Aruba Central

Modified on Wed, 29 Jan at 5:33 PM

1. Create Wi-Fi network

Devices > Config > WLANs > + Add SSID
General
- Name (SSID): Free Wi-Fi (or whatever you wish)
Security
- Security Level: Visitors
- Type: External Captive Portal
- Captive Portal Profile > +
  - Name: Flame CWP
  - Authentication Type: RADIUS Authentication
  - IP or Hostname: cwp.flameanalytics.com
  - URL: provided by Flame
  - Port: 443
  - Use HTTPS: checked
  - Redirect URL: provided by Flame
- Primary Server > +
  - Server Type: RADIUS
  - Name: Flame RADIUS
  - IP Address/FQDN: rad01.flameanalytics.com
  - Shared Key and Retype Key: provided by Flame
- Advanced Settings
  - Reauth Interval: 24 hrs. (or whatever you wish)
  - Accounting: Use authentication servers
  - Accounting interval: 10
Access
- Access rules: Role-based
- Role > + Add Role > PreAuth
- Access Rules For PreAuth
  - Deny any to all destinations
  - Facebook(if required):
    - Allow any to domain akamaihd.net
    - Allow any to domain atdmt.com
    - Allow any to domain doubleclick.net
    - Allow any to domain facebook.com
    - Allow any to domain facebook.net
    - Allow any to domain fbcdn.net
    - Allow any to domain fbsbx.com
  - Twitter(if required):
    - Allow any to domain abs.twitter.com
    - Allow any to domain twimg.com
    - Allow any to domain twitter.com
- Assign Pre-Authentication Role: PreAuth

2. Upload certificate

Organization > Certificates > +
- Name: securelogin.flameanalytics.com
- Type: Server Certificate
- Format: PEM
- Certificate File: provided by Flame (CRT + CA + KEY)
Devices > Config > Security > Certificate Usage:
- Captive Portal: securelogin.flameanalytics.com