Skip to main content

IPERA Starling - Extreme Controllers Integration

Introduction

This guide shows how to configure an Extreme Network Vx9000 and access point for IPERA Starling platform.

Please note that the images contained in this article may contain outdated configuration data. You must check the data contained in the article "Parameters for the Configuration" at the bottom of the page as they are certainly up to date.

Screenshot 2024-08-07 121508.png

Prerequisites

The configuration procedure has been performed and tested on an Extreme Network Vx9000 controller, running the following firmware versions:

  • Wing 5.8.2
  • Wing 5.8.3

The following WLC (wireless controllers) models are supported:

  • RFS4000
  • NX5500
  • NX7500
  • NX9500
  • NX9600
  • VX9000

The following access point models are supported:

  • AP7522
  • AP7532
  • AP7502
  • AP6522
  • AP6562
  • AP7562
  • AP8533
  • AP8432
  • AP8132

Before integrating the controller with IPERA, it is necessary that:

  • The Extreme Controller and Access Points are connected to the Internet and reachable on the network
  • The Access Point has an IP address assigned and it is reachable through the network

Logging in to the Controller

To integrate the Controller with IPERA Starling platform, you need configure the controller using the following link with admin user credentials:

https://[CONTROLLER_IPAddress]/MainApp.html 




Configuring AAA parameters

The first step is configuring an AAA policy. You can do this by going to Configuration > Network > AAA Policy as shown in the picture below.

To add a new AAA policy, click on the Add button.

Then give a name (e.g.: IPERA-AAA) to it and click on Continue.

You will be redirected to a page where you are required to enter RADIUS server data. In the RADIUS Authentication tab, you have to enter the following data for the authentication phase:

  • Server Type
  • Host
  • Port
  • Secret

The screenshot below displays you how to configure this page. For updated values, please check the Parameters for the Configuration paragraph at the end of this article. Click on the OK button to save data.

After saving you will find your data as shown below.

Then move from the RADIUS Authentication tab to RADIUS Accounting.

As previously done, you have to enter the following data also for the accounting phase:

  • Server Type
  • Host
  • Port
  • Secret

For updated values, please check the Parameters for the Solution paragraph at the end of this article. Click on the OK button to save parameters

Configuring Captive Portal parameters

In the Configuration > Service section, in the Basic Configuration tab, you can add a new policy by clicking the Add button. You need to enter the following parameters:

Settings

  • Captive Portal Server Mode
  • Captive Portal Server Host
  • Connection Mode

Security

  • AAA Policy: enter here the name of the policy you configured at the beginning

Access

  • Access Type

The screen below shows you how to configure this page. For updated values, please check the Parameters for the Solution paragraph at the end of this article.

Click on the OK button to save Parameter

Scroll down through the page and enable the Radius Accounting


In the same page, by switching to the Web Page tab, you have to configure WING TAG parameters in order to correctly communicate with the Splash Page.


You have to configure this part as follows.

  • Web Page Source
  • Login URL
  • Agreement URL
  • Welcome URL
  • Fail URL
  • Welcome Back URL
  • No service URL
  • Registration URL



Configuring the Walled Garden

In the Configuration > Service section in the Basic Configuration tab, when scrolling down, you can find other parameters as shown in the screenshot below

The DNS Whitelist parameter allows to set the walled garden. This is a list of Websites / Domains that end-users are able to browse / visit without logging in to the Wi-Fi network through Splash Page. Example: Your company web page domain, social networks, etc.


To update walled garden list, you need to click on the button Add Row and then manage your entries as shown in the picture below


Configure Device on IPERA Portal

For Controller and AP devices, you need to provide MAC Address information along with Model number to define on IPERA Starling portal. More details can be found here about how to add devices in IPERA portal: https://ipera.zendesk.com/hc/en-us/articles/115000237045

Parameters for the Configuration

Below you can find the updated parameters to enter when configuring your device.

