Extreme Campus Controller Configuration Guide

The following instructions outline how to setup a Extreme Campus Controller for the Smart WiFi Platform.  This guide covers details such as configuring RADIUS, walled garden entries, and captive portals.  This guide assumes that access points are already operational on a live network. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform per the hardware manufacturers specifications.

1. Login to your Extreme Campus Controller
2. On the left click Configure> Networks > WLANs
3. Click Add (Or edit the desired WLAN)
   • Network Name: Smart WiFi(or whatever you wish)
   • SSID: Guest WiFi(or whatever you wish)
   • Status: Enabled
   • Auth Type: Open
   • Enable Captive Portal: Checked
   • Captive Portal Type: External
   • ECP URL: You will receive this
   • Click Walled Garden Rules
     • Click L3,L4 IP and Port Rules and click New
     • Please add all the Default walled garden entries using the settings

       action=allow, COS= None, Protocol= Any Protocol, IP/Subnet= FQDN, and Port= Any Port

       Example:
       

       If you’re a white label client and you have your own splash domain, be sure to include it in the walled garden.

   • Use HTTPS connection: Unchecked
   • Send Successful Login to: Custom URL
   • URL: You will receive this
   • MAC-based authentication(MBA): Unchecked
   • AAA Policy: Click the + icon to create a new policy.
     1. Name: Smart WiFi
     2. Authentication Protocol: CHAP
     3. NAS ID: You will receive this
     4. Called Station ID: Wired MAC Colon SSID
     5. Accounting Type: Start-Interim-Stop
     6. Accounting Start: No Delay
     7. RADIUS Authentication Servers: You will need to create two
        • • Server one
            1. Server Address:You will receive this
            2. Shared Secret: You will receive this
          • Server two
            1. Server Address: You will receive this
            2. Shared Secret: You will receive this
     8. RADIUS Accounting Servers: Use the drop down menu to select and add the RADIUS Authentication servers just created.
   • Default Auth Role: Enterprise User
   • Advanced- Check RADIUS Accounting
   • Click Save and assign the WLAN to the correct profile.

Troubleshooting Splash page

1. If your the splash page displays a hotspot deactivated message please ensure your AP MAC has been reported to support.
2. If the splash page fails to load please ensure the walled garden has been properly configured.
3. If the splash page fails to trigger at all check your VLAN settings. If the VLAN is bridged to AC you must add a layer 3 address for the controller.
4. If devices load the splash page properly but after pressing connect the splash page is loaded again please ensure the RADIUS secret was correct applied to both servers.
5. If guests can connect but no guest connection data is populated in the dashboard please ensure you’ve checked RADIUS Accounting under advanced options.