RADIUS (AAA) and hotspot integration

Here are the general parameters for integrating a device using RADIUS servers.

For more detailed information, find the integration article specific to your hardware, or contact support.

RADIUS (AAA) Servers

• Name: Provide a name for the authentication method (ex. MyWiFi RADIUS Auth)
• Type: Select RADIUS
• Auth Method: Set PAP
• Backup RADIUS: Check Enable Backup RADIUS support

First Server

• IP Address: radius1.wificloud.io  (35.174.133.59)
• Port: 1812
• Shared Secret: mywifi
• Confirm Secret: mywifi

Second Server

• IP Address: radius2.wificloud.io (52.4.206.21)
• Port: 1812
• Shared Secret: mywifi
• Confirm Secret: mywifi

Retry Policy

• Request Timeout: 3 seconds
• Max Number of Retries: 2 times
• Max Number of Consecutive Drop Packets: 1
• Reconnect Primary: 5 minutes

RADIUS Accounting Servers

• Name: Provide a name for the authentication method (ex. MyWiFi RADIUS Acc)
• Type: Select RADIUS Accounting
• Backup RADIUS: Check Enable Backup RADIUS support

First Server

• IP Address: radius1.wificloud.io (35.174.133.59)
• Port: 1813
• Shared Secret: mywifi
• Confirm Secret: mywifi

Second Server

• IP Address: radius2.wificloud.io (52.4.206.21)
• Port: 1813
• Shared Secret: mywifi
• Confirm Secret: mywifi

Retry Policy

• Request Timeout: 3 seconds
• Max Number of Retries: 2 times
• Max Number of Consecutive Drop Packets: 1
• Reconnect Primary: 5 minutes

HOTSPOT Settings

Hotspot service settings are located in the tab: Configure / Hotspot Services / Hotspot Services.  

Create a new record with the following details:

• Name: ex. MyWiFi Guest Portal

Redirection

• WISPr Smart Client Support: select Enabled
• Smart Client HTTP Secure: select HTTP
• Login Page: https://securewifilogin.com

User Session

• Session Timeout: Unchecked
• Grace Period: Unchecked

Authentication/Accounting Servers

• Authentication Server: Select Server entered as MyWiFi RADIUS Auth, selection Enable MAC authentication bypass (no redirection) leave turned off due to your needs
• Accounting Server: Select Server entered as MyWiFi RADIUS Acc and selection Send Interim-Update every enter 5 minutes
• Wireless Client Isolation: Leave both selections turned off according to your needs

Walled Garden / Domain Whitelist settings

The Walled Garden / Domain Whitelist settings, which are generally located in the hotspot settings, allow specific domains to be accessed before authentication -- generally, these are domains that need to be used as part of authentication.

All the domains individually are in the format of *.domain.com.

Here is the complete list of domains that need to be whitelisted:

NOTE: If you have a custom social portal URL, enter that URL in the first line, in place of *. -- otherwise your guests won't be able to connect to your campaign!

*.
*.mywifi.io
*.securewifilogin.com
*.cloudfront.net
fonts.gstatic.com
fonts.googleapis.com
*.linkedin.com
*.amazonaws.com
*.licdn.com
*.twitter.com
*.facebook.com
*.akadns.net
*.edgekey.net
*.edgesuite.net
*.akamaihd.net
*.akamaiedge.net
*.akamai.net
*.twimg.com
*.instagram.com
*.facebook.net
*.stripe.com
*.paypal.com
*.paypalobjects.com
*.twilio.com
*.vk.com