Aruba IAP
Last updated
Last updated
Social WiFi has been tested and is proven to work on the following configurations:
Access Point - IAP-325
Firmware - 6.x and higher (tested up to 8.10.0.9_88493 LSR)
The new version of Aruba’s User Interface uses new default login credentials. To log in first time, your credentials will be:
Login | admin |
Password | Your device's Serial Number (SN) which can be found on the back of your Aruba IAP |
After first login the system will ask you to set your own password.
Once you see the Dashboard go to Configuration -> Networks and click the blue “+” sign to add a new wireless network.
Name | Your network name |
Type | Wireless |
Primary usage | Guest |
Click Next on the bottom of the screen.
Client IP & VLAN Assignment
Client IP assignment | Network assigned |
Client VLAN assignment | Default |
Click Next
Splash page type | External |
Captive portal proxy server | [leave blank] |
Captive portal profile | Click the blue “+” sign to add a new profile |
Name | SocialWiFi |
Type | RADIUS Authentication |
IP or hostname | login.socialwifi.com |
URL | / |
Port | 443 |
Use HTTPS | Enabled |
Captive portal failure | Deny Internet |
Automatic URL Whitelisting | Disabled |
Server offload | Disabled |
Prevent frame overlay | Disabled |
Use VC IP in Redirect URL | Disabled |
Redirect URL | Leave empty |
Click OK
Authentication server 1: Click the blue “+” sign to add a new server
Type | RADIUS |
Name | guestwifi |
RadSec | Disabled |
IP Address | 35.205.62.147 |
Auth Port | 31812 |
Accounting Port | 31813 |
Shared Key | Radius Secret available in Access Points tab of the Social WiFi Panel |
Retype Key | Repeat above |
Timeout | 5 sec |
Retry Count | 3 |
Dynamin Authorization | Disabled |
Click OK
Reauth Interval | 24 hrs |
Accounting | Use authentication servers |
Accounting Mode | Authentication |
Accounting Interval | 3 min |
Blacklisting | Disabled |
Enforce DHCP | Disabled |
Disable if uplink type is | 3G/4G – Disabled, Wifi – Disabled, Ethernet – Disabled |
Encryption | Disabled |
Enhanced Open | Enabled |
Click Next
Access Rules | Role-based |
Download Rules | Disabled |
To add a new role, choose your WiFi name and on the right side of the screen click the blue “+” sign.
Rule type | Access control |
Service | Network, any |
Action | Allow |
Destination | to domain name |
Domain name | sw-login.com |
Click OK
Add all following addresses in the same way as you just added sw-login.com
Note: A regional Google domain according to your geographic location has to be added to make Google login work. E.g. if you’re based in UK, add "accounts.google.co.uk".
Assign pre-authentication role: Enabled, Guest WiFi
To add your Access Point to Panel, log in to your account, go to Access Points tab and click “Add new”
Your device’s MAC address can be found in Dashboard -> Network on the bottom of screen.
If you have an external firewall behind your Aruba devices, make sure that these ports are enabled:
TCP port 2083
Aruba also uses their own port to connect the Access Point with the controller. Make sure to enable port UDP 8211 if you can't connect your AP with the controller.
You are now ready to test your new network by connecting to it through the configured Access Point.
