The municipality picks one network operator (Telia), one platform (Netgraph) and one admin. Everything else flows from that contract. No site-by-site captive portals, no per-school RADIUS. Add a building, add a fleet, add an apartment, the platform already runs.

01 · Edge

Cisco Meraki on every site

Telia delivers and operates the access-network: Meraki MR access points across the municipality's buildings, from schools and offices to arenas and elderly homes. Centrally provisioned, locally segmented, every site under one dashboard.

02 · Transport

Service Gateway via Telia Datanet

A central Service Gateway sits inside the Telia Datanet transport. Every Meraki site reaches the same policy and identity layer through Datanet's MPLS / SD-WAN fabric. No per-site captive portal or per-site RADIUS to maintain.

03 · Platform

Netgraph policy & identity

Netgraph runs Sign In (captive portal + policy engine), EntryPoint (RADIUS-as-a-Service) and EasyPSK (Cisco WPN) — one stack covering every audience. The municipality administers everything in a single cloud admin and delegates per-segment work to the people closest to it.

One admin.
Every network. Every delegate.

The municipality administers every network from the same cloud admin. Live analytics on Sign In, EntryPoint Groups visible per segment, EasyPSK keys auditable per apartment. Vendor administrators see only their own slice. Care staff at an elderly home see only the units in their home. IT keeps the policy templates; everyone else keeps their corner of the operation.

Real-time analytics: daily connections, peak loads, top SSIDs.

Delegated admin per segment / vendor / property.

Audit log for every change · GDPR-aligned retention.

Self-Service portals for residents, students and vendors.

A municipal Wi-Fi stack, one delivery

Lerums kommun

Customer · municipal Wi-Fi

A Swedish municipality outside Gothenburg with around 43,000 inhabitants. Owns the four Wi-Fi services across schools, offices, arenas, public squares and residential care properties, plus the policy that runs on them.

lerum.se ↗

Telia

Cisco Meraki edge · Telia Datanet transport

Network operator and end-to-end delivery partner. Provisions Cisco Meraki access points at every site and transports the traffic to a central Service Gateway via Telia Datanet. Predictable, supported, telemetry-rich.

telia.se ↗

Netgraph

Identity, policy and Self-Service on a single cloud admin. Sign In, EntryPoint and EasyPSK behind every Wi-Fi service Lerum runs — one operational model, delegated to the people closest to the work at every level of the municipality.

Explore the platform →

Powered on

infrastructure · Netgraph is a Cisco Solution Partner

Municipal Wi-Fi, delegated
by design with Telia.