TP-Link OMADA Passpoint

TP-Link OMADA Passpoint


Notes
This guide requires Passpoint enabled firmware on both the controller and Access Point.
The lastest stable firmware for the controller is 1.30.7 Build 20250704 Rel.78617 (Stable), and you need to have the lastes dev / testing firmware installed on the AP for the 802.11u extensions to be broadcasted on the configured SSID. We have tested it on EAP670(EU) v2.0 running version 1.3.50.

Prerequisites

You will need Radius IP address, port numbers for auth and accounting and Radius secret - you can get them from the Network section in our Console.

Configuration steps

Log in to your controller management GUI.
Select the site in which you want to configure Passpoint SSID.
Navigate to Settings -> Network Profile, click on RADIUS Profile



Click +Create New RADIUS Profile.

Fill all the necessary fields using your details from the Console



Click Save

Navigate to Settings -> Wired & Wireless Networks, click on WLAN


Click +Create New Wireless Network

Select WPA Enterprise in Security and select the RADIUS Profile that you have created in the previous step.


Click + Hotspot 2.0 to open the branch, click Enable and configure Roaming Consortioum Oi, click Enable the  Internet option and select correct Network Availablility according to your environment



In the NAI Realm list click Add New Realm, use ironwifi.net as the Realm name, select EAP-TTLS as the EAP Method and select None-EAP Inner Authentication Type with PAP as Authentication param


Click Confirm to add the details and click Save to create and publish the SSID.


    • Related Articles

    • TP Link Omada (version 4)

      This page explains the configuration of TP Link access points with Omada version 4 controller for external Captive Portal and RADIUS authentication. IronWiFi Console Configuration Log into the IronWiFi console or register for free Create a new ...

    • TP-Link EAP

      This page explains the configuration of TP-Link wireless access points in standalone mode or managed by the EAP controller. We will configure the device to use an external Captive Portal and RADIUS server authentication. IronWiFi Console ...

    • Invalid Signature error when downloading Passpoint profile on Windows

      Due to change of logic introduced in Windows update in the past few months, that was seemingly reversed in the latest Experience Pack, whilst downloading Passpoint profile on Windows machine from the Captive Portal environment, you might encounter ...

    • Meraki - Passpoint configuration

      Prerequisites Access to the Meraki Dashboard as a user with administrative privileges. Supported Meraki device - this solution works with all devices of the MR series. Information about the assigned RADIUS servers (Server IP address, port numbers, ...

    • Juniper Mist OpenRoaming with RadSec

      Prerequisites Access to the Mist Dashboard as a user with administrative privileges. Access to the IronWiFi Management Console - Sign in or Open Account RadSec enabled on your Network as detailed here (you will need to download the certificate ...