Logging in
Log in to your Alcatel-Lucent (Master) IAP.
Network
Under Network at the top left, click New.
Configure with:
| Name (SSID): | Guest WiFi (or whatever you wish) |
| Primary usage: | Guest |
Click Next and configure with:
| Client IP assignment: | Virtual Controller managed |
| Client VLAN assignment: | Default (unless you have a custom VLAN set up) |
Click Next and configure with:
| Splash page type: | External |
| Captive portal profile: | Click the dropdown and choose New. Configure with: |
| Name: | guestwifi |
| Type: | Radius Authentication |
| IP or hostname: | *insert access_domain here* |
| URL: | /access/?iapmac=<ap-mac> (i.e. /access/?iapmac=00-0B-86-6E-C5-F8) |
| Port: | 80 |
| Use https: | Disabled |
| Captive portal failure: | Deny internet |
| Automatic URL whitelisting: | Disabled |
| Redirect URL: | *insert redirect_url here* |
Click OK to save.
Configure Auth server 1: Click the dropdown and choose New. Configure with:
| Type: | RADIUS |
| Name: | guestwifi1 |
| IP address: | *insert radius_server_ip here* |
| Auth port: | 1812 |
| Acct port: | 1813 |
| Shared key: | *insert radius_secret here* |
| Retype key: | as above |
Click OK to save.
Configure Auth server 2: Click the dropdown and choose New. Configure with:
| Type: | RADIUS |
| Name: | guestwifi2 |
| IP address: | *insert radius_server2_ip here* |
| Auth port: | 1812 |
| Acct port: | 1813 |
| Shared key: | *insert radius_secret here* |
| Retype key: | as above |
Click OK to save.
Additional settings:
| Reauth interval: | 24 hrs |
| Accounting: | Enabled |
| Accounting mode: | Authentication |
| Accounting interval: | 3 min |
| Blacklisting: | Disabled |
| Walled garden: | Click the link "Blacklist: 0 Whitelist: 0" and you will see the below screen: Under Whitelist Click New and add the domains one by one until all are in the list. Please refer to this list. |
Press OK when all the domains have been added, to save.
Click Next and configure with:
| Access Rules: | Role-based |
Under Roles click New and enter Preauth as the name
Under Access Rules for Preauth click New and add the following rule:
| Rule type: | Access control |
| Service: | Network - any |
| Action: | Allow |
| Destination: | to domain name |
| Domain name: | Please refer to this list. Add all domains as per above. |
Click OK to save.
Assign pre-authentication role: select Preauth
Click Finish to complete the set up.
Configuration Complete
The configuration is now complete.