Aruba Instant On Help Center
You are here: Web Help > Configuring Networks > Guest Network

Guest Network

A Guest Network is configured to provide access to non-enterprise users who require access to the Internet.

  • To create a Guest Network, follow these steps:

1. Click the Networks tile on the Instant On web application home page.

2. Click Add () and select the Wireless tab. This tab appears only when your site has both wired and wireless networks.

3. Select Guest, under Usage to indicate that the network is for guest users.

4. Enter a Network name.

5. Select one of the following Security levels:

a. Click Open, if you want the user to access this network without the requirement of entering a username or password.

b. Click Password, if you want to secures the network using a shared password (PSK) by using either WPA2 Personal or WPA2 + WPA3 Personal encryption. Enter a password of your choice in the Network password field.

c. Click Portal, if you do not want to secure the network with a password or if you want to redirect users to your Captive Portal page before accessing the network. For more information, see Enabling Guest Portal.

  • To change the guest network status manually, follow these steps:

1. Click Networks () tile on the Instant On home page. The Networks page is displayed. Click the () arrow next to the guest network.

2. Under the Identification tab, slide the Inactive toggle switch () to the right, to set the network to Active ().

3. Click Save. The network is marked as Active, and all network settings are made visible.

Enabling Guest Portal

Guest portal can be accessed using a web browser. It is available to newly connected users in a Wi-Fi network, before they are granted broader access to network resources. Guest portals are commonly used to present a landing or login page which may require the guest to accept your terms and policies before connecting to the Internet. You can also use the Guest portal to add details about your business and advertise special deals. Aruba Instant On offers you the ability to customize Guest Portal with your business logo, pictures, legal terms and other details. To configure Guest portal service on the Aruba Instant On web application, follow these steps:

1. Click Networks from the Aruba Instant On home page.

2. Select one of the active Guest Network connections.

3. Under Security in the Identification tab, click the Portal tab.

4. Click the () customize guest portal link to modify the captive portal or splash page. The Guest Portal page is displayed.

5. Select either Internal, External, or Facebook settings.

6. Based on your selection, enter values in the required fields. For more information, see:

Configuring Internal Captive Portal

Configuring External Captive Portal

Facebook Wi-Fi

7. Click Apply changes.

Configuring Internal Captive Portal

You can configure an internal captive portal splash page when adding or editing a guest network created for your Instant On site. Following are the internal captive portal configuration parameters:

Table 1: Internal Captive Portal Configuration

Parameter Description

Background

Click the box to view the color palette and choose a color for the background of the internal captive portal page.

Welcome Message

Design the welcome message by updating the following fields:

Text—Enter the text for the welcome message. Example: Welcome to Guest Network.

Font size—Drag the slider to set the size of the font.

Font color—Click the box to view the color palette and choose a color for the font.

Font family—Choose a font type from the drop-down list.

Logo / Image

Click the image icon to browse and upload an image from your device.

Terms and Conditions

Design the terms and conditions section by updating the following fields:

Title text—Enter the title text. Example: Please read the Terms and Conditions before using the Guest Network.

Font size—Drag the slider to set the size of the font.

Font color—Click the box to view the color palette and choose a color for the font.

Font family—Choose a font type from the drop-down list.

Terms content—Enter or paste your terms and conditions in the text box.

Agree text—Enter a comment in the text box. For example: I agree to the terms and conditions.

Font color—Click the box to view the color palette and choose a color for the font.

Font family—Choose a font type from the drop-down list.

Accept Button

Design the Accept Button by updating the following fields:

Text—Enter the text for the accept button. Example: I agree to the terms and conditions.

Border radius—Drag the slider to set the border radius of the accept button.

Background color—Tap the box to view the color palette and choose a color for the background.

Font color—Click the box to view the color palette and choose a color for the font.

Font family—Choose a font type from the drop-down list.

Configuring External Captive Portal

You can configure an external captive portal for your guest network in one of the following ways:

Use third-party captive portal

Customize an external captive portal by configuring RADIUS authentication and accounting parameters.

Using Third-Party Captive Portal

Instant On supports the following third-party captive portal providers:

Aislelabs

Purple WiFi

Skyfii.io

Wavespot

To use third-party providers for external captive portal, follow these steps:

1. Under Select preferred provider, select the preferred provider tile . You must have an account with the selected provider.

