Skip to main contentSkip to search
Skip to main content

Aruba - Passpoint Configuration

Configure Passpoint (Hotspot 2.0) on Aruba IAP, Mobility Controllers, or Aruba Central to enable automatic WiFi authentication through IronWiFi's cloud RADIUS service. This provides seamless WPA2/WPA3-Enterprise connections without manual network selection or splash pages.

Supported Platforms​

PlatformNotes
Aruba IAP (Instant Access Points)Standalone/cluster mode
Aruba Mobility ControllersCentralized deployment
Aruba CentralCloud-managed

Prerequisites​

In Aruba:

  • Aruba access points with Hotspot 2.0 support
  • ArubaOS 8.x or Instant 8.x or later
  • Administrator access

In IronWiFi Console (complete these first):

  1. Create a Network and note the RADIUS details
  2. Enable Passpoint on the network
  3. Configure realm, operator name, and domain settings

Aruba IAP Configuration​

IAP Web Interface Configuration​

Step 1: Configure RADIUS Server​

  1. Log in to the IAP web interface
  2. Go to Security > Authentication Servers
  3. Click + to add new server:
    • Name: IronWiFi
    • IP Address: IronWiFi RADIUS IP
    • Auth Port: Customer Authentication Port
    • Accounting Port: Customer Accounting Port
    • Shared Key: Your RADIUS secret

Step 2: Create Wireless Profile​

  1. Go to Networks
  2. Click + to create new network
  3. Configure:
    • Name: Passpoint-Network
    • Primary Usage: Employee
    • SSID: Your SSID name

Step 3: Configure VLAN and Security​

  1. In VLAN tab, configure appropriate VLAN
  2. In Security tab:
    • Security Level: Enterprise
    • Authentication Server: IronWiFi

Step 4: Enable Hotspot 2.0​

  1. In network settings, find Hotspot 2.0 section
  2. Enable Hotspot 2.0
  3. Configure:

Network Information:

  • Internet: Yes
  • Access Network Type: Free Public Network
  • Venue Group: Business
  • Venue Type: Unspecified

Operator Information:

  • Operator Friendly Name: Your organization
  • Domain Name: 
    ironwifi.net

Roaming Consortium:

NAI Realm:

  • Realm: 
    ironwifi.com
  • EAP Method: EAP-TTLS
  • Inner Auth: PAP, MSCHAPv2
  1. Save configuration

IAP CLI Configuration​

Aruba Mobility Controller Configuration​

Web Interface​

Configure RADIUS Server​

  1. Go to Configuration > Security > Authentication > Servers
  2. Add new RADIUS server:
    • Name: IronWiFi
    • Host: IronWiFi RADIUS IP
    • Auth Port: Customer Authentication Port
    • Acct Port: Customer Accounting Port
    • Key: Your shared secret

Configure Server Group​

  1. Go to Server Groups
  2. Create new group and add IronWiFi server

Create Hotspot 2.0 Profile​

  1. Go to Configuration > Wireless > AP Configuration
  2. Select Hotspot 2.0
  3. Add new profile:

General Settings:

  • Profile Name: Passpoint-Profile
  • Internet: Yes
  • Network Type: Free public network

Venue:

  • Group: Business
  • Type: Unspecified

Domain:

  • Domain Name: 
    ironwifi.net

Operator:

  • Language: eng
  • Name: Your Organization

Roaming Consortium:

  • Add OIs: 
    5A03BA0000
    , 
    004096

NAI Realm:

  • Realm: 
    ironwifi.com
  • EAP Method: EAP-TTLS

Apply to SSID​

  1. Go to WLANs
  2. Create or edit WLAN
  3. Assign Hotspot 2.0 profile
  4. Configure WPA2-Enterprise security

Controller CLI Configuration​

Aruba Central Configuration​

Cloud Portal Setup​

  1. Log in to Aruba Central
  2. Navigate to your group
  3. Go to WLANs
  4. Create new WLAN or edit existing

Hotspot 2.0 Configuration​

  1. In WLAN settings, enable Hotspot 2.0
  2. Configure:
    • Internet Access: Enabled
    • Network Type: Free public
    • Domain: 
      ironwifi.net
    • Operator Name: Your organization
  3. Add Roaming Consortium OIs
  4. Configure NAI Realm
  5. Save and push configuration

Troubleshooting​

Network Not Discovered​

  1. Verify Hotspot 2.0 is enabled
  2. Check GAS/ANQP responses
  3. Verify client Passpoint support
  4. Review AP logs

Authentication Issues​

  1. Test RADIUS connectivity
  2. Verify shared secret
  3. Check IronWiFi authentication logs
  4. Verify NAI realm configuration

Debug Commands (Controller)​

Same vendor

Standards & reference

Was this page helpful?