ExtremeCloudIQ Aerohive Configuration Guide

The following instructions outline how to setup a Aerohive network for the Smart WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that your Aerohive access points are already operational on a live network. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform per the hardware manufacturers specifications.

1. Log into your Extreme Cloud IQ dashboard
2. Click Configure > Network Policies > Edit your Network Policy
3. Select the Wireless networks tab and click the blue ADD button, select Guest Access Network.
   • SSID Name: SmartWiFi (Or whatever you wish)
   • SSID Broadcast Name: Smart WiFi (Or whatever you wish)
   • Unsecured (Open) Network- Select Guests can access the network without logging in.
   • Press Save and then close.
4. Click the SSID just created to edit the Wireless Network configuration page.
5. Under the Usage SSID Authentication tab configure with the following:
   1. Enable Captive Web Portal: ON
      • User Auth on Captive Web Portal: Checked
      • Authentication Type: Redirect to External URL for Authentication
   2. Default Captive Web Portal: Click ADD and configure with
      1. Name: Smart WiFi( Or whatever you wish)
      2. Login URL: This will be provided to you
      3. Password Encryption: UAM with Shared Secret
      4. Shared Secret: hotspot
      5. Authentication Method: CHAP
      6. Success Page: OFF
      7. Redirect clients after a successful login attempt: Checked
         • To a specified URL:This will be provided to you
      8. Failure Page: OFF
      9. Walled Garden: Please add all the Default walled garden entries.
      10. Click Save.
   3. Under Authentication Settings > Authenticate via Radius Server click the blue + to add a new Default RADIUS Server Group
      1. Radius Server Group Name: SmartWiFi (or whatever you wish)
      2. Select the External Radius Server tab and click the blue + to add a new radius server.
         • Name: SmartWiFi1
         • Hostname: This will be provided to you
         • Authentication checked. Port 1812
         • Accounting checked. Port 1813
         • Shared Secret: This will be provided to you
         • Click Save external Radius
      3. Click the blue + to add another radius server.
         • Name: SmartWiFi2
         • Hostname: This will be provided to you
         • Authentication checked. Port 1812
         • Accounting checked. Port 1813
         • Shared Secret: This will be provided to you
         • Click Save external Radius
      4. Check SmartWiFi1 and SmartWiFi2 and click Save Radius.
   4. Click Save.
6. Click the Additional Settings tab.
   1. Click Supplemental CLI in the menu to the left.
   2. Toggle Supplemental CLI ON.
   3. Assign a name for the CLI setting
   4. Under CLI commands paste the command below.

      aaa attribute NAS-Identifier <This will be provided to you>

7. Click the Deploy Policy tab.
   • Check the APs intended to broadcast the Smart WiFi signal and click Upload.
   • Check Update Network Policy and select Complete Configuration Update and press Upload.
     

     To ensure the supplemental CLI is applied to the network, you will need to perform Complete Configuration Updates when making changes to this Network Policy moving forward to avoid an interruption of Guest WiFi services.