Aruba Instant On

Introduction

This guide describes the configuration steps to enable an external captive portal in the Aruba Instant On plataform.

The following guide was created using an Aruba wireless network with the following components:

• Controller: Aruba Instant On Version 2.0.3
• AP: Aruba Instant On AP12 Version 2.0.2

Requirements

You need to access your Aruba Instant On Application. You can use the Mobile App or Web Application. This guide followed the Web Application approach. For more details you can read Instant On Guides.

In the Aruba Instant On Application you can follow the new site wizard to set up a new site and provision your devices on it:

Guest Portal

Once you have your site and devices configured, go to "Site management" and "Guest portal". Select "External" in the dropdown menu and click in the "Custom" button:

Custom Guest Portal

Set the following options:

• Server URL: the provided captive portal login URL.
• Redirect URL: the provided captive portal redirect URL.

Allowed domains

Enable the social networks you want to provide in your portal. If a social network does not belong to the list (e.g. Google), add the domains according to Walled Garden for the Social Login. Add the CoffeeBean Identity and Access Platform domains.

Primary RADIUS Server

Enable the "Send RADIUS Accounting" option and set the following options:

• Server IP address: the RADIUS server IP according to your environment/region.
• Shared secret: the provided RADIUS client secret.

Do not forget to click "Apply changes" to save your settings.

Network

Go to "Home" and click in "Networks". Add a new network for your SSID by clicking in "+ Add". Set the following options:

• Usage: Guest
• Network name: your SSID name
• Security: Portal

Click "Save" to apply changes.

Customer Parameters

The summary of customer specific parameters is:

Basic Settings

• Custom Guest Portal
  • Server URL: the provided captive portal login URL.
  • Redirect URL: the provided captive portal redirect URL.
  • Allowed domains: get the list of domains you want to enable to unauthenticated users at our documentation.
  • Primary RADIUS Server:
    • Server IP address: the RADIUS server IP according to your environment/region.
    • Shared secret: the provided RADIUS client secret.