Configure Cambium Networks Devices

The following instructions outline how to setup a Cambium network for the Marketing 4 WiFi Platform.  This guide covers configuring RADIUS profiles and guest access settings. This guide assumes that your Cambium equipment is already operational and with a live network ready to configure for Guest WiFi. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.

1. Login to your CnMaestro account.
2. Click on Configuration icon to the left and click on WiFi Profiles.
3. Click on the WLANs tab at the top
4. Press the Edit button to the right of your desired WLAN
5. WLAN Tab
   • Client Isolation- Local
   • cnMaestro Managed Roaming: Enabled
6. AAA Servers Tab
   • • • RADIUS Authentication Servers
         1. Host 1: Select one
            US-A Radius 1 IP

            52.23.46.139

            You can confirm your platform environment under Operator Customizations.

            US-B Radius 1 IP

            3.132.31.3

            You can confirm your platform environment under Operator Customizations.

         2. Port: 1812
         3. Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
         4. Host 2: Select one
            US-A Radius 2 IP

            52.207.192.243

            You can confirm your platform environment under Operator Customizations.

            US-B Radius 2 IP

            3.18.137.68

            You can confirm your platform environment under Operator Customizations.

         5. Port: 1812
         6. Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
         7. Timeout: 10
         8. Attempts: 3
       • RADIUS Accounting Servers
         1. Host 1: Select one
            US-A Radius 1 IP

            52.23.46.139

            You can confirm your platform environment under Operator Customizations.

            US-B Radius 1 IP

            3.132.31.3

            You can confirm your platform environment under Operator Customizations.

         2. Port: 1813
         3. Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
         4. Host 2: Select one
            US-A Radius 2 IP

            52.207.192.243

            You can confirm your platform environment under Operator Customizations.

            US-B Radius 2 IP

            3.18.137.68

            You can confirm your platform environment under Operator Customizations.

         5. Port: 1813
         6. Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
         7. Timeout: 10
         8. Attempts: 3
         9. Accounting Mode: Start-Interim-Stop
         10. Accounting Packet: Enable Accounting-On messages
       • Advanced Settings
         1. Server Pool Mode: Failover
         2. NAS-Identifier: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called SWS/Hotspot/NAS-ID.
         3. Dynamic VLAN: Unchecked
7. Guest Access Tab
   • Enable: Checked
   • Portal Mode:  External Hotspot
   • Access Policy: Radius
   • External Page URL: Select one
     US-A Splash URL

     https://splash.4wifi.net/hotspotlogin.php

     You can confirm your platform environment under Operator Customizations.
     

     If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php

     US-B Splash URL

     https://splash.4wifi-e2.net/hotspotlogin.php

     You can confirm your platform environment under Operator Customizations.
     

     If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php

   • External Portal Type: Standard
   • Success Action: Redirect user to External URL
   • Prefix Query Strings in Redirect URL: checked
   • Redirect URL: Select one
     US-A Redirect URL

     https://splash.4wifi.net/hotspotlogin.php?res=success

     You can confirm your platform environment under Operator Customizations.
     

     If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

     US-B Redirect URL

     https://splash.4wifi-e2.net/hotspotlogin.php?res=success

     You can confirm your platform environment under Operator Customizations.
     

     If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

   • Session Timeout: 86400
   • Inactivity Timeout: 43200
   • Whitelist: Add an entry for each of the wildcard walled garden entries found in the default walled garden list and any additional entries provided by support.
8. Press Save
9. If your AP Group does not Auto Sync you will need to schedule configuration updates for your APs.