Purpose
This guide shows how to configure an MSM Hewlett Packard controller to work with the Cloud4Wi platform.
Please note that the images contained in this article may sometimes refer to older versions of Hewlett Packard interface. But the details included in “Parameters for the Solution” will always be up to date.
Prerequisites
Prior to using this guide, please make sure that your Hewlett Packard device is connected to the Internet.
Configuring the RADIUS profile
Log in to the web interface of the MSM controller by using a web browser.
Then click Authentication > Radius Profiles on the top menu, to see the list of the existing RADIUS profiles.
Usually, you need to create a new profile, so click the Add New Profile button.
You can find the data to enter here in the Parameters for the Solution" paragraph at the end of this page. This paragraph is always updated.
Profile name
- Profile name: cloud4wi
Settings
- Authentication port: (check RADIUS Authentication port in the "Parameters for the Solution" paragraph)
- Accounting port: (check RADIUS Accounting port in the "Parameters for the Solution" paragraph)
- Authentication method: PAP
Primary RADIUS server
- Server address: (check RADIUS server 1 in the "Parameters for the Solution" paragraph)
- Secret: (it will be communicated by Cloud4Wi)
- Confirm secret: (it will be communicated by Cloud4Wi)
Secondary RADIUS server
- Server address: (check RADIUS server 2 in the "Parameters for the Solution" paragraph)
- Secret: (it will be communicated by Cloud4Wi)
- Confirm secret: (it will be communicated by Cloud4Wi)
Then click Save at the bottom of the page.
Configuring the VSC
Please find Network Tree on the left menu and click VSCs. After that, click the Add New VSC Profile button. Set the correct settings:
Global
- Profile Name: (any name, "Cloud4Wi" in our pictures)
- Use Controller for: Authentication, Access control (both enabled)
Access Control
Please enable Present session and welcome page
Virtual AP
- Name (SSID): (any name you want for your SSID, "Cloud4Wi" in our pictures)
- Broadcast name (SSID): enabled
Under HTML-based user logins
- HTML-based user logins: enabled
- Authentication: Remote
- RADIUS: cloud4wi
- RADIUS accounting: enabled; choose "cloud4wi"
Location-aware:
Called-Station-Id content: macaddress
After configuring, please click Save at the bottom of the page.
Configuring Access control
Please click Public access > Access Control on the top menu and check if Access Control option is enabled.
Then tick the Add idle-timeout to RADIUS accounting session-time option, if not enabled.
Configuring Web content
Please click Web content on the top menu and ensure that the following data are set:
- Support a local Welcome page: disabled
- Redirect users to the login page via: HTTP
Below, there is the list of the files currently used by the device. Click on the file called "goodbye.asp", as you have to make a change to the content.
Please add the following text after the <body> tag, as shown in the picture below:
<script>
window.location = "https://splashportal.cloud4wi.com";
</script>
Please also check that the transport.asp file appears as displayed below:
Configuring basic attributes
Please click Attributes > Configure Attributes on the top menu, to see the list of the existing RADIUS profiles. Usually, you need to create a new profile, so click the Add New Attribute button.
Below the list of all attributes that are required for Cloud4Wi, you have to add them one by one.
Attribute | Value |
USE-ACCESS-LIST | cloud4wi |
LOGIN-PAGE | https://splashportal.cloud4wi.com/?vendor=hpMSM&nasport=%p&nasid=%n&nasip=%a&clientip=%c&macap=%C&controllerurl=%l&ssid=%E&clientmac=%m |
TRANSPORT-PAGE | https://splashportal.cloud4wi.com/?vendor=hpMSM&nasport=%p&nasid=%n&nasip=%a&clientip=%c&macap=%C&controllerurl=%l&ssid=%E&clientmac=%m |
SESSION-PAGE | https://splashportal.cloud4wi.com/?vendor=hpMSM&nasport=%p&nasid=%n&nasip=%a&clientip=%c&macap=%C&controllerurl=%l&ssid=%E&clientmac=%m |
FAIL-PAGE | https://splashportal.cloud4wi.com/?vendor=hpMSM&nasport=%p&nasid=%n&nasip=%a&clientip=%c&macap=%C&controllerurl=%l&ssid=%E&clientmac=%m |
LOGO | https://splashportal.cloud4wi.com/?vendor=hpMSM&nasport=%p&nasid=%n&nasip=%a&clientip=%c&macap=%C&controllerurl=%l&ssid=%E&clientmac=%m |
WELCOME-URL | https://splashportal.cloud4wi.com/?vendor=hpMSM&nasport=%p&nasid=%n&nasip=%a&clientip=%c&macap=%C&controllerurl=%l&ssid=%E&clientmac=%m |
LOGIN-URL | https://splashportal.cloud4wi.com/?vendor=hpMSM&nasport=%p&nasid=%n&nasip=%a&clientip=%c&macap=%C&controllerurl=%l&ssid=%E&clientmac=%m |
ACCESS-LIST | cloud4wi,ACCEPT,all,splashportal.cloud4wi.com,all |
Additional attributes must be added to configure the CDN and the Walled Garden (please check the next paragraphs).
Configuring the CDN through the attributes
You can use the ACCESS-LIST attribute to configure the CDN. The value of the attribute is the following:
cloud4wi,ACCEPT,all,CDN_URL,all
You have to replace CDN_URL with the URL of the CDN, and configure one rule for each CDN URL.
Example
At the time of this writing, the list for the CDN is:
- c4wstatic.cloud4wi.com
- c4wstaticjs.cloud4wi.com
that corresponds to:
Attribute | Value |
ACCESS-LIST | cloud4wi,ACCEPT,all,c4wstatic.cloud4wi.com,all |
ACCESS-LIST | cloud4wi,ACCEPT,all,c4wstaticjs.cloud4wi.com,all |
IMPORTANT:
The list above could not be updated. Please check the updated list at the following article Enabling the CDN.
Configuring the Walled Garden through the attributes
You can use the ACCESS-LIST attribute to configure the Walled Garden. The value of the attribute is the following:
cloud4wi,ACCEPT,all,WALLEDGARDEN_URL,all
You have to replace WALLEDGARDEN_URL with the URL of the CDN, and configure one rule for each CDN URL.
Example
At the time of this writing, the list of Walled Garden URLs for Facebook is:
- *facebook.com
- *fbcdn.net
- *akamaihd.net
that corresponds to:
Attribute | Value |
ACCESS-LIST | cloud4wi,ACCEPT,all,*facebook.com,all |
ACCESS-LIST | cloud4wi,ACCEPT,all,*fbcdn.net,all |
ACCESS-LIST | cloud4wi,ACCEPT,all,*akamaihd.net,all |
IMPORTANT:
The list above could not be updated. Please check the updated list at the following article Walled garden for the Social Login (websites/domains to open).
If you are looking for the list of websites that is necessary to use PayPal, please see the following article: Walled garden for PayPal feature (websites/domains to open).
Getting started with Cloud4Wi
You can now configure Cloud4Wi following the Getting started guide.
When adding your device as an access point in the Admin Panel, you should do like the picture below.
Parameters for the Solution
The parameters indicated above for the Configuration > Wireless section are mandatory for the proper functioning. The necessary parameters to integrate the device with the Solution are the following:
RADIUS server 1: 54.247.117.188
RADIUS server 2: 79.125.111.180
RADIUS secret: (it will be communicated by Cloud4Wi)
RADIUS Authentication port: 1812
RADIUS Accounting port: 1813