WatchGuard Configuration Guide

The following instructions outline how to setup a WatchGuard network for the Marketing4WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that your WatchGuard access points are already operational on a live network. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform per the hardware manufacturers specifications.

1. Log into your WatchGuard Cloud dashboard and open the Manage panel.
2. Click Configuration > Device Configuration > RADIUS Profiles
   1. Click Add RADIUS Profile and configure with the settings below.
      • Profile Name: SmartWiFi1
      • IP Address:
        US-A Radius 1 IP

        52.23.46.139

        You can confirm your platform environment under Operator Customizations.

        US-B Radius 1 IP

        3.132.31.3

        You can confirm your platform environment under Operator Customizations.

      • Authentication Port: 1812
      • Accounting Port: 1813
      • Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
   2. Click Add RADIUS Profile and configure with the settings below.
      • Profile Name: SmartWiFi2
      • IP Address:
        US-A Radius 2 IP

        52.207.192.243

        You can confirm your platform environment under Operator Customizations.

        US-B Radius 2 IP

        3.18.137.68

        You can confirm your platform environment under Operator Customizations.

      • Authentication Port: 1812
      • Accounting Port: 1813
      • Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
3. Click Configuration> Device Configuration> SSID Profiles. Click Add New Wi-Fi Profile and configure to the settings below.
   1. 1. WLAN Main:
         • Profile Name: Smart WiFi
         • SSID: Guest WiFi(Or whatever you wish)
         • Broadcast SSID: Checked
      2. Security Tab:
         • Security Mode: Open
         • Client Isolation: Checked
      3. Captive Portal:
         • Enable Captive Portal: Checked
         • External Splash Page with RADIUS Authentication: Checked
         • Splash Page URL:
           US-A Splash URL

           https://splash.4wifi.net/hotspotlogin.php

           You can confirm your platform environment under Operator Customizations.
           

           If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php

           US-B Splash URL

           https://splash.4wifi-e2.net/hotspotlogin.php

           You can confirm your platform environment under Operator Customizations.
           

           If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php

         • Shared Secret: hotspot
         • Click RADIUS Settings and configure to the settings below
           1. NAS ID: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called SWS/Hotspot/NAS-ID.
           2. Primary Authentication Server: SmartWiFi1
           3. Secondary Authentication Server: SmartWiFi2
           4. Interval: 3 minutes
           5. Primary Accounting Server: SmartWiFi1
           6. Secondary Accounting Server: SmartWiFi2
           7. Click Save.
         • Walled Garden Sites: Please add all the Default walled garden entries.
           

           If you’re a white label client and you have your own splash domain, be sure to include it in the walled garden.

         • Redirect URL:
           US-A Redirect URL

           https://splash.4wifi.net/hotspotlogin.php?res=success

           You can confirm your platform environment under Operator Customizations.
           

           If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

           US-B Redirect URL

           https://splash.4wifi-e2.net/hotspotlogin.php?res=success

           You can confirm your platform environment under Operator Customizations.
           

           If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

         • Service Identifier: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called SWS/Hotspot/NAS-ID.
         • Click Save.
4. Click Configuration> Device Configuration> Device Templates. Edit your template and under the Radio Section add the Guest WiFi SSID you created to all radios.