Juniper MIST deployment

Describes how to configure your Juniper Mist to activate the Cloudi-Fi splash page feature

Use case

This guide provides step-by-step instructions for integrating the Cloudi-Fi captive portal with Juniper Mist. This configuration enables user authentication, guaranteeing secure and transparent network access.

Prerequisites

Before starting, ensure that you have the following prerequisites:

• • Access to the Juniper Mist interface
  • Access to Cloudi-Fi’s admin console
  • Cloudi-Fi Radius IPs and Secret  
  • Knowledge of your network’s IP addressing scheme.
  • Firewall ports allowed: 
    • HTTP, HTTPS
    • DNS
    • RADIUS: UDP 1812, 1813

1. Note the Cloudi-Fi redirect URL 

Go to Cloudi-Fi admin interface Settings Integrations.

1. Select Mist (Juniper) 
2. Click on Configure

1. Copy the "portal URL," and save it in a notepad.

2. Configure the WLAN in the MIST interface

In Mist Dashboard, go to Network WLANs and edit the WLAN where you want to enable Cloudi-Fi.

In the Security section, select "Open."

In the Guest Portal section:

1. Select "Forward to the external portal".
2. Portal URL: paste the Cloudi-Fi URL
3. Allowed Hostnames:
   1. cloudi-fi.net
   2. cloudi-fi.com (different URLs may be required if you use social network connectors).
4. Note the API secret on a notepad.

3. Configure the API Secret in Cloudi-Fi

Return to Cloudi-Fi:

1. Go to the admin interface 
2. Settings 
3. Integrations, then Juniper Mist
4. Configuration
5. Fill in the API Secret key
6. Save

Fill in the API Secret key and click on "Save changes."

Troubleshooting

If you’re facing issues with your captive portal, it may have several root causes.

Before starting, please check that the following information is active, as mentioned in the Solution prerequisites section.

1. Capture a web snapshot from your browser
2. Share with the Cloudi-Fi support team
3. Provide the URL of the captive portal configured on your Juniper Mist device
4. Share any User IDs encountering error pages

Captive portal display issue before or after authentication:

The problem may be related to DHCP or DNS.

• Check that your IP address is valid.
• Check that login.cloudi-fi.net is resolved.

If the DNS and IP address are functioning properly, and you are still encountering a captive portal issue, follow these steps:

1. Type http://neverssl.com into your browser to apply redirection to the portal.
2. If the captive portal does not appear, verify the URL in the "Guest Portal" section.
3. Navigate to Site > Guest Portal > Portal URL.
4. Check Site > Guest Portal > Allowed Hostnames to ensure that Cloudi-Fi domains or IPs are allowed before authentication.

If you have any questions, don't hesitate to get in touch with us - How to contact your support?

What’s next?

Please consult our knowledge base for more details on captive portal configurations.