AWS

Configuration > Network > AAA Policy (RADIUS Authentication tab)

   Server Type: Host
   Host: 35.156.39.198 
   Port: 1812
   Secret: (it will be communicated by IPERA)

 

   Server Type: Host
   Host: 35.156.23.166
   Port: 1812
   Secret: (it will be communicated by IPERA)

 

Configuration > Network > AAA Policy, RADIUS Accounting tab

   Server Type: Host
   Host: 35.156.39.198 
   Port: 1813
   Secret: (it will be communicated by IPERA)

 

   Server Type: Host
   Host: 35.156.23.166
   Port: 1813
   Secret: (it will be communicated by IPERA)

 

Configuration > Service, Basic Configuration tab, Settings

   Captive Portal Server Mode: Centralized
   Captive Portal Server Host: (it is the IP address of the VX9000 Controller server, e.g.: VX9000 IP Address)
   Connection Mode: HTTP

 

Configuration > Service, Basic Configuration tab, Access

   Access Type: RADIUS Authentication

 

Configuration > Service, Web Page

Web Page Source: Externally Hosted

Login URL: https://engage.iperawifi.com/onboarding/?client_mac=WING_TAG_CLIENT_MAC&client_ip=WING_TAG_CLIENT_IP&ap_mac=WING_TAG_AP_MAC

Agreement URL: https://engage.iperawifi.com/onboarding/?client_mac=WING_TAG_CLIENT_MAC&client_ip=WING_TAG_CLIENT_IP&ap_mac=WING_TAG_AP_MAC

Welcome URL: https://engage.iperawifi.com/onboarding/?res=success

Fail URL: https://engage.iperawifi.com/onboarding/?res=fail

Welcome Back URL: https://engage.iperawifi.com/onboarding/?res=success

No service URL: https://engage.iperawifi.com/onboarding/?client_mac=WING_TAG_CLIENT_MAC&client_ip=WING_TAG_CLIENT_IP&ap_mac=WING_TAG_AP_MAC

Registration URL: https://engage.iperawifi.com/onboarding/?client_mac=WING_TAG_CLIENT_MAC&client_ip=WING_TAG_CLIENT_IP&ap_mac=WING_TAG_AP_MAC

 

Azure

Configuration > Network > AAA Policy (RADIUS Authentication tab)

   Server Type: Host
   Host: 20.174.25.122
   Port: 1812
   Secret: (it will be communicated by IPERA)

 

   Server Type: Host
   Host: 20.174.42.3
   Port: 1812
   Secret: (it will be communicated by IPERA)

 

Configuration > Network > AAA Policy, RADIUS Accounting tab

   Server Type: Host
   Host: 20.174.25.122
   Port: 1813
   Secret: (it will be communicated by IPERA)

 

   Server Type: Host
   Host: 20.174.42.3
   Port: 1813
   Secret: (it will be communicated by IPERA)

 

Configuration > Service, Basic Configuration tab, Settings

   Captive Portal Server Mode: Centralized
   Captive Portal Server Host: (it is the IP address of the VX9000 Controller server, e.g.: VX9000 IP Address)
   Connection Mode: HTTP

 

Configuration > Service, Basic Configuration tab, Access

   Access Type: RADIUS Authentication

 

Configuration > Service, Web Page

Web Page Source: Externally Hosted

Login URL: https://me.iperawifi.com/onboarding/?client_mac=WING_TAG_CLIENT_MAC&client_ip=WING_TAG_CLIENT_IP&ap_mac=WING_TAG_AP_MAC

Agreement URL: https://me.iperawifi.com/onboarding/?client_mac=WING_TAG_CLIENT_MAC&client_ip=WING_TAG_CLIENT_IP&ap_mac=WING_TAG_AP_MAC

Welcome URL: https://me.iperawifi.com/onboarding/?res=success

Fail URL: https://me.iperawifi.com/onboarding/?res=fail

Welcome Back URL: https://me.iperawifi.com/onboarding/?res=success

No service URL: https://me.iperawifi.com/onboarding/?client_mac=WING_TAG_CLIENT_MAC&client_ip=WING_TAG_CLIENT_IP&ap_mac=WING_TAG_AP_MAC

Registration URL: https://me.iperawifi.com/onboarding/?client_mac=WING_TAG_CLIENT_MAC&client_ip=WING_TAG_CLIENT_IP&ap_mac=WING_TAG_AP_MAC

Related articles

Comments

0 comments

Please sign in to leave a comment.