Skip to main content
All CollectionsHotspot Setup GuideAruba (HPE)
Aruba Networking Central Setup Guide
Aruba Networking Central Setup Guide
L
Written by Lawrence Soong
Updated over a week ago

Information required for FansWiFi Manager

  • Mac Addresses of the APs

Tested Model and Firmware Version

  • AP Firmware Version: 8.10.0.6_86193

  • Cloud-hosted on HPE GreenLake

Setting on Aruba Networking Central

Step 0: Add a New Access Point

Please refer to the following documentation:

https://www.arubanetworks.com/techdocs/central/latest/content/nms/access-points/get-started/iap_get_started.htm

Step 1: Create SSID

  • a. Login to Aruba HPE GreenLake

    • Select Home on the top menu

    • Click Launch on Aruba Central application

  • b. Click Global on the top left menu

  • c. Select a Group that you are using for configuration (e.g. default)

  • d. Select Devices on the left menu

  • e. Select Access Points on the top menu, then click Config on the top right menu

  • f. Select WLANs on the top sub-menu, then Click Add SSID

  • g. For step 1 (General), Configure the following settings

    • Name (SSID): <ssid-name-you-prefer>

  • h. Click Next

Step 2: Captive Portal Configuration

  • a. For step 2 (VLANs), remain the settings unchanged and click Next

  • b. For step 3 (Security), configure the following settings:

    • Security Level: Visitors

    • Type: External Captive Portal

  • c. From the row Captive Portal Profile, press "+" to create a new profile

  • d. Configure the following setting after creating the profile

    • Captive Portal Profile: Name of portal that you created (e.g. FansWiFi Portal)

Step 3: Radius Configuration

  • a. From the row Primary Server, press "+" to create a new server

    • Server Type: RADIUS

    • Name: <server-name-you-prefer> (e.g. FansWiFi_Radius)

    • IP Address/FQDN: 103.6.85.240

    • Shared Key: social123

    • Retype Key: social123

    • Auth Port: 1812

    • Accounting Port: 1813

    • Service Type Framed User: MAC/Captive Portal

    • Click OK

  • b. Configure the following settings

    • Primary Server: Name of server that you created (e.g. FansWiFi_Radius)

    • Key Management: Open

  • c. Goto Advanced Settings > Accounting and config the following settings:

    • Accounting: Use authentication servers

    • Accounting Interval: 4 min

Step 4: Walled Garden

  • a. Goto Advanced Settings > Walled Garden

  • b. From Allowlist, Click Add to create a new allowlist

  • c. Configure the following settings:

    • Domain: Enter one of domains from the following Walled Garden List

    • Click OK

Repeat (b)(c) until All domains from Walled Garden List are included in Allowlist

  • d. Click Next

Walled Garden List (required)

  1. fanswifi.com

i. Walled Garden List (Optional, you may skip this if there is no Facebook Login Enabled)

  1. facebook.com

  2. facebook.net

  3. fbcdn.net

  4. fbcdn.com

  5. akamaihd.net

  6. www.google.com

  7. doubleclick.net

  8. www.google.com.hk (Local Google URL of your Country / Region)

    1. Example:

      1. EU: www.google.eu

      2. UK: www.google.co.uk

      3. Hong Kong: www.google.com.hk

      4. Japan: www.google.co.jp

      5. Taiwan: www.google.com.tw

      6. Thailand: www.google.co.th

      7. Malaysia: www.google.com.my

      8. Myanmar: www.google.com.mm

ii. Walled Garden List (Optional, you may skip this if there is no Weibo Login Enabled)

  1. weibo.com

  2. weibo.cn

  3. sinaapp.com

  4. sina.com.cn

  5. sinajs.cn

iii. Walled Garden List (Optional, you may skip this if there is no Instagram Login Enabled)

  1. instagram.com

  2. akamaihd.net

  3. cdninstagram.com

vi. Twitter Login (Optional, you may skip this if there is no Twitter Login Enabled)

  1. twitter.com

  2. twimg.com

vi. LINE Login (Optional, you may skip this if there is no LINE Login Enabled)

  1. line.me

  2. line-scdn.net

vi. PayPal Login (Optional, you may skip this if there is no PayPal Login Enabled)

  1. paypal.com

  2. paypalobjects.com

  3. www.google-analytics.com

v. Video Login (Optional, you may skip this if there is no Video Login Enabled)

  1. akamaized.net

  2. akamaihd.net

  3. ssl.google-analytics.com

    1. scorecardresearch.com

    2. vimeocdn.com

    3. vimeo.com

Step 5: Role Based Access

  • a. For step 4 (Access), Configure the following Settings

    • Access Roles: Role Based

  • b. Click Add Role to create Role

  • c. Configure the following settings:

    • Role: <role-name-you-prefer> (e.g. PreAuth)

  • d. Select the Role that you created

  • e. From the rule "Allow any to all destinations", click the Edit Logo

  • f. Convert to the following settings:

    • Action: Deny

    • Click OK

  • g. Then, Click Add Rule

  • h. Configure the following settings:

    • Rule Type: Access Control

    • Service: Network

    • Any

    • Action: Allow

    • Destination: To a Domain Name

    • Domain Name: Enter one of domains from the following Walled Garden List

    • Click OK

Repeat (g)(h) until All domains from Walled Garden List are included in the Rule

Make sure the Rule "Deny any to all destinations" is placed on the bottom

  • i. Configure the following settings:

    • Assign Pre-Authentication Role: Enable

    • Select Name of server that you created (e.g. PreAuth)

    • Click Next to continue

  • j. For step 5 (Summary), click Finish on the right bottom

Step 6: Add AP to FansWiFi Admin Panel

  • Login to FansWiFi Admin Panel

  • Click Settings -> Hotspots -> Create

  • Configure with following settings:

    • Venue: Select the venue of where your Access Point locates

    • Hotspot Name: Name each Access Point to make it identifiable

    • AP Type: Select “Aruba Instant AP (IAP)”

    • Mac Address: Input unique MAC Address of each Access Point in your venue

  • Click Create

Did this answer your question?