Open a web browser and log in to your HP MSM controller web interface
Click on "Authentication" on the top menu
Select "RADIUS Profiles" on the top sub menu and then click "Add New Profile"
On the left menu, under Network Tree, click "VSCs" and then click "Add New VSC Profile". Set the correct settings:
Under Global:
Click on Save.
Enter the following information:
- Profile Name: guestwifi
- Authentication port: 1812
- Accounting port: 1813
- Authentication method: PAP
Under Primary RADIUS server, enter: - Server address: *insert radius_server here*
- Secret: *insert radius_secret here*
- Confirm secret: As above
Under Secondary RADIUS server, enter:
- Server address: *insert radius_server2 here*
- Secret: *insert radius_secret here*
- Confirm secret: As above
- Click on Save
On the left menu, under Network Tree, click "VSCs" and then click "Add New VSC Profile". Set the correct settings:
Under Global:
- Profile Name: Free WiFi
- Use Controller for: Tick both Authentication and Access control
Under Access Control: - Present session and welcome page: Ticked
Under Virtual AP: - Name (SSID): Free WiFi (or whatever you want)
- Broadcast name (SSID): Ticked
Under HTML-based user logins: - HTML-based user logins: Ticked
- Authentication: Remote
- RADIUS: guestwifi
- RADIUS accounting: Ticked; choose guestwifi
Under Location-aware: - Called-Station-Id content: macaddress
Under DHCP server: - DNS: 10.1.0.1
- Start: 10.1.0.2
- End: 10.1.0.254
- Gateway: 10.1.0.1
- Netmask: 255.255.255.0
- Subnet: 10.1.0.0
Click on Save.
Next, click on Public access at the top, and ensure that "Access Control" is ticked.
Click on Save.
Next, click on the "Web content" tab, and enter the following:
Support a local Welcome page: Unticked
Redirect users to the login page via: HTTP
Click on Save
Next, click on Attributes at the top, and then under Configure Attributes click on Add New Attribute
IMPORTANT: You will need to add the below attributes one by one until you have them all listed.
Name: ACCESS-LIST
Click on Save.
Next, click on the "Web content" tab, and enter the following:
Support a local Welcome page: Unticked
Redirect users to the login page via: HTTP
Click on Save
Next, click on Attributes at the top, and then under Configure Attributes click on Add New Attribute
IMPORTANT: You will need to add the below attributes one by one until you have them all listed.
Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,**insert access_domain here*,all
Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,*cloudfront.net,all
Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,*openweathermap.org,all
Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,*venuewifi.com,all
Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,*stripe.com,all
Name: LOGIN-URL
Value: *insert access_url here*?login_url=%l&hpapmac=%C&client_mac=%m
Name: WELCOME-URL
Value: *insert redirect_url here*
Name: USE-ACCESS-LIST
Value: guestwifi
If you wish to support social network logins, you also need to add the entries below for each network you plan to support
Facebook | Twitter |
|
|
LinkedIn | Instagram |
|
|