Aruba IAP - passpoint configuration

Aruba IAP - passpoint configuration

Step 1: Creating ANQP and H2QP Advertisement Profiles

(Instant AP)# configure terminal

(Instant AP)(config)# hotspot anqp-nai-realm-profile nr1

(Instant AP)(nai-realm "nr1")# nai-realm-name name1

(Instant AP)(nai-realm "nr1")# nai-realm-encoding utf8

(Instant AP)(nai-realm "nr1")# nai-realm-eap-method eap-sim

(Instant AP)(nai-realm "nr1")# nai-realm-auth-id-1 non-eap-inner-auth

(Instant AP)(nai-realm "nr1")# nai-realm-auth-value-1 mschapv2

(Instant AP)(nai-realm "nr1")# nai-home-realm

(Instant AP)(nai-realm "nr1")# exit

 

(Instant AP)(config)# hotspot anqp-venue-name-profile vn1

(Instant AP)(venue-name "vn1")# venue-group business

(Instant AP)(venue-name "vn1")# venue-type research-and-dev-facility

(Instant AP)(venue-name "vn1")# venue-lang-code eng

(Instant AP)(venue-name "vn1")# venue-name VenueName

(Instant AP)(venue-name "vn1")# exit

 

(Instant AP)(config)# hotspot anqp-nwk-auth-profile na1

(Instant AP)(network-auth "na1")# nwk-auth-type accept-term-and-cond

(Instant AP)(network-auth "na1")# url www.nwkauth.com

(Instant AP)(network-auth "na1")# exit

 

(Instant AP)(config)# hotspot anqp-roam-cons-profile rc1

(Instant AP)(roaming-consortium "rc1")# roam-cons-oi-len 3

(Instant AP)(roaming-consortium "rc1")# roam-cons-oi 888888

(Instant AP)(roaming-consortium "rc1")# exit

 

(Instant AP)(config)# hotspot anqp-3gpp-profile 3g

(Instant AP)(3gpp "3g")# 3gpp-plmn1 40486

(Instant AP)(3gpp "3g")# exit

 

(Instant AP)(config)# hotspot anqp-ip-addr-avail-profile ip1

(Instant AP)(IP-addr-avail "ip1")# no ipv4-addr-avail

(Instant AP)(IP-addr-avail "ip1")# ipv6-addr-avail

(Instant AP)(IP-addr-avail "ip1")# exit

 

(Instant AP)(config)# hotspot anqp-domain-name-profile dn1

(Instant AP)(domain-name "dn1")# domain-name DomainName

(Instant AP)(domain-name "dn1")# exit

 

(Instant AP)(config)# hotspot h2qp-oper-name-profile on1

(Instant AP)(operator-friendly-name"on1")# op-lang-code eng

(Instant AP)(operator-friendly-name"on1")# op-fr-name OperatorFriendlyName

(Instant AP)(operator-friendly-name"on1")# exit

 

(Instant AP)(config) # hotspot h2qp-conn-cap-profile cc1

(Instant AP)(connection-capabilities "cc1")# esp-port

(Instant AP)(connection-capabilities "cc1")# icmp

(Instant AP)(connection-capabilities "cc1")# tcp-ftp

(Instant AP)(connection-capabilities "cc1")# tcp-http

(Instant AP)(connection-capabilities "cc1")# tcp-pptp-vpn

(Instant AP)(connection-capabilities "cc1")# tcp-ssh

(Instant AP)(connection-capabilities "cc1")# tcp-tls-vpn

(Instant AP)(connection-capabilities "cc1")# tcp-voip

(Instant AP)(connection-capabilities "cc1")# udp-ike2

(Instant AP)(connection-capabilities "cc1")# udp-ipsec-vpn

(Instant AP)(connection-capabilities "cc1")# udp-voip

(Instant AP)(connection-capabilities "cc1")# enable

(Instant AP)(connection-capabilities "cc1")# exit

 

(Instant AP)(config) # hotspot h2qp-oper-class-profile oc1

(Instant AP)(operator-class "oc1")# op-class <class-ID>

(Instant AP)(operator-class "oc1")# enable

(Instant AP)(operator-class "oc1")# exit

 

(Instant AP) (config) # hotspot h2qp-osu-provider-profile osu1

(Instant AP) (osu-provider "osu1") # frnd-name-count 2

(Instant AP) (osu-provider "osu1") # frnd-name1-lang-code "eng"

