Aerohive
Aerohive AP configuration instructions (applies to HiveManager NG 6.4r1 and newer versions)
Hive Manager Connect version is not supported.
Log in to the HiveManager NG interface
Go to Configure → Network Policies → Add Network Policy
Configure New Policy
Wireless | checked |
Switches | unchecked |
Routing | unchecked |
Policy name | type in your chosen name, for example “SocialWiFi Guest” (users will not see this name) |
Save |
In the Wireless Networks tab → Add → All other Networks (standard)
Name (SSID) | your network name |
Broadcast Name | this is the network name that the users will see |
SSID Authentication | Open (unsecured) |
Enable Captive Web Portal | On |
User Auth on Captive Web Portal | checked |
Choose Authentication Type | Redirect to External URL for Authentication |
Send Client's Requested URL in Clear Text | checked |
Default Captive Web Portal → Add
Name | socialwifi |
Captive Web Portal | checked |
Login URL | http://login.socialwifi.com |
Password Encryption | No Encryption |
Authentication Method | PAP |
Success Page | Off |
Redirect clients after a successful login attempt | checked |
To the initial page | checked |
Failure Page | Off |
Redirect clients after a failed login attempt | checked |
To the login page | checked |
Walled Garden → Add
Web | checked |
Paste the domains below into the text field
Mandatory
| login.socialwifi.com |
|---|
sw-login.com |
Facebook remarketing pixel
| connect.facebook.net |
|---|
www.facebook.com |
Google remarketing tag
| www.googletagmanager.com |
|---|
www.googleadservices.com |
googleads.g.doubleclick.net |
YouTube widget on login pages
| *.youtube.com |
|---|
*.ytimg.com |
*.googlevideo.com |
yt3.ggpht.com |
Google login
| accounts.google.com |
|---|
ssl.gstatic.com |
fonts.gstatic.com |
fonts.google.com |
accounts.youtube.com |
*.googleapis.com |
apis.google.com |
You must also add your regional domain for “accounts.google.com”, for example “accounts.google.co.uk” if you are in the UK
Facebook login
| facebook.com |
|---|
*.facebook.com |
*.fbcdn.net |
Twitter login
| twitter.com |
|---|
api.twitter.com |
*.twimg.com |
LinkedIn login
| linkedin.com |
|---|
*.linkedin.com |
*.licdn.com |
Authenticate via RADIUS Server
Default RADIUS Server Group – press +
In the Configure RADIUS Servers window:
RADIUS Server Group Name | SocialWiFi |
Check EXTERNAL RADIUS SERVER and press + | |
Name | swradius |
IP/Host Name | press + and choose “IP Address” |
In the New IP Address or Host Name window:
Name | swradius |
IP Address | 35.205.62.147 |
Save IP |
In the previous window:
Server Type:
Check Authentication Port | 31812 |
Check Accounting Port | 31813 |
Shared Secret | paste in the Radius Secret located in Access Points tab |
Save External RADIUS |
In the Configure RADIUS Servers window check “swradius” on the list and press SAVE RADIUS
In the Wireless Networks tab press SAVE
In the Deploy Policy select your chosen AP and press UPLOAD
Adding the Access Point’s MAC to Social WiFi dashboard
In the MONITOR tab press “Column Picker” next to the “Update Devices” button and highlight the MAC Address
A “MAC Address” column should show up on the AP list.
Copy the MAC Address of each AP that you want to add to the system and add it in the Social WiFi panel in the “Access Points” tab, press “Add” (upper right corner), paste the MAC address you copied into the form (adding a name is optional) and click “Create”.
You are now ready to test your new network by connecting to it through the configured Access Point.
Last updated