Aruba IAP

Compatibility

Social WiFi has been tested and is proven to work on the following configurations:

Access Point - IAP-325

Firmware - 6.x and higher (tested up to 8.10.0.9_88493 LSR)

Accessing to device’s administration panel

The new version of Aruba’s User Interface uses new default login credentials. To log in first time, your credentials will be:

Login

admin

Password

Your device's Serial Number (SN) which can be found on the back of your Aruba IAP

After first login the system will ask you to set your own password.

Configuring Hotspot

Once you see the Dashboard go to Configuration -> Networks and click the blue β€œ+” sign to add a new wireless network.

Creating Wireless Network

Name

Your network name

Type

Wireless

Primary usage

Guest

Click Next on the bottom of the screen.

Client IP & VLAN Assignment

Client IP assignment

Network assigned

Client VLAN assignment

Default

Click Next

Hotspot’s Security Level

Splash page type

External

Captive portal proxy server

[leave blank]

Captive portal profile

Click the blue β€œ+” sign to add a new profile

Name

SocialWiFi

Type

RADIUS Authentication

IP or hostname

login.socialwifi.com

URL

/

Port

443

Use HTTPS

Enabled

Captive portal failure

Deny Internet

Automatic URL Whitelisting

Disabled

Server offload

Disabled

Prevent frame overlay

Disabled

Use VC IP in Redirect URL

Disabled

Redirect URL

Leave empty

Click OK

Adding RADIUS Server

Authentication server 1: Click the blue β€œ+” sign to add a new server

Type

RADIUS

Name

guestwifi

RadSec

Disabled

IP Address

35.205.62.147

Auth Port

31812

Accounting Port

31813

Shared Key

Radius Secret available in Access Points tab of the Social WiFi Panel

Retype Key

Repeat above

Timeout

5 sec

Retry Count

3

Dynamin Authorization

Disabled

Click OK

Reauth Interval

24 hrs

Accounting

Use authentication servers

Accounting Mode

Authentication

Accounting Interval

3 min

Blacklisting

Disabled

Enforce DHCP

Disabled

Disable if uplink type is

3G/4G – Disabled, Wifi – Disabled, Ethernet – Disabled

Encryption

Disabled

Enhanced Open

Enabled

Click Next

Hotspot Access Rules

Access Rules

Role-based

Download Rules

Disabled

To add a new role, choose your WiFi name and on the right side of the screen click the blue β€œ+” sign.

Rule type

Access control

Service

Network, any

Action

Allow

Destination

to domain name

Domain name

sw-login.com

Click OK

Add all following addresses in the same way as you just added sw-login.com

Note: A regional Google domain according to your geographic location has to be added to make Google login work. E.g. if you’re based in UK, add "accounts.google.co.uk".

*.socialwifi.com 
sw-login.com 
connect.facebook.net 
www.facebook.com 
www.googletagmanager.com 
www.googleadservices.com 
googleads.g.doubleclick.net 
*.youtube.com 
*.ytimg.com 
*.googlevideo.com 
yt3.ggpht.com 
accounts.google.com
ssl.gstatic.com 
fonts.gstatic.com 
fonts.google.com 
accounts.youtube.com 
*.googleapis.com 
apis.google.com 
facebook.com 
*.facebook.com 
*.fbcdn.net 
linkedin.com 
*.linkedin.com 
*.licdn.com 
twitter.com 
api.twitter.com 
*.twimg.com

Assign pre-authentication role: Enabled, Guest WiFi

Adding AP into Social WiFi Panel

To add your Access Point to Panel, log in to your account, go to Access Points tab and click β€œAdd new”

Your device’s MAC address can be found in Dashboard -> Network on the bottom of screen.

Firewall

If you have an external firewall behind your Aruba devices, make sure that these ports are enabled:

TCP port 2083

Aruba also uses their own port to connect the Access Point with the controller. Make sure to enable port UDP 8211 if you can't connect your AP with the controller.

You are now ready to test your new network by connecting to it through the configured Access Point.

Last updated