Step-by-step instructions on how to set up a Radius-based captive portal with EnGenius controller and Cloudi-Fi for user authentication.
Use Case
This guide provides step-by-step instructions for integrating the Cloudi-Fi captive portal with EnGenius. This setup enables Radius-based user authentication, ensuring a secure and seamless network access experience.
Prerequisites
Before starting, ensure that you have the following prerequisites:
- Access to the EnGenius.
- Access to Cloudi-Fi’s admin console
- Cloudi-Fi Radius IPs and Secret
- Knowledge of your network’s IP addressing scheme.
- Firewall ports allowed:
- HTTP, HTTPS
- DNS
- RADIUS: UDP 1812, 1813
1. Get the Cloudi-Fi required URL
To create a new location in the Cloudi-fi Admin interface if it doesn't already exist, follow these instructions:
- Go to the "Location" section in the Cloudi-fi Admin interface.
- Create a New Location and enter the required details for the new location:
- Location Name
- Type (Redirect URL)
- Portal template
- Country
Location URL: this URL will be used to configure an External Captive Portal
- Access the Cloudi-Fi administration console
- Select the location
- Click on the menu button for the location
- Select "Copy Splash page URL"
Transform the URL as follows:
Cloudi-Fi
https://login.cloudi-fi.net/start/ch/ebd2egzrfgrgq2/lh/qgrzqrgegs/sp/spsomething.com
EnGenius
https://login.cloudi-fi.net/start/ch/ebd2egzrfgrgq2/lh/qgrzqrgegs/sp/spenginius.com
2. Get Radius information
To set up, you will need the Radius information (Server IPs, Secret, Ports).
- IPs address of the Radius servers
- Ports: UDP 1812 (Authentication) & 1813 (Accounting)
- The Secret (provided by Cloudi-Fi Support)
You can get the Secret by asking in the Chatbot, Cloudi-Fi’s Support team will provide you with the necessary information.
What shared secret is used for the Radius server? (Please save this confidential information securely, and do not share it publicly).
3. Create a new project
Access your EnGenius interface.
- Navigate to projects
- Create a new project
- Add a new Project and provide a name for it.
4. Create the captive portal
Select Hotspot Service Captive Portal, then add a new one.
You'll encounter two Authentication Types.
-
The first one is RADIUS.
- Choose a name for your portal.
- Designate RADIUS Server as your Authentication Type.
- Input the server's address along with the RADIUS secret provided by Cloudi-Fi.
-
The second Authentication Type is Splash & Go.
-
For this option, check the box next to Splash & Go.
-
-
- Now, proceed to configure the Splash Page.
- Paste your modified URI in the External Splash Page URL box.
- Enable the Walled Garden and add the following hosts:
-
*.cloudi-fi.com
-
*.cloudi-fi.net
-
5. Configure your SSID
- Navigate to Device Management, then Device Config, and select your Device Name.
- Activate your SSID, designate a name, enable the Captive Portal feature, and select the profile you created earlier.
What’s next
If desired, you can activate Traffic Shaping to impose limitations on your users.