What you'll need
- Admin access to Aruba Central
- Your MyWiFi RADIUS server IP, auth/accounting ports, and shared secret (from your MyWiFi location settings)
- The MAC address of the access point(s) you're connecting
- A list of every domain your splash page needs — portal domain plus any social login providers you use
Steps
- In Aruba Central, go to Access Points > WLANs > Add SSID. Under Security, set Security Level to "Visitors" and Type to "External Captive Portal".
- Click the + button to create a new captive portal profile: set Type to "RADIUS Authentication", enter MyWiFi's portal hostname and URL path, turn on HTTPS, enable WISPr, leave Server Offload off, and set Captive Portal Failure to Deny Internet.
- Add a RADIUS server entry pointing to MyWiFi's RADIUS IP, auth port, accounting port, and shared secret.
- Under Advanced Settings, add MyWiFi's domain(s) plus any social login provider domains to the Allowlist (walled garden).
- Create a pre-authentication role with an ACL rule permitting traffic to every walled garden entry from step 4, then turn on "Assign Pre-Authentication Role" and select it — guests need this role to reach the splash page before they've logged in.
- In the MyWiFi dashboard, go to Devices and click Add Device.
- Select the Location, name the device, and under Select Your Hardware choose Aruba Central.
- Enter your Aruba connection details as prompted, including the AP's MAC address, and save.
Best practice: The walled garden entries in step 4 and the pre-authentication role's ACL rules in step 5 are two separate settings that both have to be complete — missing either one is the most common cause of a blank or broken splash page. Double-check that every domain your splash page actually loads, including social login providers, is covered by both.
Comments
Please sign in to leave a comment.