Access Point Instructions for Cradlepoint
This page explains the Captive Portal configuration for Cradlepoint and authentication with IronWiFi.
IronWiFi Console Configuration
- Log into the IronWiFi console or register for free
- Create a new network
- After that, create a new captive portal, with vendor Cradlepoint
Access Point Configuration
Please log in to your Cradlepoint Router
At the top, click on Network Settings and choose WiFi / Local Networks
At the bottom of the page, select which Wireless Profile you wish to use and click Edit.
Configure with:
- WiFi Name (SSID) - Guest WiFi (or whatever you wish)
- Hidden - Unticked
- Isolate - Ticked
- WMM - Ticked
- Enabled - Ticked
- Security Mode - Open
Click Submit to save
Next, on the same page, above the Wireless Profiles, tick the box beside the Guest LAN network and click Edit.
Configure with:
IPv4 Settings tab:
- IPv4 Routing Mode - Hotspot
IPv6 Settings tab:
- IPv6 Address Source - None
Interfaces tab:
- WiFi - Guest WiFi: Click the + to move it to the Selected list
IPv4 DHCP tab:
- DHCP Server - Ticked
Click Submit to save
Next, click on System Settings at the top and choose Hotspot Services. Configure with:
Under Hotspot Settings:
- Hotspot Mode - RADIUS/UAM
- Local IP Network - Guest LAN
- Allow Service on 3G/4G modems - Ticked
- Redirect HTTPS Requests - Unticked
- Hotspot/UAM Auhentication Port - 8000
Under RADIUS Settings:
- Server Address 1 - get this value from the IronWiFi console
- Server Address 2 - get this value from the IronWiFi console
- Authentication Port - get this value from the IronWiFi console
- Accounting Port - get this value from the IronWiFi console
- Shared Secret -get this value from the IronWiFi console
- Confirm Secret - as above
- Redirect Successful Authentication - Select To an administrator-defined URL and enter: get this value from the IronWiFi console
- Session Timeout - 240 Mins
- Idle Timeout - 30 Mins
Under UAM Settings:
- Login URL -get this value from the IronWiFi console
- Splash Page URL - leave empty
- Shared Secret -get this value from the IronWiFi console
- Confirm Secret -get this value from the IronWiFi console
Next, under Allowed Hosts/Domains Prior to Authentication click the Add button and add - 107.178.250.42
! You must also install a valid SSL certificate on your controller/AP, in order to avoid authentication issues !
Follow this instructions to enable SSL on your Access Points - https://customer.cradlepoint.com/s/article/Enabling-Secure-Captive-Portal-UAM-Transactions