Skip to main content
All CollectionsHotspot Setup GuideAruba (HPE)
Aruba Instant (IAP) Setup Guide
Aruba Instant (IAP) Setup Guide
L
Written by Lawrence Soong
Updated over a week ago

Information required for FansWiFi Manager

  • Mac Addresses of the APs

Tested Model and Firmware Version

  • Model: IAP-105

  • Firmware Version: 6.4.4.4-4.2.3.2_54910

Setting on Aruba IAP

Step 1: Configure the Aruba Instant (IAP)

  • Access the Aruba Instant (IAP) by opening a Web Browser

  • Under Networks, click New to start the configuration in a popup window

Screen Shot 2018-07-16 at 1.19.25 PM.png

  • Under WLAN Settings, configure with below settings

    • i. Name: FansWiFi Free WiFi (or whatever SSID you want)

    • ii. Primary usage: Guest

  • Click Next to save configuration and proceed to the next step

Screen Shot 2018-07-16 at 1.43.18 PM.png

  • Under VLAN, configure with below settings:

    • i. Client IP assignment: Network assigned

    • ii. Client VLAN assignment: Static

    • iii. VLAN ID: 1

  • Click Next to save configuration and proceed to the next step

Screen Shot 2018-07-16 at 1.25.00 PM.png

  • Under Security, configure Splash page type as External

Screen Shot 2018-07-16 at 3.11.35 PM.png

  • Under Captive portal profile, click New to set up the captive portal

Screen Shot 2018-07-16 at 3.14.32 PM.png

Screen Shot 2018-12-10 at 4.52.52 PM.png

  • Then, under Auth server 1, click New to set up radius server

Screen Shot 2018-07-16 at 3.19.31 PM.png

  • A setup box will appear, then configure with the below settings

    • First Server

      • i. Server type: RADIUS

      • ii. Name: FansWiFi-rad1

      • iii. IP address: 103.6.85.240

      • iv. Auth port: 1812

      • v. Acct port: 1813

      • vi. Shared key: social123

      • vii. Retype key: social123

  • Click OK to save configuration

Screen Shot 2018-07-16 at 2.48.39 PM.png

  • After configuring the radius server, configure the remaining security configurations with below settings

    • i. Accounting: Use authentication servers

    • ii. Accounting mode: Authentication

    • iii. Accounting interval: 3 min.

    • iv. Blacklisting: Disabled

  • Click Next to save configuration and proceed to the next step

  • Under Access, Select Role-based and click New under roles to create a new role

  • Enter FansWiFi_Preauth as the name of the pre-authentication role

Screen Shot 2018-07-16 at 1.49.09 PM.png

  • Click New under Access Rules to create new access controls and a popup setup box will appear

  • Configure with below settings

    • i. Rule type: Access control

    • ii. Service: Network - any

    • iii. Action: Allow

    • iv. Destination: to domain name

    • v. Domain name: (Insert domain name here)

  • Click OK to save configuration for each domain name

Screen Shot 2018-07-16 at 1.51.07 PM.png

Walled Garden List (required)

Screen Shot 2018-07-16 at 1.51.50 PM.png

  • Finally, set Assign pre-authentication role as FansWiFi_Preauth and click Finish to save all configurations

Step 2: Add XML API Server (Optional, for XML API method ONLY)

  • a. Navigate to More > Services

Screen Shot 2018-12-21 at 4.27.40 PM.png

  • b. In Services, navigate to Network Integration

  • c. Under XML API Server, click New and configure with below settings:

    • Name: (Configure with either of the following IP Address)

      • i. 52.220.226.90

      • ii. 52.220.206.125

      • iii. 52.77.30.253

      • iv. 52.220.219.128

      • v. 52.220.215.219

      • vi. 52.220.208.185

    • Subnet: (Same as Name)

    • Mask: 255.255.255.0

    • Passphrase: aruba123

    • Retype: aruba123

  • d. Click OK to add new XML API Server

Screen Shot 2018-12-21 at 4.28.23 PM.png
Screen Shot 2018-12-21 at 4.29.20 PM.png

  • e. Click OK to save configuration

Screen Shot 2018-12-21 at 4.29.38 PM.png

Step 3: Configure Aruba IAP Address to FansWiFi Admin Panel (Optional, for XML API method ONLY)

*** Please send this information to your FansWiFi account manager

(required for Advanced Login Method (e.g. WeChat or WhatsApp), you may skip this step if there is no Advanced Login Method Enabled)

FansWiFi Admin Panel (Setting > Venue Setting)

2017-09-11_18h42_35.png

  1. Send below information to FansWiFi

    • Public IP Addresses / Domain Name of Mobility Controller

    • Radius CoA Port: 3799

2017-09-11_18h44_18.png

Exceptional Case: Controller behinds Router / Firewall

If the Controller is behind Router / Firewall, it is not directly accessible via FansWiFi Radius Server via Internet. In this case, you need to configure port forwarding on your Router / Firewall to forward the port to the Controller.

2017-09-11_18h44_46.png

Please see below example:

Assume the Public IP of the Router is 1.1.1.1 in this example

  1. Configure Port Forwarding to forward Router’s 50000 Port to Controller’s CoA Port (Default: 3799)

    • Inbound port: 50000 (You can replace any port you want in your setup)

    • Destination IP: 192.168.1.100 (Controller's IP in your network)

    • Destination Port: 3799

2. Send below information to FansWiFi

    • Public IP Addresses of Router: 1.1.1.1 or Domain Name (URL)

    • Radius CoA Port: 50000 (You can replace any port you want in your setup)

Setting in FansWiFi Admin Panel

2017-09-11_18h45_51.png

Step 4: Add AP to FansWiFi Admin Panel

  • Login to FansWiFi Admin Panel

  • Click Settings -> Hotspots -> Create

  • Configure with following settings:

    • Venue: Select the venue of where your Access Point locates

    • Hotspot Name: Name each Access Point to make it identifiable

    • AP Type: Select “Aruba Instant AP (IAP)”

    • Mac Address: Input unique MAC Address of each Access Point in your venue

  • Click Create

FAQ

1. How to deauthorize wifi user to bring user back to the login page after login?

  • During testing, you may want to try different login methods.

  • But after user authorized in any login method, captive portal will not be shown again before the expiry of session time.

  • If you may want to bring the user back to the captive portal page for testing different login methods, you will need to unauthorize the WiFi user.

WiFi User Logout trigger by:

WiFi User's Device

(usually, access a logout url on browser)

Controller Web Admin Interface

Logout URL for redirect method: https://securelogin.arubanetworks.com/auth/logout.html

Or API

Available

Last Testing: 10-12-2018

Available

Last Testing: 10-12-2018

WiFi User Logout trigger by:

WiFi User's device

worddav5eb45854b6271ed4cebdf7ccc3cc110f.png

WiFi User Logout trigger by:

Controller

  • Click on the wifi user device you want to logout

screencapture-172-16-0-135-4343-2018-12-10-17_15_06.png

  • Click on the 'x' button on the right hand side of the access point

Screen Shot 2018-12-10 at 5.15.37 PM.png

  • Confirm by clicking on Disconnect Now

Screen Shot 2018-12-10 at 5.16.01 PM.png
Did this answer your question?