IMPORTANT! Our RADIUS servers have changed. As of 15th October you will experience authentication problems if you've not re-configured.
Please click HERE for further details.

WatchGuard Wi-Fi Cloud AP

Open a web browser and log in to your WatchGuard Cloud Management dashboard


Click Configuration at the top, then click the RADIUS Profiles icon and click the Add RADIUS Profile link. Configure with:

  • Profile Name: guest1
  • IP Address: *insert radius_server_ip here*
  • Authentication Port: 1812
  • Accounting Port: 1813
  • Shared secret: *insert radius_secret here*

Click Save and then add a second RADIUS profile. Configure with:

  • Profile Name: guest2
  • IP Address: *insert radius_server2_ip here*
  • Authentication Port: 1812
  • Accounting Port: 1813
  • Shared secret: *insert radius_secret here*

Click Save.


Next, click Configuration at the top, then click the Device Configuration icon and click SSID Profiles. Click the Add New Wi-Fi Profile link and configure with:

  • Profile Name: Guest Wi-Fi
  • SSID: Guest Wi-Fi (or whatever you want to broadcast for your SSID)
  • Broadcast SSID: Enabled


Under The Security  section:

  • Security Mode: Open
  • Client Isolation: Enabled


Under the Network section:

  • NAT : Enabled
  • Start IP Address: 10.1.0.2
  • End IP Address: 10.1.0.254
  • Local IP Address: 10.1.0.1
  • Subnet Mask: 255.255.255.0
  • DNS Servers: add: 8.8.8.8 and 8.8.4.4
  • Lease time: 1440


Under the Captive Portal  section:

  • Enable Captive Portal: Enabled
  • External Splash Page with RADIUS Authentication: Enabled
  • Splash Page URL *insert access_url here*
  • Shared Secret: *insert uam_secret here*
  • Walled Garden: Add the below domains one by one (opting for ports 80 and 443)


    *insert access_domain here*

    venuewifi.com

    openweathermap.org

    cloudfront.net

    stripe.com


    If you wish to support social network logins, you also need to add the domains below for each network you plan to support


    FacebookTwitterLinkedInInstagram
    facebook.com
    fbcdn.net
    akamaihd.net
    connect.facebook.net
    twitter.com
    twimg.com
    linkedin.com
    licdn.net
    licdn.com

    instagram.com


  • Redirect URL: *insert redirect_url here*
  • Enable HTTPS Redirection: Disabled


Under the Radius Settings link:

  • Called Station Id: %m
  • Primary Authentication Server: guest1
  • Secondary Authentication Server: guest2
  • Interval: 2 mins
  • Primary Accounting Server: guest1
  • Secondary Accounting Server: guest2


Click Save  and then Click Save again. Finally, go back to Device Configuration and click Device Templates. Edit your current template, and under the Radio Settings section add the new SSID profile you created above to all radios.


Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.