Aruba IAP

Compatibility

Social WiFi has been tested and is proven to work on the following configurations:

Access Point - IAP-325

Firmware - 6.x and higher (tested up to 8.10.0.9_88493 LSR)

Accessing to device’s administration panel

The new version of Aruba’s User Interface uses new default login credentials. To log in first time, your credentials will be:

Login	admin
Password	Your device's Serial Number (SN) which can be found on the back of your Aruba IAP

After first login the system will ask you to set your own password.

Configuring Hotspot

Once you see the Dashboard go to Configuration -> Networks and click the blue “+” sign to add a new wireless network.

Creating Wireless Network

Name	Your network name
Type	Wireless
Primary usage	Guest

Click Next on the bottom of the screen.

Client IP & VLAN Assignment

Client IP assignment	Network assigned
Client VLAN assignment	Default

Click Next

Hotspot’s Security Level

Splash page type	External
Captive portal proxy server	[leave blank]
Captive portal profile	Click the blue “+” sign to add a new profile

Name	SocialWiFi
Type	RADIUS Authentication
IP or hostname	login.socialwifi.com
URL	/
Port	443
Use HTTPS	Enabled
Captive portal failure	Deny Internet
Automatic URL Whitelisting	Disabled
Server offload	Disabled
Prevent frame overlay	Disabled
Use VC IP in Redirect URL	Disabled
Redirect URL	Leave empty

Click OK

Adding RADIUS Server

Authentication server 1: Click the blue “+” sign to add a new server

Type	RADIUS
Name	guestwifi
RadSec	Disabled
IP Address	35.205.62.147
Auth Port	31812
Accounting Port	31813
Shared Key	Radius Secret available in Access Points tab of the Social WiFi Panel
Retype Key	Repeat above
Timeout	5 sec
Retry Count	3
Dynamin Authorization	Disabled

Click OK

Reauth Interval	24 hrs
Accounting	Use authentication servers
Accounting Mode	Authentication
Accounting Interval	3 min
Blacklisting	Disabled
Enforce DHCP	Disabled
Disable if uplink type is	3G/4G – Disabled, Wifi – Disabled, Ethernet – Disabled
Encryption	Disabled
Enhanced Open	Enabled

Click Next

Hotspot Access Rules

Access Rules	Role-based
Download Rules	Disabled

To add a new role, choose your WiFi name and on the right side of the screen click the blue “+” sign.

Rule type	Access control
Service	Network, any
Action	Allow
Destination	to domain name
Domain name	sw-login.com

Click OK

Add all following addresses in the same way as you just added sw-login.com

Note: A regional Google domain according to your geographic location has to be added to make Google login work. E.g. if you’re based in UK, add "accounts.google.co.uk".

*.socialwifi.com 
sw-login.com 
connect.facebook.net 
www.facebook.com 
www.googletagmanager.com 
www.googleadservices.com 
googleads.g.doubleclick.net 
*.youtube.com 
*.ytimg.com 
*.googlevideo.com 
yt3.ggpht.com 
accounts.google.com
ssl.gstatic.com 
fonts.gstatic.com 
fonts.google.com 
accounts.youtube.com 
*.googleapis.com 
apis.google.com 
facebook.com 
*.facebook.com 
*.fbcdn.net 
linkedin.com 
*.linkedin.com 
*.licdn.com 
twitter.com 
api.twitter.com 
*.twimg.com

Assign pre-authentication role: Enabled, Guest WiFi

Adding AP into Social WiFi Panel

To add your Access Point to Panel, log in to your account, go to Access Points tab and click “Add new”

Your device’s MAC address can be found in Dashboard -> Network on the bottom of screen.

Firewall

If you have an external firewall behind your Aruba devices, make sure that these ports are enabled:

TCP port 2083

Aruba also uses their own port to connect the Access Point with the controller. Make sure to enable port UDP 8211 if you can't connect your AP with the controller.

You are now ready to test your new network by connecting to it through the configured Access Point.