Zyxel NXC Series

Open a web browser and log in to your NXC web interface.

Step 1 - RADIUS

Click Configuration > Object > AAA Server on the left and then the RADIUS tab. Add a new server and configure with:

Name
guest

Under Authentication Server Settings:

Server Address
*insert radius_server here*
Authentication Port
1812
Backup Server Address
*insert radius_server2 here*
Backup Authentication Port
1812
Key
*insert radius_secret here*

Under Accounting Server Settings:

Server Address
*insert radius_server here*
Authentication Port
1813
Backup Server Address
*insert radius_server2 here*
Backup Authentication Port
1813
Key
*insert radius_secret here*
Accounting Interim Update
Enabled
Interim Interval
2 minutes

Click OK to Save. Next, click Auth Method on the left. Click Add and configure with:

Name
guest_aaa
Server Profile
guest / RADIUS (select from the list)

Click OK to Save.

Step 2 - Captive Portal

Click Network > Captive Portal on the left. Configure with:

Enable Captive Portal
Enabled
Logout IP
10.10.10.10

Click Apply to Save. Next, on the Redirect on Controller tab, click Add and configure with:

Enable Policy
Enabled
Source Address
Choose your WiFi user subnet
Destination Address
any
Schedule
None
Authentication
force
Authentication Method
guest_aaa
External Web Portal Login URL
*insert access_url here*
Welcome URL
*insert redirect_url here*&
Error URL
*insert access_url here*?res=failed&

Click OK to Save.

Step 3 - SSID

Click Object > AP Profile and then the SSID tab. Edit an existing SSID if you have one for Guest WiFi or click Add to create. Configure with:

Profile Name
guest
SSID
Guest WiFi (or whatever you wish)
Security Profile
default

Click OK to Save.

Step 4 - Walled Garden

At present there is no way to configure the walled garden via the web interface. We need to upload a file to the controller in order to support this.

Copy and paste the following text in to a text editor and save as apple_fqdn.conf on your desktop:

*insert access_domain here*
r2-portal.venuewifi.com
r3-portal.venuewifi.com
payment-r1.venuewifi.com
payment-r2.venuewifi.com
payment-r3.venuewifi.com
api.openweathermap.org
d1ldbb6wxu8wdm.cloudfront.net
dowj6t3sraq9r.cloudfront.net
api.stripe.com


If you wish to support social network logins, you also need to copy/paste the domains below for each network you plan to support, in to the above text file.


Facebook

facebook.com
www.facebook.com
m.facebook.com
scontent-lhr3-1.xx.fbcdn.net
fbstatic-a.akamaihd.net
connect.facebook.net


Twitter

twitter.com
www.twitter.com
api.twitter.com
abs.twimg.com
abs-0.twimg.com


LinkedIn

linkedin.com
www.linkedin.co
touch.linkedin.com
static.licdn.com


Instagram

instagram.com
www.instagram.com
instagramstatic-a.akamaihd.net


You need to upload this file to the controller via FTP. To do so, open a command prompt or terminal window and type:

ftp controller_ip
Enter your admin username and password when prompted
cd /tmp
put C:\Users\my.username\Desktop\apple_fqdn.conf

The configuration is now complete.


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.