Aruba Central
Last updated
🇬🇧 English
Last updated
Social WiFi has been tested and is proven to work on the following configurations:
Access Point - IAP-325
Firmware - 8.x and higher (tested up to 8.10.0.9_88493 LSR)
Once you see the Global dashboard, click on Global on the left and click on the gear icon near the "Groups" section.
Now, select your AP group you want to configure and click on the gear icon on the right side to access configuration.
You should be redirected to the page below. Inside Access Points -> WLANs tab, click on + Add SSID and go through the configuration process.
In the "General" section
Name
Your network name
Band
For this guide we'll proceed with the defaults, but feel free to select whichever you prefer.
Click Next in the lower right corner.
In the "VLANs" section, configure according to your network. For this guide we'll proceed with default settings.
Click Next in the lower right corner.
In the "Security" settings, configure as follows:
Security level
Visitors
Type
External Captive Portal
Next in the Captive Portal Profile section, click on + as marked at the screenshot below.
You should see a pop up window appear, configure as follows:
Name
SocialWiFi
Type
RADIUS Authentication
IP or hostname
login.socialwifi.com
URL
/
Port
443
Use HTTPS
Enabled
Captive portal failure
Deny Internet
Automatic URL Whitelisting
Disabled
Server offload
Disabled
Prevent frame overlay
Disabled
Use VC IP in Redirect URL
Disabled
Redirect URL
Leave empty
Click OK in the lower right corner.
Now, in the Primary Server section, click on + as marked at the screenshot below.
You should see a pop up window appear, configure as follows:
Type
RADIUS
Name
socialwifi
RadSec
Disabled
IP Address
35.205.62.147
Auth Port
31812
Accounting Port
31813
Shared Key
Radius Secret available in Access Points tab of the Social WiFi Panel
Retype Key
Repeat above
Timeout
5 sec
Retry Count
3
Click OK in the lower right corner.
Next, scroll down and in the "Advanced Settings" section, open "Walled Garden".
Under "Allowlist" click on + Add.
You should see the pop up window. Add the domains one by one and confirm by click on OK for each domain listed below.
Mandatory
Facebook remarketing pixel
Google remarketing tag
YouTube widget on login pages
Google login
Facebook login
LinkedIn login
Twitter login
After adding all the domains, click on Next.
In the "Access" settings, select Role Based.
Scroll down and under the "Role" section click on + Add Role. Add the role named "pre-authentication role".
After creating the role, select it and under "Access Rules For Selected Roles" click on + Add Rule.
You should see the pop up window. Add each domain from the walled garden with the settings listed below:
Rule Type
Access Control
Service
Network
Action
Any, Allow
Destination
To a Domain Name
Domain name
Add each domain from the Walled Garden section
Click OK after adding each domain.
After adding all the domains, select default_wired_port_profile.
Scroll down and for the "Assign Pre-Authentication Role", make sure the checkbox is enabled and from the drop-down menu select pre-authentication rule created before.
Click Next.
After the configuration, your last screen should look like this. Click Finish to create the network.
To add your Access Point to Panel, log in to your Social WiFi account, go to Access Points tab and click “Add new”.
Your device’s MAC address can be found in the Access Points section in your AP group.
You are now ready to test your new network by connecting to it through the configured Access Point.