Configuring Aruba Controller

This chapter describes how to configure the Aruba Controller.
Before proceeding further with the configuration, you need to configure Wi5stars with a domain and a gateway, as described in Adding a New Gateway.

Prerequisites

The prerequisites required for configuration are:

Aruba Controller with ArubaOS version >= 8.8.0.0
Configured and adopted Aruba AP compatible with Aruba Controller (https://www.arubanetworks.com/techdocs/Instant_83_WebHelp/Content/Instant_UG/CustomizeIAPParams/Adding_an__to_the_Networ.htm)
Gateway configured with Aruba as hardware type

Step 1

Inside Wi5stars, select your gateway, click the dropdown menu, and choose Edit.

Step 2

Expand the General Data session.

Step 3

In the Hardware Type field, choose Aruba.

Configuring the WLAN

Step 1

From the Configuration menu on the left, click WLANs and then click + to add a new WLAN.

Complete the General session as follows:

Step 2

Type the SSID name.

Step 3

In the Primary usage field, select Guest.

Step 4

In the Forwarding Mode, select Tunner.

Step 5

Now click on Next.

Step 6

Now select the number of VLANs that you need.

Now you need to move to the Security session.

Step 7

Select the Select ClearPass or other external Captive Portal menu.

Step 8

In the Auth servers field, click + and then + again to create e new server.

Creating a new Server

Step 1

Select RADIUS. Now configure with:

Name – Type a Radius Name
IP Address – Type the IP Address of your appliance
Auth port – Enter 1812
Accounting port – Enter 1813

Step 2

In the Shared key and Retype key fields, enter your Wi5stars Radius secret.

In order to add the Secret you need to get it from your Wi5stars as described in the Radius Secret paragraph.

Step 3

Click Submit to save the entries.

Configuring the Host Addressing

Step 1

Now in the Host addressing field, select “IPv4” and configure with:

Host – Type the Wi5stars domain name (e.g.: http://YOUR_APPLIANCE_FQDN)
Page – Type your portal ID (e.g.: gatewayid/171263)
Redirect URL – Leave it blank

Step 2

Click Next and then Finish.

Configuring the Walled Garden

Step 1

Select the Roles & Policies menu on the left and click on the Aliases tab.

Step 2

Click the + button under the Network Aliases section.

The Destination section will appear.

Step 1

In the IP version field, select IPv4.

Step 2

Now, enter the name in the Name field.

Step 3

Click on the + button under the Items section.

Step 4

Download the walled garden list from Wi5stars.

To know the accurate and relevant Walled Garden, you need to add one by one, access your v platform and click the contextual dropdown menu of your gateway. Then, select Download Walled Garden to get a .txt file with your accurate walled garden list, as shown in Figure Download Walled Garden.

Figure Download Walled Garden

Configuring Authentication

Step 1

From the left menu, click Authentication, then select the L3 Authentication tab.

Step 2

Then click and expand Captive Portal Authentication Profile.

Step 3

Select your SSID name “cppm_prof” profile.

Step 4

Now configure with:

Default Role – Select guest
Default Guest Role – Select guest
Redirect Pause – Type 10 sec
User Login – Flag the box
Guest Login – Unflag the box
Logout popup window – Flag the box
Use HTTP for authentication – Enable the option
Logon wait minimum wait – Enter 5 sec
Logon wait maximum wait – Enter 10 sec
Show FQDN – Flag the box
Authentication Protocol – Select PAP
Login Page – Type http://YOUR_APPLIANCE_FQDN/gatewayid/2342 (replace 2342 with your appliance gateway ID)
Welcome Page – Leave the default setting
Show Welcome Page – Flag the box
Add switch IP address in the redirection URL – Flag the box
Adding AP’s MAC address in redirection URL – Flag the box
White List – Click + and then select the SSID_cppm_prof previously created in the Aliases section

Step 5

Click Submit to save the entries.

To deploy changes, click Pending Changes on the top right corner.

We suggest repeating the step every time the message Pending Changes appears.

Configuring AAA Profiles

Step 1

Select the AAA Profiles tab at the top.

Step 2

Select your SSID NAME_aaa_prof profile.

Step 3

Enable the RADIUS Interim accounting field.

Step 4

Save the entry.

Step 5

From the left AAA Profiles section, expand your SSID NAME_aaa_prof profile and select RADIUS Accounting server Group.

Step 6

In the Server Group field, select YOURSSIDNAME_dot1_svg.

Configuring Auth Servers

Step 1

Select the Auth Servers tab at the top.

Step 2

Select the Radius name created earlier.

Step 3

Flag the Mode field.

Step 4

In the Station ID Type field, select MAC address.

Step 5

In the Station ID delimiter field, select Colon.

You completed the Aruba configuration. If HTTPS is required, proceed with the next step (which is optional) to install a valid certificate.

Adding Certificates

If HTTPS is required, you need to upload a valid certificate and make the SSL-issued FQDN point to the controller.

Step 1

From the left menu, click Configuration>System>Certificates.

Step 2

Click on + to add a valid certificate.

Step 3

Type a Name for your certificate.

Step 4

In the Certificate Type field, select ServerCert. Then click on Browse to upload your valid certificate.

Step 5

Click on the Submit button.

Step 6

Now click again on + to add another certificate.

Step 7

Type a Name and select Intermediate CA as certificate type.

Step 8

Click on Browse to upload your valid certificate, then click Submit.

Step 9

Select the Admin tab at the top.

Step 10

Under the WEBUI AUTHENTICATION section, you can select the certificate you uploaded. In the Server certificate field, select your certificate.

Step 11

Edit your “SSIDname_cppm_prof” profile by adding the HTTPS URL.

Once you have set all the steps described above, you will get your Aruba Controller configured and ready to work with Wi5stars.