How to configure the Extreme Cloud IQ controller with IronWiFi
Log in to your ExtremeCloud IQ web interface.
Click on Configuration at the top and then on Guided Configuration on the left.
Under Choose Network Policy click New and configure with:
Name: IW_Guest_Policy
Wireless Access: Enabled
Switching: Enabled
Branch Routing: Disabled
Bonjour Gateway: Disabled
Click on Create to continue
Next to SSIDs click Choose. Click on New and configure with:
Profile Name: IW_Guest_Profile
SSID: IW_Guest (or whatever you want)
Enabled Captive Web Portal: Enabled
Leave all other settings at their defaults.
Click Save and then OK
Next, click on <Captive Web Portal> and choose New. Configure with:
Name: IW_Guest_Portal
Registration Type: External Authentication
Under Captive Web Portal Login Page Settings:
Login URL: Splash Page URL - Enter the web address of your captive portals splash page from the IronWiFi Console. (In console click "Networks" -> "Captive Portals" -> under "Portal Settings" header find on Splash Page URL -> Copy the web address and enter into console.
EXAMPLE:
Password Encryption: No Encryption
Authentication Method: PAP
Under Captive Web Portal Success Page Settings:
Show the success page: Disabled
After a successful login: Redirect to an external page
Use simple URL address: Enter the web address of your captive portals success page from the IronWiFI Console. (In console click "Networks" -> "Captive Portals" -> under "Portal Pages" click on Success Page -> Copy the web address and enter into console
Under Optional Advanced Configuration:
Use network default settings: Enabled
Use HTTP 302 as the redirection method: Enabled
Enable HTTPS: Disabled
Under Walled Garden:
You will need to add the required domains / IP addresses one by one. Click on New, enter the domain / IP and then click Apply. The required IPs are listed in Captive Portal / Walled Garden Configuration
Click Save
Next, click on <RADIUS Settings> and choose New. Configure with:
RADIUS Name: IW_Radius
- Open the IronWiFi console in a separate tab.
- In the IronWiFi console navigate to networks and open your network.
- Scroll to header "Primary Radius Server."
Under Add a New RADIUS Server configure with:
IP Address/Domain Name: get this value from the IronWiFi console / Networks / Radius Servers.
Server Type: Auth/Acct
Shared Secret: Get this value from the IronWiFi console under "Shared Secret"
Confirm Secret: Get this value from the IronWiFi console under "Shared Secret"
Server Role: Primary
Click Apply to add, and then click on New to add another, configure it with your "Backup Radius Server" information:
In the IronWiFi console scroll to header "Backup Radius Server"
IP Address/Domain Name: get this value from the IronWiFi console / Networks / Radius Servers.
Server Type: Auth/Acct
Shared Secret: Get this value from the IronWiFi console under "Shared Secret"
Confirm Secret: Get this value from the IronWiFi console under "Shared Secret"
Server Role: Backup1
Click Apply again, and then click on Save
Under User Profile click on Add/Remove.
Select default-profile and click Save
Further down the page, beside Advanced Settings click Edit
Click on Service Settings and beside ALG Services click the Plus (+) icon Configure with:
Name: IW_Service
DNS: Enabled
HTTP: Enabled
Click on Save and then Save again at the top right.
Finally, click on Continue at the top right.
You are now asked which of your access points you wish to push the new settings to (typically all your access points). Select all that apply, and click Update > Update Devices
Click Update.