IMPORTANT: You need firmware version 4.10 or above to continue.
Log in to the UAG web interface at http://172.16.0.1 (default IP) - Username: admin, Password: 1234 (defaults).
On the left, click on Configuration and choose Object > AAA Server
Click Add and enter the following information:
Name: guestwifi
Authentication Server Settings
----------------------------------------------
- Server Address: *insert radius_server here*
- Authentication Port: 1812
- Backup Server Address: *insert radius_server2 here*
- Backup Authentication Port: 1812
- Key: *insert radius_secret here*
Accounting Server Settings
----------------------------------------------
- Server Address: *insert radius_server here*
- Accounting Port: 1813
- Backup Server Address: *insert radius_server2 here*
- Backup Accounting Port: 1813
- Key: *insert radius_secret here*
- Enable Accounting Interim update: Ticked
- Interim Interval: 3 minutes
Click OK to Save
Next, go to Object > Auth Method on the left and then click on Edit on the default item in the list.
Click on the first entry in the Method List and change it to group guestwifi
Click OK to save.
Next, click on Web Authentication on the left and configure with the following details:
Type: Web Portal
Select External Web Portal and enter:
- Login URL: *insert access_url here*
- Logout URL: *insert access_url here*
- Welcome URL: *insert redirect_url here*
- Error URL: *insert access_url here*?res=failed
Click Apply to Save
Now, click on the Walled Garden tab then tick the box to Enable Walled Garden
Click on the Domain IP/Base sub-tab and click Add. You will need to add the list of walled garden entries below one by one, clicking OK and Add each time:
*.*insert access_domain here*
*.venuewifi.com
*.openweathermap.org
*.cloudfront.net
*.stripe.com
If you wish to support social network logins, you also need to add the domains below for each network you plan to support:
*.facebook.com *.fbcdn.net *.akamaihd.net *.facebook.net |
*.twitter.com *.twimg.com |
*.linkedin.com *.licdn.net *.licdn.com |
*.instagram.com |
For example:
- Name: enter anything you wish
- Type: Domain
- Domain Name: *.*insert access_domain here*
Once finished, you should have all entries listed.
Next, under Object on the left, choose AP Profile and click on the SSID tab.
Click on Add and configure with the following settings:
- Profile Name: guestwifi
- SSID: Guest WiFi (or whatever you wish)
- VLAN Support: Off
- Outgoing Interface: lan2
Click OK to Save
Next, go back to the Radio tab and click on Add. Configure with the below settings:
- Activate: Ticked
- Profile Name: guestwifi
- 802.11 Band: 2.4G
Under BSSID Settings, click on the first item in the list and choose guestwifi
Click OK to Save and click on Add again to add another radio profile:
- Activate: Ticked
- Profile Name: guestwifi2
- 802.11 Band: 5G
Under MBSSID Settings, click on the first item in the list and choose guestwifi
Click OK to Save
Finally, under Wireless > AP Management on the left and click on the first item in the list and Edit
Configure with the below settings:
- Radio 1 Profile: guestwifi
- Radio 2 Profile: guestwifi2
Click OK to Save