Datto

This guide configures a Datto access point to work with the Social WiFi captive portal using the Datto Network Manager web UI and the Social WiFi Panel. Follow the steps in order.

Compatibility

Social WiFi has been tested and works on:

• Datto AP440, Firmware Version 7.0.13

Before you begin

Caution

Have these things ready:

1. Access to the Datto Network Manager.
2. Access to the Social WiFi Panel.
3. The MAC address of each access point that will serve the Social WiFi login portal (obtained in step 1 of the installation).
4. The RADIUS Secret generated in the Social WiFi Panel (obtained in step 2 of the installation).

Installation

1. Copy the Access Point MAC address

   Retrieves the MAC address required to register the access point in the Social WiFi Panel.

   1. Log in to the Datto Network Manager.
   2. Navigate to Access Points -> Status.
   3. Copy the MAC address of each access point.

   

2. Social WiFi Panel configuration

   Registers the access point in the Social WiFi Panel and generates the RADIUS Secret.

   1. Log in to the Social WiFi Panel.
   2. Navigate to Access Points.
   3. Click Add Access Points.

   

   4. Paste the MAC address copied from the Datto Network Manager.
   5. Click Add and then Create.

   Tip

   If there is more than one access point, repeat this process for each access point that will serve the Social WiFi login portal.

   

   6. After adding the access point, copy the provided RADIUS Secret. It is required in step 5.

   

3. Select the SSID

   Return to the Datto Network Manager and navigate to Access Points -> SSID. Select a free SSID slot that will become the Guest WiFi.

   

4. Common SSID settings

   Defines the basic parameters of the Guest WiFi network.

   SSID Name	Display name for the Guest WiFi
   Enabled	Enabled
   Visible	Enabled
   Band	All - Combined SSID
   Authentication type	Open

   

5. Captive Portal settings

   Points the SSID to the Social WiFi splash page and RADIUS server. Navigate to Captive Portal settings and use the following settings.

   Splash Page

   Splash page	Enabled
   Splash page type	Hosted remotely
   Splash page URL	http://login.socialwifi.com/
   Splash page secret	Leave blank

   

   Splash Page Authentication

   Splash page authentication type	RADIUS
   Server address 1	35.205.62.147
   Server address 2	Leave blank
   Server secret	Paste your RADIUS Secret
   NAS ID	Leave blank
   Use MAC addr for password	Disabled
   Authentication Port	31812
   Accounting Port	31813
   Block clients after X invalid authentication attempts	3 (default)
   Block duration of X minutes	30 (default)
   Client force timeout (minutes)	2880 (default)
   Enable failsafe mode	Enabled (default)

   Caution

   RADIUS Secret: Use the RADIUS Secret copied in step 2. If the IP address above was copied, the clipboard may have been overwritten. In that case, go back and copy the RADIUS Secret again.

   

   Splash Page Behavior

   Block unauthenticated users	Enabled
   Whitelist	Enter a list of devices that are skipped from authentication, e.g. smart TVs
   Walled garden	Copy and paste a list from below

   socialwifi.com
   sw-login.com
   facebook.com
   fbcdn.net
   linkedin.com
   licdn.com
   twitter.com
   x.com
   twimg.com
   whatsapp.net
   whatsapp.com
   connect.facebook.net
   www.facebook.com
   www.googletagmanager.com
   www.googleadservices.com
   googleads.g.doubleclick.net
   youtube.com
   ytimg.com
   googlevideo.com
   yt3.ggpht.com

   

6. Save the configuration

   Applies the SSID configuration.

   Scroll up and click Save Changes to save the SSID configuration.

Final steps

Test the solution

Wait until the configuration is applied on the access points, then:

1. Connect a client device to the guest WiFi network. The login page should load automatically.
2. Complete the login process.
3. Confirm that internet access is available after logging in.
4. Open the Social WiFi Panel and verify that the connection and login are shown in the Statistics > Devices graph.