ZyXEL UAG

IMPORTANT: You need firmware version 4.10 or above to continue.


Log in to the UAG web interface at http://172.16.0.1 (default IP) - Username: admin, Password: 1234 (defaults)


On the left, click on Configuration and choose Object > AAA Server


Click on Add and enter the following information:


Name: guestwifi


Authentication Server Settings

----------------------------------------------

  • Server Address: *insert radius_server here*
  • Authentication Port: 1812
  • Backup Server Address: *insert radius_server2 here*
  • Backup Authentication Port: 1812
  • Key: *insert radius_secret here*


Accounting Server Settings

----------------------------------------------

  • Server Address: *insert radius_server here*
  • Accounting Port: 1813
  • Backup Server Address: *insert radius_server2 here*
  • Backup Accounting Port: 1813
  • Key: *insert radius_secret here*
  • Enable Accounting Interim update: Ticked
  • Interim Interval: 3 minutes


Click OK to Save


Next, go to Object > Auth Method on the left and then click on Edit on the default item in the list.


Click on the first entry in the Method List and change it to group guestwifi


Click OK to save.


Next, click on Web Authentication on the left and configure with the following details:


Type: Web Portal


Select External Web Portal and enter:

  • Login URL: *insert access_url here*
  • Logout URL*insert access_url here*
  • Welcome URL: *insert redirect_url here*
  • Error URL*insert access_url here*?res=failed


Click Apply to Save


Now, click on the Walled Garden tab and then tick the box to Enable Walled Garden


Click on the Domain IP/Base sub-tab and click on Add. You will need to add the list of walled garden entries below one by one, clicking OK and Add each time:


*.*insert access_domain here*

*.venuewifi.com

*.openweathermap.org

*.cloudfront.net

*.stripe.com


If you wish to support social network logins, you also need to add the domains below for each network you plan to support


FacebookTwitterLinkedInInstagram
*.facebook.com
*.fbcdn.net
*.akamaihd.net
*.facebook.net

*.twitter.com
*.twimg.com

*.linkedin.com
*.licdn.net
*.licdn.com

*.instagram.com


For example:

  • Name: enter anything you wish
  • Type: Domain
  • Domain Name: *.*insert access_domain here*


Once finished, you should have all entries listed.


Next, under Object on the left, choose AP Profile and click on the SSID tab.


Click on Add and configure with the following settings:


  • Profile Name: guestwifi
  • SSID: Guest WiFi (or whatever you wish)
  • VLAN Support: Off
  • Outgoing Interface: lan2


Click OK to Save


Next, go back to the Radio tab and click on Add. Configure with the below settings:

  • Activate: Ticked
  • Profile Name: guestwifi
  • 802.11 Band: 2.4G


Under BSSID Settings, click on the first item in the list and choose guestwifi


Click OK to Save and click on Add again to add another radio profile:

  • Activate: Ticked
  • Profile Name: guestwifi2
  • 802.11 Band: 5G


Under MBSSID Settings, click on the first item in the list and choose guestwifi



Click OK to Save


Finally, under Wireless > AP Management on the left and click on the first item in the list and Edit


Configure with the below settings:

  • Radio 1 Profile: guestwifi
  • Radio 2 Profile: guestwifi2


Click OK to Save


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.