Aruba IAP - passpoint configuration - direct

Aruba IAP - passpoint configuration - direct

 

hs2-osu-icon-download 1 http://oceanindo.com/assets/upload/image/user3-128x128.jpg

 

Step 1: Creating ANQP and H2QP Advertisement Profiles

configure terminal

 

(Instant AP)(config)#

hotspot anqp-nai-realm-profile nr1

nai-realm-name ironwifi.net

nai-realm-encoding utf8

nai-realm-eap-method eap-ttls

nai-realm-auth-id-1 non-eap-inner-auth

nai-realm-auth-value-1 pap

nai-home-realm

exit

 

(Instant AP)(config)#

hotspot anqp-venue-name-profile vn1

venue-group business

venue-type research-and-dev-facility

venue-lang-code eng

venue-name Venue001

exit

 

(Instant AP)(config)#

hotspot anqp-nwk-auth-profile na1

nwk-auth-type online-enrollment

exit

 

(Instant AP)(config)#

hotspot anqp-roam-cons-profile rc1

roam-cons-oi-len 3

roam-cons-oi AA146B

exit

 

(Instant AP)(config)#

hotspot anqp-3gpp-profile 3g1

3gpp-plmn1 310026

exit

 

(Instant AP)(config)#

hotspot anqp-ip-addr-avail-profile ip1

ipv4-addr-avail public

ipv6-addr-avail not-available

exit

 

(Instant AP)(config)#

hotspot anqp-domain-name-profile dn1

domain-name ironwifi.net

exit

 

(Instant AP)(config)#

hotspot h2qp-oper-name-profile on1

op-lang-code eng

op-fr-name OperatorFriendlyName

exit

 

(Instant AP)(config) #

hotspot h2qp-conn-cap-profile cc1

esp-port

icmp

tcp-ftp

tcp-http

tcp-pptp-vpn

tcp-ssh

tcp-tls-vpn

tcp-voip

udp-ike2

udp-ipsec-vpn

udp-voip

enable

exit

 

(Instant AP)(config) #

hotspot h2qp-oper-class-profile oc1

op-class 1

enable

exit

 

(Instant AP) (config) #

hotspot h2qp-osu-provider-profile osu1

frnd-name-count 1

frnd-name1-lang-code "eng"

frnd-name1 "SP Red Test Only"

iconfile-count 1

icon1-width 128

icon1-height 128

icon1-lang-code eng

icon1-type image/jpeg

icon1-filename "user3-128x128.jpg"

srvcdesc-count 1

srvc-desc1-lang-code eng

srvc-desc1 "Free service for test purpose"

osu-server-uri https://osu.passpoint.net/hs20/spp.php/signup?realm=example.com

osu-method SOAP-XML

exit

 

(Instant AP)(config)#

hotspot h2qp-wan-metrics-profile wm1

downlink-load 1

downlink-speed 100000000

load-duration 100

symm-link

uplink-load 1

uplink-speed 100000000

exit

 

Step 2: Creating a hotspot profile

(Instant AP)(config)#

hotspot hs-profile hs1

enable

no comeback-mode

gas-comeback-delay 100

no asra

internet

qos-map-excp 35-2,16-6

qos-map-range 08-0F,00-07,FF-FF,10-1F,20-27,FF-FF,28-2F,30-3F

query-response-length-limit 2

access-network-type chargeable-public

roam-cons-len-1 3

roam-cons-oi-1 AA146B

addtl-roam-cons-ois 0

venue-group business

venue-type research-and-dev-facility

pame-bi

group-frame-block

p2p-dev-mgmt

p2p-cross-connect

exit

 

Step 3 (Optional): Creating a hotspot profile for OSEN

(Instant AP) (config) #

hotspot hs-profile hs2

osen

enable

exit

 

