ExtremeCloudIQ Pilot Configuration Guide (FKA Aerohive)

If the ExtremeCloudIQ Pilot Gateway option “Use Domain Name” is turned ON the splash page will use the web server domain name configured under the ExtremeCloudIQ Pilot Captive Portal profile assigned to the Network Policy. This feature should only be turned ON if you have configured a Web Server domain name and Enabled HTTPS with a valid HTTPS certificate for the domain name for your ExtremeCloudIQ Pilot Captive Portal profile.

You must add the BSSID MAC of every AP to the hotspot with this toggled turned on for this feature to work.

The following instructions outline how to setup a ExtremeCloudIQ Pilot network for the Marketing4WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that your ExtremeCloudIQ PIlot access points are already operational on a live network. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform per the hardware manufacturers specifications.

  1. Log into your Extreme Cloud  IQ dashboard
  2. Click Configure > Network Policies > Edit your Network Policy
  3. Select the Wireless networks tab and click the blue ADD button, select Guest Access Network.
    • SSID Name: SmartWiFi (Or whatever you wish)
    • SSID Broadcast Name: Smart WiFi (Or whatever you wish)
    • Unsecured (Open) Network- Select Guests can access the network without logging in.
    • Press Save and then close.
  4. Click the SSID just created to edit the Wireless Network configuration page.
  5. Under the Usage SSID Authentication tab configure with the following:
    1. Enable Captive Web Portal: ON
      • User Auth on Captive Web Portal: Checked
      • Authentication Type: Redirect to External URL for Authentication
    2. Default Captive Web Portal: Click ADD and configure with
      1. Name: Smart WiFi( Or whatever you wish)
      2. Login URL:Select one
      3. Password Encryption: UAM with Shared Secret
      4. Shared Secret: hotspot
      5. Authentication Method: CHAP
      6. Success Page: OFF
      7. Redirect clients after a successful login attempt: Checked
        • To a specified URL:Select one
      8. Failure Page: OFF
      9. Walled Garden: Please add all the Default walled garden entries.

        If you’re a white label client and you have your own splash domain, be sure to include it in the walled garden.

      10. Click Save.
    3. Under Authentication Settings > Authenticate via Radius Server click the blue + to add a new Default RADIUS Server Group
      1. Radius Server Group Name: SmartWiFi (or whatever you wish)
      2. Select the External Radius Server tab and click the blue + to add a new radius server.
        • Name: SmartWiFi1
        • Hostname: Select one
        • Authentication checked. Port 1812
        • Accounting checked. Port 1813
        • Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
        • Click Save external Radius
      3. Click the blue + to add another radius server.
        • Name: SmartWiFi2
        • Hostname: Select one
        • Authentication checked. Port 1812
        • Accounting checked. Port 1813
        • Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
        • Click Save external Radius
      4. Check SmartWiFi1 and SmartWiFi2 and click Save Radius.
    4. Click Save.
  6. Click the Additional Settings tab.
    1. Click Supplemental CLI in the menu to the left.
    2. Toggle Supplemental CLI ON.
    3. Assign a name for the CLI setting
    4. Under CLI commands paste the command below, using the NASID from the Edit Hotspot page in the Marketing4WiFi dashboard, called SWS/Hotspot/NAS-ID without the <> used below.
      aaa attribute NAS-Identifier <NASID Found in the Dashboard>
  7. Click the Deploy Policy tab.
    • Check the APs intended to broadcast the Smart WiFi signal and click Upload.
    • Check Update Network Policy and select Delta Configuration and press Upload.

Disclaimer on hardware configuration guides in the KB:

This equipment has been integrated and tested in our labs with the Marketing4WiFi using the firmware versions below.

IQ Engine 10.0r8b build-245270

LIMITED HARDWARE SUPPORT: Hardware manufacturers frequently make changes to firmware, controllers and GUI’s. The information below may be out of date or images may be different and is to be used as a general reference guide. We do offer additional limited support to help with trouble-shooting and we highly recommend that you have a hardware support agreement and/or access to a hardware support engineering representative from the manufacturer.

 

Updated on November 20, 2023

Was this article helpful?

Need Support?
Can't find the answer you're looking for? Don't worry we're here to help!
CONTACT SUPPORT