IMPORTANT: You need firmware version 4.10 or above to continue.
Log in to the UAG web interface at http://172.16.0.1 (default IP) - Username: admin, Password: 1234 (defaults).
On the left, click on Configuration and choose Object > AAA Server
Click Add and enter the following information:
Name: guestwifi
Authentication Server Settings
----------------------------------------------
- Server Address: *insert radius_server here*
- Authentication Port: 1812
- Backup Server Address: *insert radius_server2 here*
- Backup Authentication Port: 1812
- Key: *insert radius_secret here*
Accounting Server Settings
----------------------------------------------
- Server Address: *insert radius_server here*
- Accounting Port: 1813
- Backup Server Address: *insert radius_server2 here*
- Backup Accounting Port: 1813
- Key: *insert radius_secret here*
- Enable Accounting Interim update: Ticked
- Interim Interval: 3 minutes
Click OK to Save
Next, go to Object > Auth Method on the left and then click on Edit on the default item in the list.
Click on the first entry in the Method List and change it to group guestwifi
Click OK to save.
Next, click on Web Authentication on the left and configure with the following details:
Type: Web Portal
Select External Web Portal and enter:
- Login URL: *insert access_url here*
- Logout URL: *insert access_url here*
- Welcome URL: *insert redirect_url here*
- Error URL: *insert access_url here*?res=failed
Click Apply to Save
Now, click on the Walled Garden tab then tick the box to Enable Walled Garden
Click on the Domain IP/Base sub-tab and click Add. You will need to add the required domains one by one, clicking OK and Add each time. Please refer to this list.
For example:
- Name: *insert domain here*
- Type: Domain
- Domain Name: *insert domain here*
Once finished, you should have all entries listed.
Next, under Object on the left, choose AP Profile and click on the SSID tab.
Click on Add and configure with the following settings:
- Profile Name: guestwifi
- SSID: Guest WiFi (or whatever you wish)
- VLAN Support: Off
- Outgoing Interface: lan2
Click OK to Save
Next, go back to the Radio tab and click on Add. Configure with the below settings:
- Activate: Ticked
- Profile Name: guestwifi
- 802.11 Band: 2.4G
Under BSSID Settings, click on the first item in the list and choose guestwifi
Click OK to Save and click on Add again to add another radio profile:
- Activate: Ticked
- Profile Name: guestwifi2
- 802.11 Band: 5G
Under MBSSID Settings, click on the first item in the list and choose guestwifi
Click OK to Save
Finally, under Wireless > AP Management on the left and click on the first item in the list and Edit
Configure with the below settings:
- Radio 1 Profile: guestwifi
- Radio 2 Profile: guestwifi2
Click OK to Save