Cisco (WLC Managed)

Purpose

This guide shows how to setup a Cisco WLC based WiFi network for SpotOn.

Prerequisites

Your Cisco APs should already be integrated with WLC. It is recommended to update your device firmwares to the latest available version. This setup has been tested on Cisco WLC v8.5.140.0.

You will require a RADIUS password and a Custom URL from the SpotOn Support team. Chat with us, send an e-mail ([email protected]) or give us a call (050 211 5201).

Network Setup

The first step in integrating SpotOn is to setup AAA. Under the Security section go to RADIUS and then select Authentication. Click on New to add a new RADIUS Server:

IP Address: 49.13.14.122
Port Number: 1812 
Shared Secret: Ask the SpotOn team for the RADIUS password

Click Apply to save settings. Similarly, under RADIUS -> Accounting add a new accounting server with these settings:

IP Address: 94.124.94.160 
Port Number: 1813 
Shared Secret: Ask the SpotOn team for the RADIUS password

Click Apply to save settings. Go to Access Control Lists and add a new IPv4 Access Control List (or a new FlexConnect ACL if you’re using FlexConnect) and name it guest_preauth:

Hover your mouse’s pointer on the blue arrow and select Add-Remove URL:

Add all the URLs given here one by one to it.

Go to Web Auth and select Web Login Page. Select External as the Web Authentication Type and enter the External Webauth URL:

https://portal.spotonwifi.com/auth/vendor/[YOUR CUSTOM ID]/cisco_wlc

Note: SpotOn support can provide you your CUSTOM ID.

Click Apply to save. Now go to WLANs and open your WLAN profile. Go to Security -> L3 Security and select Web Policy in “Layer 3 Security”. In “Preauthentication ACL” select guest_preauth. Check “Override Global Config”, select External as “Web Auth Type” and enter your Redirect URL:

Click Apply to save settings.

Go to AAA Servers tab and enable Authentication and Accounting Servers like this:

Set the Authentication priority like this:

Go to Advanced tab and check Allow AAA Override option:

Click Apply to save settings.

In the Management tab select HTTP-HTTPS and configure the following settings:

Click Apply to save settings. The configuration is now complete.