Captive Portal Configuration for HiveManager with IronWiFi Authentication

This guide explains how to configure a Captive Portal for HiveManager and integrate authentication with IronWiFi.

Step 1: IronWiFi Console Configuration

1. Log in to the IronWiFi Console

   • Or register for free.

2. Create a New Network

   • Navigate to "Networks" and add a new network.

3. Create a New Captive Portal

   • Select Aerohive as the vendor.

Step 2: HiveManager Access Point Configuration

Note: You must be using HiveManager 6.4r1 or above. Earlier versions are not supported.

2.1 Initial Setup

1. Log in to your HiveManager Web Interface.

2. Go to Configuration (top menu).

3. Click on Guided Configuration (left menu).

2.2 Create a Network Policy

1. Under Choose Network Policy, click New.

2. Configure the policy as follows:

   • Name: GuestWiFi

   • Wireless Access: Enabled

   • Switching: Disabled

   • Branch Routing: Disabled

   • Bonjour Gateway: Disabled

3. Click Create to proceed.

2.3 Configure SSID

1. Next to SSIDs, click Choose.

2. Click New and configure:

   • Profile Name: guestwifi

   • SSID: Guest WiFi (or a custom name)

   • Enable Captive Web Portal: Enabled

   • Leave other settings at default.

3. Click Save, then OK.

2.4 Captive Web Portal Login Settings

1. Click + New under Captive Web Portal and configure:

   • Name: guestwifi

   • Registration Type: External Authentication

2. Under Login Page Settings:

   • Login URL: (value from IronWiFi)

   • Password Encryption: No encryption

   • Authentication Method: PAP

3. Under Success Page Settings:

   • Show the success page...: Disabled

   • After a successful login: Redirect to an external page

   • Simple URL Address: (your redirect URL)

4. Under Optional Advanced Configuration:

   • Use network default: Enabled

   • Use HTTP 302 for redirection: Enabled

   • Enable HTTPS: No

5. Under Walled Garden, add:

   • 107.178.250.42

   • (Add more entries if needed for SAML, social logins, etc.)

6. Click Save.

2.5 RADIUS Server Configuration

1. Click + New under RADIUS Settings and configure:

   • RADIUS Name: guest

2. Under Add a New RADIUS Server:

   • IP Address / Domain Name: (value from IronWiFi)

   • Server Type: Auth/Acct

   • Shared Secret: (value from IronWiFi)

   • Confirm Secret: (repeat secret)

   • Server Role: Primary

   • Click Apply.

3. Click New to add a secondary server:

   • IP Address / Domain Name: (value from IronWiFi)

   • Server Type: Auth/Acct

   • Shared Secret: (value from IronWiFi)

   • Confirm Secret: (repeat secret)

   • Server Role: Backup1

   • Click Apply.

4. Click Save.

2.6 User Profile and Advanced Settings

1. Under User Profile, click Add/Remove.

   • Select default-profile.

   • Click Save.

2. Under Advanced Settings, click Edit.

   • Go to Service Settings.

   • Under ALG Services, click the + (Plus) icon.

   • Configure:

     • Name: guestwifi

     • DNS: Enabled

     • HTTP: Enabled

   • Click Save.

   • Click Save again at the top right.

2.7 Apply Configuration to Access Points

1. Click Continue at the top right.

2. Select which access points to apply the new settings to (typically all APs).

3. Click Update > Update Devices.

4. Click Update.

Important Notice

✅ You must install a valid SSL certificate on your controller/access points to prevent authentication issues with the Captive Portal.