Supported devices: Cisco 3500 series Wireless controller with firmware 8.5.105.0z

1. Create a New WLAN

1. Navigate to WLANs > Create New > Go
2. Enter the following details:
   • Profile name: Social Wi-Fi
   • SSID: FREE_WIFI
3. Click Apply to save the changes

2. Configure DHCP server

1. Navigate to Controller > Internal DHCP Server > DHCP Scope > New
2. Enter the following:
   • Scope Name: DHCP_SocialWiFi
3. Click Apply
4. Select the created scope to configure it. Example configuration:
   
5. Click Apply to save the changes
6. Navigate to Controller > Advanced > DHCP
7. Enable the Enable DHCP Proxy option
8. Click Apply to save the changes
9. Navigate to Controller > Interfaces
10. Select the desired interface
11. In the Primary DHCP Server field under DHCP Information, enter:
    • Primary DHCP Server: 192.168.88.201
12. Click Apply to save the changes

3. Configure RADIUS

1. Navigate to Security > AAA > RADIUS > Authenticationand configure:
   • Auth Called Station ID Type: AP MAC Address
   • MAC Delimiter: Colon
2. Click apply
3. Click New and configure:
   • Server Address(Ipv4/Ipv6): 34.243.101.199
   • Shared Secret Format: ASCII
   • Shared Secret: <provided by Flame>
   • Confirm Shared Secret: <provided by Flame>
   • Port Number: 1812
   • Server Status: Enabled
4. Click Apply
5. Navigate to Security > AAA > RADIUS > Accounting and configure:
   • Auth Called Station ID Type: AP MAC Address
   • MAC Delimiter: Colon
6. Click Apply
7. Click Newand configure:
   • Server Address(IPv4/IPv6): 34.243.101.199
   • Shared Secret Format: ASCII
   • Shared Secret: <Provided by Flame>
   • Confirm Shared Secret: <provided by Flame>
   • Port Number: 1813
   • Server Status: Enabled
8. Click apply

4. Configure ACLs

1. Navigate to Security > AAA > Access Control Lists > Access Control Lists > New and configure:
   • Access Control List Name: PreAuthACL
   • ACL Type: IPv4
2. Click Apply
3. Edit the newly created ACL and select Add-Remove URL
4. Add cwp.flameanalytics.com y securelogin.flameanalytics.com in the URL String Name and click Add
5. If social login is enabled, add the following URLs:
   • Facebook
     • www.facebook.com
     • web.facebook.com
     • m.facebook.com
     • star.c10r.facebook.com
     • graph.facebook.com
     • connect.facebook.net
     • static.xx.fbcdn.net
     • s-static.ak.facebook.com
     • fbstatic-a.akamaihd.net
     • fbcdn-photos-a-a.akamaihd.net
   • Twitter
     • abs-0.twimg.com
     • abs.twimg.com
     • api.twitter.com
     • twimg.com
     • twitter.com
6. Navigate to Security > AAA > Access Control Lists > Access Control Lists > New and configure:
   • Access Control List Name: PostAuthACL
   • ACL Type: IPv4
7. Click Apply
8. Click en la ACL creada
9. Edit the newly created ACL and click Add New Rule:
   
10. Click Apply

5. Configure the captive portal

1. Navigate to Security > Web Auth > Web Auth Login Page and configure:
   • Web Authentication Type: External (Redirect to external server)
   • Redirect URL: <provided by Flame>
   • Login Success Page Type: None
   • External Webauth URL: <provided by Flame>
2. Click Apply
3. Navigate to Management > HTTP-HTTPS > Download SSL Certificate. Download the SSL certificate provided by Flame using the TFTP configuration details (also provided by Flame).
4. Click Apply and Save Configuration
5. Navigate to Controller >Interfaces > Virtual and configure:
   • DNS gateway hostname: securelogin.flameanalytics.com
6. Restart the controller:  Commands > Reboot > Reboot > Save and Reboot
7. Navigate to WLANs > WLANs and select the WLAN ID created earlier
8. Under the General tab Set the Interface/Interface Group(G) to the desired interface.
9. Under the Security tab configure:
   • Layer 2
     

• Layer 3

• AAA Servers
  • RADIUS Server Overwrite interface: Enabled
  • Authentication Servers: Enabled and select the previously configured server, the one with port 1812
  • Accounting Servers: Enabled and select the previously configured server, the one with port 1813
  • Interim Update: Disabled

1. Under Advanced tab:
   11. Click Save Configuration