Aerohive Networks devices and Cloud4Wi



This guide shows how to configure an Aerohive Networks Access Point in order to use it as a HotSpot with Cloud4Wi.

Please note that the images contained in this article may contain outdated configuration data. Therefore, please check the data contained in the paragraph "Parameters for the Solution" at the bottom of the page, as they are certainly up to date.


This article applies to the following models:

  • AP121
  • AP130
  • AP141
  • AP230
  • AP330
  • AP350
  • AP370
  • AP390

In order to correctly integrate an Aerohive Networks Access Point with the Solution, it is necessary that:

  • the device is connected to the Internet
  • WAN and LAN interfaces are correctly configured

The configuration procedure has been performed and tested.
We recommend you update the device to the most recent firmware version available.

Accessing the AP

Please access the device through the web interface.

Create new Network Policy

In order to create a new configuration, it is necessary to access the HiveManager web interface, select the Configuration tab and then click New Network Policy.

You are redirected to the Configure Network Policy section. Here you have to create a new SSID.

Please configure the SSID and the SSID Access Security as below. Don't forget to click Advanced, set the Roaming Cache Ageout to 1 and then click Save. This ensures that if the person roams away they get the splash page again quickly.

After that, please select the SSID previously created and then click OK.



Captive Portal configuration

Please create the Captive Portal configuration by clicking <CWP>.

Then configure this part as the picture below:

  • Registration Type: External Authentication
  • Authentication Method: CHAP
  • Login URL: (please check Parameters for the Solution paragraph at the end of this page)
  • Password Encryption: UAM Basic
  • Captive Web Portal Success Page Settings: (please check Parameters for the Solution paragraph at the end of this page)
  • Captive Web Portal Failure Page Settings: (please check Parameters for the Solution paragraph at the end of this page)


Walled Garden

In the Walled Garden section you can configure the walled garden with a range of IP addresses that can be visited by end-users even without being authenticated. You can add an address or a range of addresses by clicking New as illustrated in the picture below. Please ensure you uncheck the "Enable HTTPS". 

You can set a single IP address or a range (by configuring the appropriate subnet mask). You may also specify a host name such as *

Note: If domain names that are resolvable to multiple IP addresses are used in the walled garden, enable the DNS ALG service in the Additional Settings > Service Settings > ALG Services section of the network policy. 

You can learn more about that by reading the following articles:

RADIUS server configuration

Please enter the RADIUS server section, by clicking <RADIUS Settings>:

Enter RADIUS server data and then click Apply.
Please note that the following image indicates the configuration of a RADIUS server, but you can add a secondary RADIUS server by clicking the  button.
Please configure the fields as indicated in the Parameters for the Solution paragraph.


Once configured RADIUS server and Captive portal settings, you have to complete this procedure by saving this configuration and modifying the text under the label Optional Settings (not supported by RADIUS Proxy), as indicated below:

Then click Add/Remove and create a new profile:


Please save the Network Policy configuration just created, by clicking Save.


Load configuration on the device

Once the procedure is finished, please go to the Monitor section and load the configuration to the appropriate device, by clicking Modify.

Please assign the Network Policy that you previously created and then click Save.

Please select once again the device and then click Update... > Upload and Activate configuration. After that, please click Upload.

Once the uploading of the configuration to the device is completed, the device can properly work with Cloud4Wi.

Entering the device to the Control Panel

For Aerohive devices, the Control Panel requires only the MAC address. The Identifier field is not required.
In order to add a new hotspot to the system, please see How to add a Hotspot
The MAC address is printed on the Access Point, and you can either find it in the Monitor section of the web interface and then clicking Utilities > Status > Interface: that's the MAC address associated to the "Mgt0" or "Eth0" interface.


Currently (referring to the tested firmware version) Aerohive Networks devices do not support the "logout" feature. For this reason you will not find any Logout link on any Splash Portal loaded through these devices.

Parameters for the Solution

The parameters to integrate the device with the Solution are the following:

Login URL:
Captive Web Portal Success Page Settings: Use simple URL address >
Captive Web Portal Failure Page Settings: Use simple URL address >


Radius Server
Primary Server IP:
Secondary Server IP:
Shared Secret: (it will be communicated by Cloud4Wi)

Please note that it is necessary to enter the Splash Portal URL exactly as it is written above.
If you enter the Splash Portal URL in different formats (e.g., then the redirection to the Splash Portal will fail and the end-user will not be able to see the Splash Portal.

If these parameters change in the future, we will promptly inform you about new values.

Have more questions? Submit a request