IMPORTANT: You need firmware version 4.10 or above to continue.

Log in to the UAG web interface at http://172.16.0.1 (default IP) - Username: admin, Password: 1234 (defaults).

On the left, click on Configuration and choose Object > AAA Server

Click Add and enter the following information:

Name: guestwifi

Authentication Server Settings

----------------------------------------------

• Server Address: *insert radius_server here*
• Authentication Port: 1812
• Backup Server Address: *insert radius_server2 here*
• Backup Authentication Port: 1812
• Key: *insert radius_secret here*

Accounting Server Settings

----------------------------------------------

• Server Address: *insert radius_server here*
• Accounting Port: 1813
• Backup Server Address: *insert radius_server2 here*
• Backup Accounting Port: 1813
• Key: *insert radius_secret here*
• Enable Accounting Interim update: Ticked
• Interim Interval: 3 minutes

Click OK to Save

Next, go to Object > Auth Method on the left and then click on Edit on the default item in the list.

Click on the first entry in the Method List and change it to group guestwifi

Click OK to save.

Next, click on Web Authentication on the left and configure with the following details:

Type: Web Portal

Select External Web Portal and enter:

• Login URL: *insert access_url here*
• Logout URL: *insert access_url here*
• Welcome URL: *insert redirect_url here*
• Error URL: *insert access_url here*?res=failed

Click Apply to Save

Now, click on the Walled Garden tab then tick the box to Enable Walled Garden

Click on the Domain IP/Base sub-tab and click Add. You will need to add the list of walled garden entries below one by one, clicking OK and Add each time:

*.*insert access_domain here*

*.venuewifi.com

*.openweathermap.org

*.cloudfront.net

*.stripe.com

If you wish to support social network logins, you also need to add the domains below for each network you plan to support:

For example:

• Name: enter anything you wish
• Type: Domain
• Domain Name: *.*insert access_domain here*

Once finished, you should have all entries listed.

Next, under Object on the left, choose AP Profile and click on the SSID tab.

Click on Add and configure with the following settings:

• Profile Name: guestwifi
• SSID: Guest WiFi (or whatever you wish)
• VLAN Support: Off
• Outgoing Interface: lan2

Click OK to Save

Next, go back to the Radio tab and click on Add. Configure with the below settings:

• Activate: Ticked
• Profile Name: guestwifi
• 802.11 Band: 2.4G

Under BSSID Settings, click on the first item in the list and choose guestwifi

Click OK to Save and click on Add again to add another radio profile:

• Activate: Ticked
• Profile Name: guestwifi2
• 802.11 Band: 5G

Under MBSSID Settings, click on the first item in the list and choose guestwifi

Click OK to Save

Finally, under Wireless > AP Management on the left and click on the first item in the list and Edit

Configure with the below settings:

• Radio 1 Profile: guestwifi
• Radio 2 Profile: guestwifi2

Click OK to Save