ZyXEL UAG

  • Updated
IMPORTANT: You need firmware version 4.10 or above to continue. Earlier versions are not supported.

Logging in & AAA Server

Log in to the UAG web interface at http://172.16.0.1 (Default IP). Use the default credentials if they haven't been changed: Username: admin | Password: 1234.

On the left menu, click on Configuration and navigate to Object > AAA Server. Click Add and configure the server configuration layer with the following details:

Name guestwifi

Authentication Server Settings

Server Address *insert radius_server here*
Authentication Port 1812
Backup Server Address *insert radius_server2 here*
Backup Authentication Port 1812
Key *insert radius_secret here*

Accounting Server Settings

Server Address *insert radius_server here*
Accounting Port 1813
Backup Server Address *insert radius_server2 here*
Backup Accounting Port 1813
Key *insert radius_secret here*
Enable Accounting Interim update Ticked
Interim Interval 3 minutes

Click OK to Save. Next, go to Object > Auth Method on the left and then click Edit on the default item in the list. Change the first entry in the Method List to group guestwifi and click OK to save.

Web Authentication & Walled Garden

Click on Web Authentication on the left options tree. Set the Type to Web Portal, select External Web Portal, and apply the mapping paths below:

Login URL *insert access_url here*
Logout URL *insert access_url here*
Welcome URL *insert redirect_url here*
Error URL *insert access_url here*?res=failed

Click Apply to Save.

Now, switch over to the Walled Garden tab and tick the checkbox to Enable Walled Garden. Select the Domain IP/Base sub-tab and click Add. You will need to provision the required landing paths one by one, clicking OK and Add sequentially for each string entry. Please refer to this list for precise values (setting the entry configuration Type to Domain).

SSID & AP Profile Distribution

Under the left Object menu node, click AP Profile and select the SSID tab. Click Add and configure the baseline wireless profile layout:

Profile Name guestwifi
SSID Guest WiFi (or whatever you wish)
VLAN Support Off
Outgoing Interface lan2

Click OK to Save. Next, go back to the Radio tab, click Add, and deploy two standalone radio bands:

Radio 1 (2.4GHz Band)

Activate / Profile Name Activate: Ticked | Profile Name: guestwifi
802.11 Band 2.4G
BSSID Settings Select the first line item and assign it to guestwifi

Click OK to Save. Click Add again to build the secondary radio lane properties:

Radio 2 (5GHz Band)

Activate / Profile Name Activate: Ticked | Profile Name: guestwifi2
802.11 Band 5G
MBSSID Settings Select the first line item and assign it to guestwifi

Click OK to Save.

Finally, navigate to Wireless > AP Management on the left column tree, select the first system item in the list and click Edit. Map the radio profile distributions exactly as shown below:

Radio 1 Profile guestwifi
Radio 2 Profile guestwifi2

Click OK to Save.

Configuration Complete

The gateway and authentication path routing setup is now fully configured and active.

Share online:
Was this article helpful?
0 out of 0 found this helpful