(Instant AP) (osu-provider "osu1") # frnd-name1 "SP Red Test Only"

(Instant AP) (osu-provider "osu1") # frnd-name1-hex

(Instant AP) (osu-provider "osu1") # frnd-name2-lang-code "kor"

(Instant AP) (osu-provider "osu1") # frnd-name2 ""

(Instant AP) (osu-provider "osu1") # frnd-name2-hex 535020ebb9a8eab09520ed858cec8aa4ed8ab820eca084ec9aa9

(Instant AP) (osu-provider "osu1") # iconfile-count 2

(Instant AP) (osu-provider "osu1") # icon1-width 128

(Instant AP) (osu-provider "osu1") # icon1-height 61

(Instant AP) (osu-provider "osu1") # icon1-lang-code zxx

(Instant AP) (osu-provider "osu1") # icon1-type image/png

(Instant AP) (osu-provider "osu1") # icon1-file 1 "icon_red_zxx.png"

(Instant AP) (osu-provider "osu1") # icon2-width 160

(Instant AP) (osu-provider "osu1") # icon2-height 76

(Instant AP) (osu-provider "osu1") # icon2-lang-code eng

(Instant AP) (osu-provider "osu1") # icon2-type image/png

(Instant AP) (osu-provider "osu1") # icon2-file 2 "icon_red_eng.png"

(Instant AP) (osu-provider "osu1") # srvcdesc-count 2

(Instant AP) (osu-provider "osu1") # srvc-desc1-lang-code eng

(Instant AP) (osu-provider "osu1") # srvc-desc1 "Free service for test purpose"

(Instant AP) (osu-provider "osu1") # srvc-desc1-hex

(Instant AP) (osu-provider "osu1") # srvc-desc2-lang-code kor

(Instant AP) (osu-provider "osu1") # srvc-desc2 ""

(Instant AP) (osu-provider "osu1") # srvc-desc2-hex ed858cec8aa4ed8ab820ebaaa9eca081ec9cbceba19c20ebacb4eba38c20ec849cebb984ec8aa4

(Instant AP) (osu-provider "osu1") # osu-server-uri https://osu-server.r2-testbed-aru.wi-fi.org:443/guest/HotSpot2OnlineSignUp.php

(Instant AP) (osu-provider "osu1") # osu-method SOAP-XML

(Instant AP)(WAN-metrics "osu1")# exit

 

(Instant AP)(config)# hotspot h2qp-wan-metrics-profile wm1

(Instant AP)(WAN-metrics "wm1")# at-capacity

(Instant AP)(WAN-metrics "wm1")# downlink-load <load>

(Instant AP)(WAN-metrics "wm1")# downlink-speed <speed>

(Instant AP)(WAN-metrics "wm1")# load-duration <duration>

(Instant AP)(WAN-metrics "wm1")# symm-link

(Instant AP)(WAN-metrics "wm1")# uplink-load <load>

(Instant AP)(WAN-metrics "wm1")# uplink-speed <speed>

(Instant AP)(WAN-metrics "wm1")# wan-metrics-link-status <status>

(Instant AP)(WAN-metrics "wm1")# exit

Step 2: Creating a hotspot profile

(Instant AP)# configure terminal

(Instant AP)(config)# hotspot hs-profile hs1

(Instant AP)(Hotspot2.0 "hs1")# enable

(Instant AP)(Hotspot2.0 "hs1")# comeback-mode

(Instant AP)(Hotspot2.0 "hs1")# gas-comeback-delay 100

(Instant AP)(Hotspot2.0 "hs1")# no asra

(Instant AP)(Hotspot2.0 "hs1")# no internet

(Instant AP)(Hotspot2.0 "hs1")# osu-ssid OSU-SSID

(Instant AP)(Hotspot2.0 "hs1")# qos-map-excp 35-2,16-6

(Instant AP)(Hotspot2.0 "hs1")# qos-map-range 08-0F,00-07,FF-FF,10-1F,20-27,FF-FF,28-2F,30-3F

