Extreme Networks - HiveManager Classic – Help Center

Purpose

This guide shows how to configure an Extreme Networks access point for Cloud4Wi.

Please note that the images contained in this article may contain outdated configuration data. Therefore, please check the data contained in the paragraph "Parameters for the Solution" at the bottom of the page, as they are certainly up to date.

Prerequisites

This article applies to the following models:

AP121
AP130
AP141
AP230
AP330
AP350
AP370
AP390

To make everything work, check that:

the device is connected to the Internet
WAN and LAN interfaces are correctly configured

The configuration procedure has been performed and tested.
We recommend you update the device with the most recent firmware version available.

Accessing the access point

Please access the device through the web interface.

Create new Network Policy

In order to create a new configuration, it is necessary to access the HiveManager web interface, select the Configuration tab and then click New Network Policy.

You are redirected to the Configure Network Policy section. Here you have to create a new SSID.

Please configure the SSID and the SSID Access Security as below. Don't forget to click Advanced, set the Roaming Cache Ageout to 1 and then click Save. This ensures that if the person roams away they get the splash page again quickly.

After that, please select the SSID previously created and then click OK.

Captive Portal configuration

Please create the Captive Portal configuration by clicking <CWP>.

Then configure this part as the picture below:

Registration Type: External Authentication
Authentication Method: CHAP
Login URL: (please check Parameters for the Solution paragraph at the end of this page)
Password Encryption: UAM Basic
Captive Web Portal Success Page Settings: (please check Parameters for the Solution paragraph at the end of this page)
Captive Web Portal Failure Page Settings: (please check Parameters for the Solution paragraph at the end of this page)

Walled garden

In the Walled Garden section, you can configure the walled garden with a range of IP addresses that can be visited by end-users even without being authenticated. You can add an address or a range of addresses by clicking New as illustrated in the picture below. Please ensure you uncheck the "Enable HTTPS".

You can set a single IP address or a range (by configuring the appropriate subnet mask). You may also specify a hostname such as *cloud4wi.com.

Note: If domain names that are resolvable to multiple IP addresses are used in the walled garden, enable the DNS ALG service in the Additional Settings > Service Settings > ALG Services section of the network policy.

You can learn more about that by reading the following articles:

RADIUS server configuration

Please enter the RADIUS server section, by clicking <RADIUS Settings>:

Enter RADIUS server data and then click Apply.
Please note that the following image indicates the configuration of a RADIUS server, but you can add a secondary RADIUS server by clicking the button.
Please configure the fields as indicated in the Parameters for the Solution paragraph.

Once configured RADIUS server and Captive portal settings, you have to complete this procedure by saving this configuration and modifying the text under the label Optional Settings (not supported by RADIUS Proxy), as indicated below:

Then click Add/Remove and create a new profile:

Please save the Network Policy configuration just created, by clicking Save.

Load configuration on the device

Once the procedure is finished, please go to the Monitor section and load the configuration to the appropriate device, by clicking Modify.

Please assign the Network Policy that you previously created and then click Save.

Please select once again the device and then click Update... > Upload and Activate configuration. After that, please click Upload.

Once the uploading of the configuration to the device is completed, the device can properly work with Cloud4Wi.

Entering the device details into the Admin Panel

The Admin Panel requires only the MAC address. The Identifier field is not required.
In order to add a new access point to the system, please see How to add an access point.

The MAC address is printed on the access point, and you can either find it in the Monitor section of the web interface and then clicking Utilities > Status > Interface: that's the MAC address associated to the "Mgt0" or "Eth0" interface.

Note: Currently (referring to the tested firmware version), devices do not support the "logout" feature. For this reason, you will not find a Logout link on any Splash Pages loaded through these devices.

Parameters for the Solution

The parameters to integrate the device with the Solution are the following:

Login URL: https://splashportal.cloud4wi.com/
Captive Web Portal Success Page Settings: Use simple URL address > https://splashportal.cloud4wi.com
Captive Web Portal Failure Page Settings: Use simple URL address > https://splashportal.cloud4wi.com/

Radius Server
Primary Server IP: 54.247.117.188
Secondary Server IP: 79.125.111.180
Shared Secret: (Cloud4Wi will communicate it)

Please note that it is necessary to enter the Splash Page URL exactly as it is written above.
If you enter the Splash Page URL in different formats (e.g. https://splashportal.cloud4wi.com/c4wportal/mysplashportal), then the redirection will fail and the end-user will not be able to see the Splash Page.

If these parameters change in the future, we will promptly inform you about new values.