Step 4: Associating advertisement profiles with the hotspot profile

(Instant AP)(config)#

hotspot hs-profile hs1

advertisement-profile anqp-nai-realm nr1

advertisement-profile anqp-venue-name vn1

advertisement-profile anqp-nwk-auth na1

advertisement-profile anqp-roam-cons rc1

advertisement-profile anqp-3gpp 3g1

advertisement-profile anqp-ip-addr-avail ip1

advertisement-profile anqp-domain-name dn1

advertisement-profile h2qp-oper-name on1

advertisement-profile h2qp-wan-metrics wm1

advertisement-profile h2qp-conn-cap cc1

advertisement-profile h2qp-oper-class oc1

advertisement-profile h2qp-osu-provider osu1

exit

 

Step 5: Associating the hotspot profile with production WLAN SSID:

(Instant AP)# configure terminal

 

wlan ssid-profile ssidProfile1

essid hsProf

type employee

opmode wpa2-aes

auth-server RADIUS1

hotspot-profile hs1

exit

 

Step 6 (Only if Step 3 is configured): Associating OSEN hotspot profile with an SSID that broadcasts OSEN capable network:

 

(Instant AP)# configure terminal

wlan ssid-profile OSU-SSID

hotspot-profile hs2

 

exit

exit

commit apply

 

Delete settings - 

no wlan ssid-profile OSU-SSID

no wlan ssid-profile ssidProfile1

no hotspot hs-profile hs2

no hotspot hs-profile hs1

no hotspot h2qp-wan-metrics-profile wm1

no hotspot h2qp-oper-class-profile oc1

no hotspot anqp-nai-realm-profile nr1

no hotspot anqp-venue-name-profile vn1

no hotspot anqp-nwk-auth-profile na1

no hotspot anqp-roam-cons-profile rc1

no hotspot anqp-3gpp-profile 3g

no hotspot h2qp-conn-cap-profile cc1

no hotspot h2qp-oper-name-profile on1

 

 

no hotspot anqp-nai-realm-profile nr1

no hotspot anqp-venue-name-profile vn1

no hotspot anqp-nwk-auth-profile na1

no hotspot anqp-roam-cons-profile rc1

no hotspot anqp-ip-addr-avail-profile ip1

no hotspot anqp-domain-name-profile dn1

no hotspot h2qp-wan-metrics-profile wm1

no hotspot h2qp-oper-class-profile oc1

 

no hotspot anqp-3gpp-profile 3g1

no hotspot anqp-ip-addr-avail-profile ip1

no hotspot anqp-domain-name-profile dn1

no hotspot h2qp-osu-provider-profile osu1

 

 

no hotspot anqp-3gpp-profile 3g1

no hotspot anqp-ip-addr-avail-profile ip1

no hotspot anqp-domain-name-profile dn1

no hotspot h2qp-oper-name-profile on1

no hotspot h2qp-conn-cap-profile cc1


no hotspot h2qp-osu-provider-profile osu1

    • Related Articles

    • Aruba IAP - passpoint configuration

      Step 1: Creating ANQP and H2QP Advertisement Profiles (Instant AP)# configure terminal (Instant AP)(config)# hotspot anqp-nai-realm-profile nr1 (Instant AP)(nai-realm "nr1")# nai-realm-name name1 (Instant AP)(nai-realm "nr1")# nai-realm-encoding utf8 ...
    • Aruba wireless LAN controller - Passpoint configuration

      Prerequisites This user guide applies to Aruba Mobility Controllers with AOS 8.x or later. AOS 6.4.x is the minimum version to support Passpoint capabilities. Access to the Aruba wireless LAN controller as a user with administrative privileges. ...
    • Aruba Virtual Controller & Captive Portal

      This page explains basic configuration for Aruba Virtual Controller and external Captive Portal with RADIUS authentication. Sign-in to the Aruba Administration console Navigate to Network -> Edit and open configuration settings of a network that ...
    • Cambium cnMaestro - Passpoint configuration

      Prerequisites Access to the cnMaestro Dashboard as a user with administrative privileges. Information about the assigned RADIUS servers (Server IP address, port numbers, shared secrets): Email or document that contains this information OR Access to ...
    • OpenWrt - Passpoint configuration

      Prerequisites OpenWrt compatible device with Passpoint-capable wireless device (PHY). OpenWrt 21.02, or newer, including wpad (hostapd) built with hs20 option. Full version of iw package in OpenWrt. 802.1x infrastructure (RADIUS server). Information ...