Cisco WLC 8.5 - Passpoint configuration

Prerequisites

• Cisco access points and wireless LAN controller are deployed.
• Controller has basic networking configured and has the licenses required.
• Access points are connected to the controller and are online.
  

Creating your network / SSID

This document will guide you in configuring a Hotspot 2.0 (Passpoint) SSID in Cisco WLC.

1. To start the configuration process, log in to the Cisco wireless LAN controller as admin.  For existing environments with additional users, log in as a user with administrative privileges.
   
2. Click Advanced on the top right of the Dashboard.
   

2. Click WLANs. The WLANs menu appears on the left side of the Dashboard.
   
   
   
   
3. Select Create New on the top right, then click Go.
   
   
   The WLANs>New page appears.
   
   
   
   
4. For the new WLAN set Type to ‘WLAN’. Enter the Profile Name such as "Cloud4Wi_Passpoint"
   
   
5. Enter the SSID, as "Cloud4Wi Secure WiFi".
   
   
6. For ID you may choose any value from the select menu.
   
   
7. Click Apply on the top right to save your changes.  
   The wireless LAN you added appears on the WLANs information page.
   
   
8. Click Save Configuration on the top right to commit the configuration.
   
   
   
   
9. Still on the WLANs information page, click the WLAN ID, such as “2”.
   The WLANs > Edit page appears.
   
   
10. In General tab,
    • set SSID ‘Status’ to ‘Enabled’
    • set ‘Broadcast SSID’ to ‘Enabled’
    • set NAS-ID value to MAC address of your access point connected to WLC controller.
      This is the MAC address of the radio interface, and must match with the one entered into the Cloud4Wi dashboard.
      
      
11. Then click on the Security tab.
    
    
    
    
12. In Layer 2 section of Security tab
    2. set Layer 2 Security as ‘WPA+WPA2’,
    3. enable WPA2 Policy 
    4. set WPA2 Encryption to AES.
    5. Under ‘Authentication Key Management’ section enable ‘802.1X’ option
       
       
       
       
13. After, click on the Layer 3 tab. In the Layer 3 tab:
    • set Layer 3 Security to ‘None’.
    • set Captive Network Assistant Bypass to ‘None’.
      
      
      
      
14. Click on AAA Servers tab:
    • Enable both Authentication and Accounting servers and set the following values as RADIUS servers:
      

      RADIUS Primary IP Address:        52.48.102.108
      RADIUS Secondary IP Address:   34.252.97.217
      Shared Secret: <as communicated by Cloud4Wi team>
      
      

    • Enable Interim Updates and set Interim Interval to 180 seconds.
      
      

    • Click Apply on the top right to save your changes.
      

15. Click Save Configuration on the top right to commit the configuration.
    
    
    
    

•  

Update the 802.11u settings

1. Go again to the WLANs section. Locate the wireless LAN you created and mouse over  to the right of the wireless LAN description. Select 802.11u from the drop-down menu.
   
   
   
   The 802.11u Parameters page appears.
   
   
2. Set “802.11u Status” to Enabled. The 802.11u information page refreshes with properties to set.
   
   
3. Set “Internet Access” to Enabled.
   
   
4. In the Realm List, enter your Passpoint domain as displayed in the Passpoint setting of the CLoud4wi dashboard (such as "companyname.securewifi.io"). Click Add. The Realm appears in the Realm Index.
   
   
   
   
5. Click on the Realm Name you just created in the Realm Index. The 802.11u Parameters>EAP Details information page appears.
   
   
6. Set EAP Method to “EAP-TTLS”, then click on “Add”. The EAP method appears in the EAP Index.
   
   
7. Click Apply on the top right to save your changes.
   
   
   
   

8. Click Save Configuration on the top right to commit the configuration.

Configure Hotspot 2.0

1. Go again to the WLANs section. Locate the wireless LAN you created and mouse over    to the right of the wireless LAN description.
   
   
2. Select Hotspot 2.0 from the drop-down menu.
   
   
   
   The WLAN > Hotspot 2.0 information page appears.
   
   
3. Set “Hotspot2 Enable” as Enabled;
   Please be sure to set values for WAN Metrics -- without these values set, Android devices are less likely to stay connected.
   • WAN Link Status- UP
   • WAN Downlink Speed
   • WAN Uplink Speed 99
   • WAN Uplink load 99
   • Load Measurement duration 10
     
     
     
     
4. Enter your Operator Name, under the Operator Name List.
   Add your Language Code and click Add.
   
   
   
   
5. Click Apply on the top right to save your changes.
   
   
   
   
6. Click Save Configuration on the top right to commit the configuration.
   
   
   
   
7. Your SSID is now configured. In a few minutes after you have applied the last changes, your WLAN will have Hotspot 2.0 capabilities.