Guest Network
A Guest Network is configured to provide access to non-enterprise users who require access to the Internet.
- To create a Guest Network, follow these steps:
- Tap Instant On mobile app home screen. tile on the
- Tap Add (
) and select the tab. This tab appears only when your site has both wired and wireless networks.
- Select , under to indicate that the network is for guest users.
- Enter a name for the guest network.
- Select one of the following
- Tap Enabling Guest Portal and Wi-Fi Enhanced Open (OWE) , if you want the user to access this network without the requirement of entering a username or password. You are also provided the option to enable Guest Portal and Wi-Fi Enhanced Open on the network. For more information, see
- Tap , if you want to secures the network using a shared password (PSK) by using either WPA2 Personal or WPA2 + WPA3 Personal encryption. Enter a password of your choice in the field. Selecting this option will require you to first authenticate to the guest network using the PSK, then you will be redirected to the captive portal page.
levels: - To configure a guest portal in addition to the security levels, enable the Guest portal toggle switch (
) and follow the instructions provided in Enabling Guest Portal.
- To change the guest network status manually, follow these steps:
- Tap
) tile on the Instant On home page and select a guest network from the list. The page is displayed.
( - Slide the
) to the right set the network to (
).
toggle switch ( - Tap . The network is marked as , and all network settings are made visible.
Wi-Fi Enhanced Open (OWE)
Wifi-Enhanced Open (OWE) is the open security type derived from WPA3. It runs concurrently with an equivalent legacy Open SSID. Essentially, 2 similar SSIDs are broadcast and OWE capable clients will connect to the OWE version of the SSID, while non-OWE clients will connect to the legacy version of the SSID. Enhanced open provides improved data encryption in open Wi-Fi networks and protects data from sniffing.
The option to configure OWE is available only when Open is chosen as a security choice for a Wireless Network.
To configure OWE on the Guest network, follow these steps:
- Ensure that the Security type for the Guest network is set to Open.
- Move the Wi-Fi Enhanced Open toggle switch to enabled (
)
- Tap Done.
More Options
The Aruba Instant On mobile app allows you to configure following settings for clients on guest networks:
drop-down in theEnabling Guest Portal
Guest portal can be accessed using the Instant On mobile app. It is available to newly connected users in a Wi-Fi network, before they are granted broader access to network resources. Guest portals are commonly used to present a landing or login page which may require the guest to accept your terms and policies before connecting to the Internet. You can also use the Guest portal to add details about your business and advertise special deals. Aruba Instant On offers you the ability to customize Guest Portal with your business logo, pictures, legal terms and other details. To configure Guest portal service on the Aruba Instant On mobile app, follow these steps:
- Click Aruba Instant On home page. from the
- Select an active Guest Network connection.
- Under
).
, enable the Guest portal toggle switch ( - Tap the (
) link to modify the captive portal or splash page. The page is displayed.
- Tap the drop-down arrow at the top-right hand corner of the screen and select either , , or settings.
- Tap .
- Based on your selection, enter values in the required fields. For more information, see:
- The changes are automatically saved.
Configuring Internal Captive Portal
You can configure an internal captive portal splash page when adding or editing a guest network created for your Instant On site. Following are the internal captive portal configuration parameters:
Configuring External Captive Portal
You can configure an external captive portal for your guest network in one of the following ways:
- Use third-party captive portals
- Customize the captive portal by configuring RADIUS authentication and accounting parameters
Using Third-Party Captive Portal
Instant On supports the following third-party external captive portal providers:
- Aislelabs
- Purple Wi-Fi
- Skyfii.io
- Wavespot
- Zoox
1. Select the preferred captive portal provider tile. You must have an account with the selected provider.
2. Configure the following parameters:
- —Enter the social Wi-Fi identifier provided by the provider. This field is applicable only for Aislelabs.
- —Select the preferred server from the drop-down list. This field is applicable only for Aislelabs.
- —Select the region from the drop-down. This field is not applicable for Aislelabs.
) to allow access to social network domains. Enter a domain name in the and tap
to add additional domains. This allows unrestricted access to additional domains.
— Slide the toggle switches to enabled (
Customizing Captive Portal
You can customize an external captive portal splash page if you do not wish to use above mentioned third-party providers.
To customize the external captive portal, follow these steps:
1. Tap the tile on the page.
2. Configure the following external captive portal configuration parameters:
Parameter | Description |
---|---|
|
Enter the URL for the external captive portal server. |
|
Specify a redirect URL if you want to redirect the users to another URL. |
|
Slide the toggle switches to enabled ( |
|
Slide the toggle switch to enabled ( |
|
Configure a primary RADIUS server for authentication by updating the following fields:
Tap the link to configure the following parameters:
Configure the following settings under Instant On AP to the client. , if you wish to proxy all RADIUS requests from the
—This is the default setting. The RADIUS requests and NAS IP address will originate from each device authenticating the clients. —The RADIUS and NAS IP address will originate from a single IP address representing the site. Enter the for the site. This option is grayed out if the Instant On AP is configured as a primary Wi-Fi router on the network. In which case each AP in the network will send RADIUS requests to the server with a matching Source IP address and NAS IP address. |
|
To configure a Secondary RADIUS Server, slide the toggle switch to the right ( The configuration parameters for the and the are the same. |
Facebook Wi-Fi
Facebook Wi-Fi service is only relevant to the guest network. It offers the possibility to create a captive portal page that draws traffic to the business. The business information would appear in the person’s feed when using the service and can be automatically seen by friends, thus attracting more people towards the business.
Configuring the Facebook Wi-Fi Service
To configure Facebook Wi-Fi service on the Aruba Instant On mobile app, follow these steps:
- Tap Aruba Instant On home page. from the
- Select an active Guest Network connection.
- Under
).
, enable the Guest portal toggle switch ( - Click the (
) link. The page is displayed.
- Tap the drop-down arrow at the right hand corner of the screen and select from the menu.
- Tap the (
) link. You will be redirected to the Facebook page of the business.
- Log in using your Facebook account and access the internet.