HP MSM Controller Configuration
Open a web browser and log in to your HP MSM controller web interface.
Click "Authentication" on the top menu.
Select "RADIUS Profiles" on the top submenu and then click "Add New Profile".
Enter the following information:
| Profile Name | guestwifi |
| Authentication port | 1812 |
| Accounting port | 1813 |
| Authentication method | PAP |
Under Primary RADIUS server, enter:
| Server address | *insert radius_server here* |
| Secret | *insert radius_secret here* |
| Confirm secret | As above |
Under Secondary RADIUS server, enter:
| Server address | *insert radius_server2 here* |
| Secret | *insert radius_secret here* |
| Confirm secret | As above |
Click Save.
On the left menu, under Network Tree, click "VSCs" and then click "Add New VSC Profile". Set the correct settings:
Under Global:
| Profile Name | Free WiFi |
| Use Controller for | Enabled for both Authentication and Access control |
Under Access Control:
| Present session and welcome page | Enabled |
Under Virtual AP:
| Name (SSID) | Free WiFi (or whatever you want) |
| Broadcast name (SSID) | Enabled |
Under HTML-based user logins:
| HTML-based user logins | Enabled |
| Authentication | Remote |
| RADIUS | guestwifi |
| RADIUS accounting | Enabled; choose guestwifi |
Under Location-aware:
| Called-Station-Id content | macaddress |
Under DHCP server:
| DNS | 10.1.0.1 |
| Start | 10.1.0.2 |
| End | 10.1.0.254 |
| Gateway | 10.1.0.1 |
| Netmask | 255.255.255.0 |
| Subnet | 10.1.0.0 |
Click Save.
Next, click Public access at the top, and ensure that "Access Control" is enabled.
Click Save.
Next, click on the "Web content" tab, and enter the following:
| Support a local Welcome page | Disabled |
| Redirect users to the login page via | HTTP |
Click Save.
Next, click on Attributes at the top, and then under Configure Attributes click on Add New Attribute:
IMPORTANT: You will need to add the below attributes one by one until you have all required domains listed. Please refer to this list.
| Name | ACCESS-LIST |
| Value | guestwifi,ACCEPT,all,*insert domain here*,all |