2. Configure the following parameters:

Social WiFi identifier—Enter the social Wi-Fi identifier provided by the provider. This field is applicable only for Aislelabs.

Preferred Servers—Select the preferred server from the drop-down list. This field is applicable only for Aislelabs.

Select your region—Select the region from the drop-down. This field is not applicable for Aislelabs.

Allowed domains— Slide the toggle switches to enabled () , to allow access to social network domains. Enter a domain name in the New domain name and click to add additional domainsi. This allows unrestricted access to additional domains.

3. Click Apply changes.

Customizing Captive Portal

You can customize an external captive portal splash page if you do not wish to use above mentioned third-party providers.

To customize the external captive portal, follow these steps:

1. Under Other, select the Custom tile on the Guest Portal page.

2. Configure the following external captive portal configuration parameters:

Table 2: External Captive Portal Configuration

Parameter Description

Server URL

Enter the URL for the external captive portal server.

Redirect URL

Specify a redirect URL if you want to redirect the users to another URL.

Allowed domains

Slide the toggle switches to enabled () , to allow access to social network domains. Enter a domain name in the New domain name and click to add additional domainsi. This allows unrestricted access to additional domains.

Send RADIUS Accounting

Slide the toggle switch to enabled (), to ensure the Instant On AP sends a status-server request to determine the actual state of the accounting server before marking the server as unavailable.

Primary RADIUS Server

Configure a primary RADIUS server for authentication by updating the following fields:

Server IP address—Enter the IP address of the external RADIUS server.

Shared secret—Enter a shared key for communicating with the external RADIUS server.

 

Click the More RADIUS parameters link to configure the following parameters:

Server timeout—Specify a timeout value in seconds. The value determines the timeout for one RADIUS request. The Instant On AP retries to send the request several times (as configured in the Retry count) before the user gets disconnected.

Retry count—Specify a number between 1 and 5. Indicates the maximum number of authentication requests that are sent to the server group, and the default value is 3 requests.

Authentication port—Enter the authorization port number of the external RADIUS server within the range of 1–65,535. The default port number is 1812.

Accounting port—Enter the accounting port number within the range of 1–65,535. This port is used for sending accounting records to the RADIUS server. The default port number is 1813.

 

Configure the following settings under Network Access Attributes, if you wish to proxy all RADIUS requests from the Instant On AP to the client.

NAS identifier—Enter a string value for RADIUS attribute 32, NAS Identifier, to be sent with RADIUS requests to the RADIUS server.

NAS IP address—Select one of the following options if your Instant On devices are configured in a private network mode. The options below determine how the RADIUS authentication takes place across all networks.

Use device IP (default)—This is the default setting. The RADIUS requests and NAS IP address will originate from each device authenticating the clients.

Use a single IP—The RADIUS and NAS IP address will originate from a single IP address representing the site. Enter the NAS IP address for the site.

NOTE: This option is grayed out if the Instant On AP is configured as a primary Wi-Fi router on the network. In which case each AP in the network will send RADIUS requests to the server with a matching Source IP address and NAS IP address.

Secondary RADIUS Server

To configure a Secondary RADIUS Server, slide the toggle switch to the right ().

NOTE: The configuration parameters for the Secondary RADIUS Server and the Primary RADIUS Server are the same.

3. Click Apply Changes.

Facebook Wi-Fi

Facebook Wi-Fi service is only relevant to the guest network. It offers the possibility to create a captive portal page that draws traffic to the business. The business information would appear in the person’s feed when using the service and can be automatically seen by friends, thus attracting more people towards the business.

Configuring the Facebook Wi-Fi Service

To configure Facebook Wi-Fi service on the Aruba Instant On web application, follow these steps:

1. Click Networks from the Aruba Instant On home page.

2. Select one of the active Guest Network connections.

3. Under the Identification page, click the Portal tab.

4. Click the () Customize guest portal link. The Guest Portal page is displayed.

5. Select Facebook from the drop-down list.

6. Click Apply changes.

7. Click the () Configure Facebook Wi-Fi You will be redirected to the Facebook page of the business.

8. Log in using your Facebook account and access the internet.

/*]]>*/