What you'll need
- Admin access to Aruba Central
- Your MyWiFi RADIUS server IP, auth/accounting ports, and shared secret (from your MyWiFi location settings) — RADIUS and WISPr are the standard protocols your hardware uses to ask MyWiFi whether a guest may go online
- The MAC address of the access point(s) you're connecting
- A list of every domain your splash page (the branded login page guests see after joining your WiFi) needs — portal domain plus any social login providers you use
Steps
- In Aruba Central, go to Access Points > WLANs > Add SSID. Under Security, set Security Level to "Visitors" and Type to "External Captive Portal".
- Click the + button to create a new captive portal profile — captive portal is the mini-browser window a phone opens automatically when it joins WiFi. Set Type to "RADIUS Authentication", enter MyWiFi's portal hostname and URL path, turn on HTTPS, enable WISPr, leave Server Offload off, and set Captive Portal Failure to Deny Internet.
- Add a RADIUS server entry pointing to MyWiFi's RADIUS IP, auth port, accounting port, and shared secret.
- Under Advanced Settings, add MyWiFi's domain(s) plus any social login provider domains to the Allowlist — Aruba's name for the walled garden, the small list of domains a guest can reach before logging in so the splash page and login providers load.
- Create a pre-authentication role with an ACL rule permitting traffic to every walled garden entry from step 4, then turn on "Assign Pre-Authentication Role" and select it — guests need this role to reach the splash page before they've logged in.
- In the MyWiFi dashboard, go to Devices and click Add Device.
- Select the Location, name the device, and under Select Your Hardware choose Aruba Central.
- Enter your Aruba connection details as prompted, including the AP's MAC address, and save.
Best practice: The walled garden entries in step 4 and the pre-authentication role's ACL rules in step 5 are two separate settings that both have to be complete — missing either one is the most common cause of a blank or broken splash page. Double-check that every domain your splash page actually loads, including social login providers, is covered by both.
Comments
Please sign in to leave a comment.