ExtremeCloudIQ Pilot Configuration Guide (FKA Aerohive)

The following instructions outline how to setup a ExtremeCloudIQ Pilot network for the Marketing4WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that your ExtremeCloudIQ PIlot access points are already operational on a live network. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform per the hardware manufacturers specifications.

1. Log into your Extreme Cloud  IQ dashboard
2. Click Configure > Network Policies > Edit your Network Policy
3. Select the Wireless networks tab and click the blue ADD button, select Guest Access Network.
   • SSID Name: SmartWiFi (Or whatever you wish)
   • SSID Broadcast Name: Smart WiFi (Or whatever you wish)
   • Unsecured (Open) Network- Select Guests can access the network without logging in.
   • Press Save and then close.
4. Click the SSID just created to edit the Wireless Network configuration page.
5. Under the Usage SSID Authentication tab configure with the following:
   1. Enable Captive Web Portal: ON
      • User Auth on Captive Web Portal: Checked
      • Authentication Type: Redirect to External URL for Authentication
   2. Default Captive Web Portal: Click ADD and configure with
      1. Name: Smart WiFi( Or whatever you wish)
      2. Login URL:Select one
         US-A Splash URL

         https://splash.4wifi.net/hotspotlogin.php

         You can confirm your platform environment under Operator Customizations.
         

         If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php

         US-B Splash URL

         https://splash.4wifi-e2.net/hotspotlogin.php

         You can confirm your platform environment under Operator Customizations.
         

         If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php

      3. Password Encryption: UAM with Shared Secret
      4. Shared Secret: hotspot
      5. Authentication Method: CHAP
      6. Success Page: OFF
      7. Redirect clients after a successful login attempt: Checked
         • To a specified URL:Select one
           US-A Redirect URL

           https://splash.4wifi.net/hotspotlogin.php?res=success

           You can confirm your platform environment under Operator Customizations.
           

           If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

           US-B Redirect URL

           https://splash.4wifi-e2.net/hotspotlogin.php?res=success

           You can confirm your platform environment under Operator Customizations.
           

           If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

      8. Failure Page: OFF
      9. Walled Garden: Please add all the Default walled garden entries.
         

         If you’re a white label client and you have your own splash domain, be sure to include it in the walled garden.

      10. Click Save.
   3. Under Authentication Settings > Authenticate via Radius Server click the blue + to add a new Default RADIUS Server Group
      1. Radius Server Group Name: SmartWiFi (or whatever you wish)
      2. Select the External Radius Server tab and click the blue + to add a new radius server.
         • Name: SmartWiFi1
         • Hostname: Select one
           US-A Radius 1 Server

           radius1.smartwifiplatform.com

           US-B Radius 1 Server

           radius1-usb.smartwifiplatform.com

         • Authentication checked. Port 1812
         • Accounting checked. Port 1813
         • Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
         • Click Save external Radius
      3. Click the blue + to add another radius server.
         • Name: SmartWiFi2
         • Hostname: Select one
           US-A Radius 2 Server

           radius2.smartwifiplatform.com

           US-B Radius 2 Server

           radius2-usb.smartwifiplatform.com

         • Authentication checked. Port 1812
         • Accounting checked. Port 1813
         • Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
         • Click Save external Radius
      4. Check SmartWiFi1 and SmartWiFi2 and click Save Radius.
   4. Click Save.
6. Click the Additional Settings tab.
   1. Click Supplemental CLI in the menu to the left.
   2. Toggle Supplemental CLI ON.
   3. Assign a name for the CLI setting
   4. Under CLI commands paste the command below, using the NASID from the Edit Hotspot page in the Marketing4WiFi dashboard, called SWS/Hotspot/NAS-ID without the <> used below.

      aaa attribute NAS-Identifier <NASID Found in the Dashboard>

7. Click the Deploy Policy tab.
   • Check the APs intended to broadcast the Smart WiFi signal and click Upload.
   • Check Update Network Policy and select Delta Configuration and press Upload.