Aruba IAP
Compatibility
Social WiFi has been tested and is proven to work on the following configurations:
Access Point - IAP-325
Firmware - 6.x and higher (tested up to 8.10.0.9_88493 LSR)
Accessing to deviceβs administration panel
The new version of Arubaβs User Interface uses new default login credentials. To log in first time, your credentials will be:
Login | admin |
Password | Your device's Serial Number (SN) which can be found on the back of your Aruba IAP |
After first login the system will ask you to set your own password.
Configuring Hotspot
Once you see the Dashboard go to Configuration -> Networks and click the blue β+β sign to add a new wireless network.
Creating Wireless Network
Name | Your network name |
Type | Wireless |
Primary usage | Guest |
Click Next on the bottom of the screen.
Client IP & VLAN Assignment
Client IP assignment | Network assigned |
Client VLAN assignment | Default |
Click Next
Hotspotβs Security Level
Splash page type | External |
Captive portal proxy server | [leave blank] |
Captive portal profile | Click the blue β+β sign to add a new profile |
Name | SocialWiFi |
Type | RADIUS Authentication |
IP or hostname | login.socialwifi.com |
URL | / |
Port | 443 |
Use HTTPS | Enabled |
Captive portal failure | Deny Internet |
Automatic URL Whitelisting | Disabled |
Server offload | Disabled |
Prevent frame overlay | Disabled |
Use VC IP in Redirect URL | Disabled |
Redirect URL | Here you can paste your site address where you want to be sent after logging into hotspot. By default itβs empty. |
Click OK
Adding RADIUS Server
Authentication server 1: Click the blue β+β sign to add a new server
Type | RADIUS |
Name | guestwifi |
RadSec | Disabled |
IP Address | 35.205.62.147 |
Auth Port | 31812 |
Accounting Port | 31813 |
Shared Key | Radius Secret available in Access Points tab of the Social WiFi Panel |
Retype Key | Repeat above |
Timeout | 5 sec |
Retry Count | 3 |
Dynamin Authorization | Disabled |
Click OK
Reauth Interval | 24 hrs |
Accounting | Use authentication servers |
Accounting Mode | Authentication |
Accounting Interval | 3 min |
Blacklisting | Disabled |
Enforce DHCP | Disabled |
Disable if uplink type is | 3G/4G β Disabled, Wifi β Disabled, Ethernet β Disabled |
Encryption | Disabled |
Enhanced Open | Enabled |
Click Next
Hotspot Access Rules
Access Rules | Role-based |
Download Rules | Disabled |
To add a new role, choose your WiFi name and on the right side of the screen click the blue β+β sign.
Rule type | Access control |
Service | Network, any |
Action | Allow |
Destination | to domain name |
Domain name | sw-login.com |
Click OK
Add all following addresses in the same way as you just added sw-login.com
Note: A regional Google domain according to your geographic location has to be added to make Google login work. E.g. if youβre based in UK, add "accounts.google.co.uk".
Assign pre-authentication role: Enabled, Guest WiFi
Adding AP into Social WiFi Panel
To add your Access Point to Panel, log in to your account, go to Access Points tab and click βAdd newβ
Your deviceβs MAC address can be found in Dashboard -> Network on the bottom of screen.
Firewall
If you have an external firewall behind your Aruba devices, make sure that these ports are enabled:
TCP port 2083
Aruba also uses their own port to connect the Access Point with the controller. Make sure to enable port UDP 8211 if you can't connect your AP with the controller.
You are now ready to test your new network by connecting to it through the configured Access Point.
Last updated
