Aerohive NG

Follow

Purpose

This guide shows how to configure the Aerohive NG dashboard and access point for Volare. Please note that the images in this article may contain outdated configuration data. Therefore, please check the paragraph "Parameters for the Solution" at the bottom of this page for the most up to date data.

Prerequisites

This article applies to the following models:

  • AP121
  • AP130
  • AP141
  • AP230
  • AP330
  • AP350
  • AP370
  • AP390

To correctly integrate an Aerohive access point with the Solution, make sure:

  • Access point is connected to the Internet
  • WAN and LAN interfaces are correctly configured

We recommend you update the device to the most recent firmware version available.

Accessing the access point

Access the device through the web interface.

Create new Network Policy

In order to create a new configuration, go to the HiveManager NG web interface, select the Configuration tab and then click Add Network Policy.

Assign policy name and click Next, this will save the policy and redirect you to the Wireless settings page.

Create a new SSID.

By clicking Enable Captive Web Portal, you can display a splash page and configure captive web portal options. Select Redirect to External URL for Authentication and then under Authentication Settings, define RADIUS server group. 

RADIUS server configuration

The Radius server needs to be defined and saved under IP object before the server can be assigned for authentication. Click on Configure → Common Objects → Basic → IP Objects/Host Names, here you can define the RADIUS server using IP address or Hostname.

Going back to Authentication Settings, you can choose from the drop down option previously defined IP address/Hostname and the port for the RADIUS server, for both authorization and accounting phases. You can configure the device to support a primary and a secondary RADIUS server.

Captive Portal configuration

Back in SSID Usage section, create and add a new Captive Web Portal Profile. Click on Default Captive Web Portal.

Then configure this part as the picture below:

  • Captive Web Portal: User Auth on Captive Web Portal “ON”
  • Registration Type: Redirect to External URL for Authentication
  • Login URL: (please check Parameters for the Solution paragraph at the end of this page)
  • Password Encryption: UAM Basic
  • Authentication Method: CHAP
  • Captive Web Portal Success Page Settings: (please check Parameters for the Solution paragraph at the end of this page)
  • Captive Web Portal Failure Page Settings: (please check Parameters for the Solution paragraph at the end of this page)

Walled garden

In the newly created Captive Web Portal profile, define the Walled Garden section. The IP address or Hostname need to be defined and saved under IP object, like the step when defining RADIUS server. Click on Configure → Common Objects → Basic → IP Objects/Host Names and define a range of IP addresses/Host Names that can be visited by end-users even without being authenticated.

Deploy Policy

Once the configuration procedure is finished, the final step is to push the policy to your devices. From the Deploy Policy page, which contains a table that, by default, shows all of the devices in your network.

 

Entering the device to the Admin Panel

For Aerohive devices, the Admin Panel requires only the MAC address. The Identifier field is not required. To add a new access point, please see How to add an access point.

The MAC address is printed on the access point, you can either find it in the Monitor section of the web interface and then click Utilities > Status > Interface: that's the MAC address associated to the "Mgt0" or "Eth0" interface.

Note: Currently (referring to the tested firmware version) Aerohive Networks devices do not support the "logout" feature. For this reason you will not find a Logout link on any Welcome Portals loaded through these devices.

Parameters for the Solution

The parameters to integrate the device with the Solution are the following:

Login URL: https://splashportal.cloud4wi.com/
Captive Web Portal Success Page Settings: Use simple URL address > https://splashportal.cloud4wi.com
Captive Web Portal Failure Page Settings: Use simple URL address > https://splashportal.cloud4wi.com/

Radius Server
Primary Server IP
: 54.247.117.188
Secondary Server IP: 79.125.111.180
Shared Secret: (it will be communicated by Cloud4Wi)

Please note that you must enter the Welcome Portal URL exactly as it is written above.

If you enter the Welcome Portal URL in a different format (e.g. https://splashportal.cloud4wi.com/c4wportal/mysplashportal), then the redirection will fail and the end-user will not be able to see the Welcome Portal.

If these parameters change in the future, we will promptly inform you of new values.

Have more questions? Submit a request

Comments