Aruba IAP
Last updated
Last updated
Social WiFi has been tested and is proven to work on the following configurations:
Access Point - IAP-325
Firmware - 6.x and higher (tested up to 8.10.0.9_88493 LSR)
The new version of Aruba’s User Interface uses new default login credentials. To log in first time, your credentials will be:
Login
admin
Password
Your device's Serial Number (SN) which can be found on the back of your Aruba IAP
After first login the system will ask you to set your own password.
Once you see the Dashboard go to Configuration -> Networks and click the blue “+” sign to add a new wireless network.
Name
Your network name
Type
Wireless
Primary usage
Guest
Click Next on the bottom of the screen.
Client IP & VLAN Assignment
Client IP assignment
Network assigned
Client VLAN assignment
Default
Click Next
Splash page type
External
Captive portal proxy server
[leave blank]
Captive portal profile
Click the blue “+” sign to add a new profile
Name
SocialWiFi
Type
RADIUS Authentication
IP or hostname
login.socialwifi.com
URL
/
Port
443
Use HTTPS
Enabled
Captive portal failure
Deny Internet
Automatic URL Whitelisting
Disabled
Server offload
Disabled
Prevent frame overlay
Disabled
Use VC IP in Redirect URL
Disabled
Redirect URL
Leave empty
Click OK
Authentication server 1: Click the blue “+” sign to add a new server
Type
RADIUS
Name
guestwifi
RadSec
Disabled
IP Address
35.205.62.147
Auth Port
31812
Accounting Port
31813
Shared Key
Radius Secret available in Access Points tab of the Social WiFi Panel
Retype Key
Repeat above
Timeout
5 sec
Retry Count
3
Dynamin Authorization
Disabled
Click OK
Reauth Interval
24 hrs
Accounting
Use authentication servers
Accounting Mode
Authentication
Accounting Interval
3 min
Blacklisting
Disabled
Enforce DHCP
Disabled
Disable if uplink type is
3G/4G – Disabled, Wifi – Disabled, Ethernet – Disabled
Encryption
Disabled
Enhanced Open
Enabled
Click Next
Access Rules
Role-based
Download Rules
Disabled
To add a new role, choose your WiFi name and on the right side of the screen click the blue “+” sign.
Rule type
Access control
Service
Network, any
Action
Allow
Destination
to domain name
Domain name
sw-login.com
Click OK
Add all following addresses in the same way as you just added sw-login.com
Note: A regional Google domain according to your geographic location has to be added to make Google login work. E.g. if you’re based in UK, add "accounts.google.co.uk".
Assign pre-authentication role: Enabled, Guest WiFi
To add your Access Point to Panel, log in to your account, go to Access Points tab and click “Add new”
Your device’s MAC address can be found in Dashboard -> Network on the bottom of screen.
If you have an external firewall behind your Aruba devices, make sure that these ports are enabled:
TCP port 2083
Aruba also uses their own port to connect the Access Point with the controller. Make sure to enable port UDP 8211 if you can't connect your AP with the controller.
You are now ready to test your new network by connecting to it through the configured Access Point.