(Instant AP)(Hotspot2.0 "hs1")# query-response-length-limit 2

(Instant AP)(Hotspot2.0 "hs1")# access-network-type chargeable-public

(Instant AP)(Hotspot2.0 "hs1")# roam-cons-len-1 3

(Instant AP)(Hotspot2.0 "hs1")# roam-cons-oi-1 123456

(Instant AP)(Hotspot2.0 "hs1")# roam-cons-len-2 3

(Instant AP)(Hotspot2.0 "hs1")# roam-cons-oi-2 223355

(Instant AP)(Hotspot2.0 "hs1")# addtl-roam-cons-ois 0

(Instant AP)(Hotspot2.0 "hs1")# venue-group business

(Instant AP)(Hotspot2.0 "hs1")# venue-type research-and-dev-facility

(Instant AP)(Hotspot2.0 "hs1")# pame-bi

(Instant AP)(Hotspot2.0 "hs1")# group-frame-block

(Instant AP)(Hotspot2.0 "hs1")# p2p-dev-mgmt

(Instant AP)(Hotspot2.0 "hs1")# p2p-cross-connect

Step 3 (Optional): Creating a hotspot profile for OSEN

(Instant AP) (config) # hotspot hs-profile hs2

(Instant AP) (Hotspot2.0 "hs2") # osen

(Instant AP) (Hotspot2.0 "hs2") # no enable

Step 4: Associating advertisement profiles with the hotspot profile

(Instant AP)# configure terminal

(Instant AP)(config)# hotspot hs-profile hs1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-nai-realm-profile nr1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-venue-name-profile vn1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-nwk-auth-profile na1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-roam-cons-profile rc1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-3gpp-profile 3g1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-ip-addr-avail-profile ip1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile anqp-domain-name-profile dn1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-oper-name-profile on1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-wan-metrics-profile wm1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-conn-cap-profile cc1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-oper-class-profile oc1

(Instant AP)(Hotspot2.0 "hs1")# advertisement-profile h2qp-osu-provider-profile osu1

Step 5: Associating the hotspot profile with production WLAN SSID:

(Instant AP)# configure terminal

(Instant AP)# wlan ssid-profile ssidProfile1

(Instant AP)(SSID Profile "ssidProfile1")# essid hsProf

(Instant AP)(SSID Profile "ssidProfile1")# type employee

(Instant AP)(SSID Profile "ssidProfile1")# vlan 200

(Instant AP)(SSID Profile "ssidProfile1")# opmode wpa2-aes

(Instant AP)(SSID Profile "ssidProfile1")# auth-server RADIUS1

(Instant AP)(SSID Profile "ssidProfile1")# hotspot-profile hs1

Step 6 (Only if Step 3 is configured): Associating OSEN hotspot profile with an SSID that broadcasts OSEN capable network:

(Instant AP)# configure terminal

(Instant AP)# wlan ssid-profile OSU-SSID

(Instant AP)(SSID Profile "OSU-SSID")# hotspot-profile hs2

 

exit

exit

commit apply

    • Related Articles

    • Aruba IAP - passpoint configuration - direct

      hs2-osu-icon-download 1 http://oceanindo.com/assets/upload/image/user3-128x128.jpg Step 1: Creating ANQP and H2QP Advertisement Profiles configure terminal (Instant AP)(config)# hotspot anqp-nai-realm-profile nr1 nai-realm-name ironwifi.net ...

    • Aruba wireless LAN controller - Passpoint configuration

      Prerequisites This user guide applies to Aruba Mobility Controllers with AOS 8.x or later. AOS 6.4.x is the minimum version to support Passpoint capabilities. Access to the Aruba wireless LAN controller as a user with administrative privileges. ...

    • Aruba Virtual Controller & Captive Portal

      This page explains basic configuration for Aruba Virtual Controller and external Captive Portal with RADIUS authentication. Sign-in to the Aruba Administration console Navigate to Network -> Edit and open configuration settings of a network that ...

    • Cambium cnMaestro - Passpoint configuration

      Prerequisites Access to the cnMaestro Dashboard as a user with administrative privileges. Information about the assigned RADIUS servers (Server IP address, port numbers, shared secrets): Email or document that contains this information OR Access to ...

    • OpenWrt - Passpoint configuration

      Prerequisites OpenWrt compatible device with Passpoint-capable wireless device (PHY). OpenWrt 21.02, or newer, including wpad (hostapd) built with hs20 option. Full version of iw package in OpenWrt. 802.1x infrastructure (RADIUS server). Information ...