Avaya

Avaya

This page explains the configuration of Avaya wireless access points for external Captive Portal and RADIUS server authentication.

IronWiFi Console Configuration

  1. Log into the IronWiFi console or register for free
  2. Create a new network
  3. After that, create a new captive portal, with vendor Avaya

Access Point Configuration

IMPORTANT NOTICE: Your device must be running 7.0 firmware or above to continue.

Open a web browser and log in to your Avaya AP web interface.

Click on "Security" on the left menu and select "External Radius" on the sub menu.

Under RADIUS Attribute Formatting:

  • Called-Station-Id Attribute Format: Ethernet-MAC
  • Station MAC Format: UC-hyphenated (XX-XX-XX-XX-XX-XX)
  • Accounting: On

Under Accounting:

  • Accounting Interval: 300

Click Save changes to flash at the top right of the page.

Next, click on SSIDs on the left and then SSID Management on the sub menu.

Underneath the current SSID's, enter Guest WiFi and click on Create

This will create the new SSID. You now have access to the following settings. Please set the following:

  • SSID: Ticked
  • Brdcst: Ticked
  • Encryption: None/Open and untick the Global checkbox
  • WPR: Ticked

Next, scroll down the page and under SSID Guest WiFi Web Page Redirection Configuration, set the following:

  • Landing Page URL: get this value from the IronWiFi console
  • Server: External Login
  • Redirect URL: get this value from the IronWiFi console
  • Redirect Secret: get this value from the IronWiFi console

Next, under SSID Guest WiFi WPR Whitelist Configuration:

IMPORTANT: You will need to add the below entries one by one until you have them all listed.

107.178.250.42

If you need to load resources from external servers (SAML, social login), you will need to add other entries as well, instructions to configure the walled garden list in this case are available here.

Next, under SSID Guest WiFi Authentication Service Configuration:

Enter the following information:

  • Authentication Server: External Radius

Under Primary:

  • Host / IP Address: get this value from the IronWiFi console
  • Port: get this value from the IronWiFi console
  • Shared Secret: get this value from the IronWiFi console
  • Verify Secret: get this value from the IronWiFi console

Under Secondary:

  • Host / IP Address: get this value from the IronWiFi console
  • Port: get this value from the IronWiFi console
  • Shared Secret: get this value from the IronWiFi console
  • Verify Secret: get this value from the IronWiFi console
  • Accounting: ticked

Under Primary:

  • Host / IP Address: get this value from the IronWiFi console
  • Port: get this value from the IronWiFi console
  • Shared Secret: get this value from the IronWiFi console
  • Verify Secret: get this value from the IronWiFi console

Under Secondary:

  • Host / IP Address: get this value from the IronWiFi console
  • Port: get this value from the IronWiFi console
  • Shared Secret: get this value from the IronWiFi console
  • Verify Secret: get this value from the IronWiFi console

Click Save changes to flash at the top right of the page.

! You must also install a valid SSL certificate on your controller/AP, in order to avoid authentication issues !