Building a Wifi network at school?

Question

WiFi

at school, you need to somehow make a normal network, namely: you need to solve the problem of blocking schoolchildren, because at the moment we are blocking by poppy address, and in the router the table is limited to 32 users, and there was also a problem with connecting new smartphones. I tried to make a guest network and it seemed to work out (it was not necessary to enter the poppy addresses in the table), but after the reboot, I still had to add the poppy addresses of the phones to the lists.
An optical fiber was brought to the school and then a twisted pair goes to the router (1), from it another 1 twisted pair goes to the router (2) + this same router is connected via a bridge to another router (3) (they did not pull the twisted pair). All tp link routers (budget up to 1k model N840)
accordingly, you need to connect 34 PCs via a wafer and about 10-15 smartphones + periodically you will need to connect about 10 tablets at once (schoolchildren). There is also an informatics office in which 5 PCs are already connected via a switch and a twisted pair cable (it stretches from the first router
) problems: it’s not convenient to constantly add poppies, schoolchildren constantly steal passwords from wifi and after connecting 3 routers through the bridge I can’t enter its settings by IP address. Maybe somehow it will be possible to make a single Wi-Fi network among 3 routers? What would be more convenient to administer? Or is there another way to protect against schoolchildren?
ps There are 2 more old Zixel P330 W EE routers, can you put some kind of custom firmware on them? and sorry for the clumsy story :S

Answer 1

The solution you have, as they say - "On the knee" is assembled. You can try to play around with OpenWRT, but I would recommend switching to something more advanced. With a minimal budget, you should be able to build everything on Mikrotik.
Buy a router, several access points and organize it all into one network using CapsMan.
Network requirements will keep growing and your solution won't scale. And specialists in crutch solutions are not in demand on the market, and knowledge of Mikrotik will come in handy.
I ask you, do not build from shit and sticks, and then make a guilty look in front of the leadership explaining another problem. Let's upgrade the hardware!!!
If there is a domain (ActiveDirectory) - fasten eap-mschap-v2, it will immediately become clear who distributes passwords)
Or try adjusting FreeRadius.
https://mikrotik.com/product/rb4011igs_rm
https://mikrotik.com/product/cap_ac

Answer 2

schoolchildren constantly steal wifi passwords

BUT? Are students stealing long WPA2 passwords?
Set it up and move forward.