HP (MSM managed)

Open a web browser and log in to your HP MSM controller web interface

Click on "Authentication" on the top menu

Select "RADIUS Profiles" on the top sub menu and then click "Add New Profile"


Enter the following information:

  • Profile Name: guestwifi
  • Authentication port: 1812
  • Accounting port: 1813
  • Authentication method: PAP

    Under Primary RADIUS server, enter:
  • Server address: *insert radius_server here*
  • Secret: *insert radius_secret here*
  • Confirm secret: As above

Under Secondary RADIUS server, enter:

  • Server address: *insert radius_server2 here*
  • Secret: *insert radius_secret here*
  • Confirm secret: As above

  • Click on Save

On the left menu, under Network Tree, click "VSCs" and then click "Add New VSC Profile". Set the correct settings:

Under Global:

  • Profile Name: Free WiFi
  • Use Controller for: Tick both Authentication and Access control

    Under Access Control:

  • Present session and welcome page: Ticked

    Under Virtual AP:

  • Name (SSID): Free WiFi (or whatever you want)
  • Broadcast name (SSID): Ticked

    Under HTML-based user logins:

  • HTML-based user logins: Ticked
  • Authentication: Remote
  • RADIUS: guestwifi
  • RADIUS accounting: Ticked; choose guestwifi

    Under Location-aware:

  • Called-Station-Id content: macaddress

    Under DHCP server:

  • DNS: 10.1.0.1
  • Start: 10.1.0.2
  • End: 10.1.0.254
  • Gateway: 10.1.0.1
  • Netmask: 255.255.255.0
  • Subnet: 10.1.0.0

Click on Save.
Next, click on Public access at the top, and ensure that "Access Control" is ticked.

Click on Save.

Next, click on the "Web content" tab, and enter the following:

Support a local Welcome page: Unticked
Redirect users to the login page via: HTTP

Click on Save

Next, click on Attributes at the top, and then under Configure Attributes click on Add New Attribute

IMPORTANT: You will need to add the below attributes one by one until you have them all listed.


Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,**insert access_domain here*,all

Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,*cloudfront.net,all

Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,*openweathermap.org,all

Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,*venuewifi.com,all

Name: ACCESS-LIST
Value: guestwifi,ACCEPT,all,*stripe.com,all

Name: LOGIN-URL
Value: *insert access_url here*?login_url=%l&hpapmac=%C&client_mac=%m

Name: WELCOME-URL
Value: *insert redirect_url here*

Name: USE-ACCESS-LIST
Value: guestwifi


If you wish to support social network logins, you also need to add the entries below for each network you plan to support


Facebook
Twitter
  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*facebook.com,all

  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*fbcdn.net,all

  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*akamaihd.net,all

  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*connect.facebook.net,all
  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*twitter.com,all

  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*twimg.com,all

 

LinkedIn
Instagram
  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*linkedin.com,all 

  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*licdn.com,all
  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*licdn.net,all
 
  • NameACCESS-LIST
  • Value: guestwifi,ACCEPT,all,*instagram.com,all
 

 


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.