ArubaOS Configuration Guide

This document lays out the process for interfacing an Aruba controller, running at least version 8.6 with the SmartWiFiPlatform. This document does not review the process for setting up an Aruba controller out of the box.

1. 1. 1. Login to desired Aruba controller network
      2. Click on Configuration

      3. Click on WLANs in the menu to the left

         1. Create new WLAN by pressing the blue + button and configure with:
         2. Name(SSID): Smart WiFi (Or your choice)
         3. Primary Usage: Guest
         4. Forwarding Mode: Tunnel
         5. Click next and configure with:
         6. VLAN: 1 (or whatever you need)
         7. Click next and configure with:
         8. Captive Portal Type: ClearPass or other external Captive Portal
         9. Host Addressing: IPv4
         10. Host: You will receive this
         11. Page: /hotspotlogin.php
         12. Redirect URL: You will receive this
         13. Under auth servers click the blue + to create a new auth server and configure with:
             1. Server Type: RADIUS
             2. Name: Radius1
             3. IP Address: You will receive this
             4. Auth Port: 1812
             5. Accounting Port: 1813
             6. Shared Key: You will receive this
             7. Retype Key: You will receive this
             8. Timeout: 5
         14. Click the blue + under auth servers to create another auth server and configure with:
             1. Server Type: RADIUS
             2. Name: Radius2
             3. IP Address: You will receive this
             4. Auth Port: 1812
             5. Accounting Port: 1813
             6. Shared Key: You will receive this
             7. Retype Key: You will receive this
             8. Timeout: 5
         15. Press next and then finish
      4. Click pending changes and deploy the changes

      5. Click on Roles & Policies in the menu to the left

         • Click the Aliases tab
         • Edit the alias created from deploying the WLAN(It will use the SSID name)
         • Add the default wildcard walled garden entries

      6. Click the Authentication in the menu to the left

         • On the Auth Servers tab, click the server group created from deploying the WLAN(It will use the SSID name)
           • Edit Radius1
             • NASID: You will recieve this from us
             • Press submit
           • Edit Radius2
             • NASID: You will recieve this from us
             • Press submit

         • Click the AAA Profiles tab

         • Expand the AAA menu
         • Click on the one created from deploying the WLAN
         • Click RADIUS Accounting Server Group
           • Select the server group created from deploying the WLAN
           • Press submit

         • Click the L3 Authentication tab

         • Open the ‘Captive Portal Authentication’ menu
         • Click on the one for the WLAN created and configure with:
           1. Default Role: Guest
           2. Default Guest Role: Guest
           3. Redirect Pause: 0
           4. User Login: Enabled
           5. Guest Login: Disabled
           6. Logout popup window: Disabled
           7. Use HTTP for authentication: Enabled
           8. Login minimum wait: 1
           9. Logon maximum wait: 10
           10. Authentication Protocol: PAP
           11. Login Page: You will receive this
           12. Welcome Page: default
           13. Show Welcome Page: disabled
           14. Add Switch IP in redirection URL: disabled
           15. Adding APs MAC address in redirection URL: Enabled
           16. White List: Select the policy edited in step 5
           17. Redirect URL: You will receive this
           18. Submit
      7. Click pending changes and deploy the changes