IPERA Starling - TP Link Integration

Purpose

This guide shows how to configure TP Link Omada Controllers in the "Controller-AP" architecture, to use each Access Point as a Hotspot. 

Please use the latest IP Address and other parameters under the “Parameters for Configuration” section. The information in screenshots displayed in the document may not be updated.

TP Link Omada Controllers Configuration Steps:

This article applies to all TP Link controllers.

To correctly integrate a TP Link controller with the Solution, it is necessary that the AP:

• is connected to the Internet
• is reachable in the network

SSID Configuration

navigate to Settings > Wired & Wireless Network > WLAN

• Assign a network Name (SSID)
• Select security as None

Radius server configuration

navigate to Settings > Network Profile > RADIUS Profile

Click Add New Authentication server and enter details as follow

Click Add New Accounting Server and enter details as follow

Enable the RADIUS CoA

Web Portal Configuration

Navigate to Settings > Authentication > Portal > Create New Portal

Enter the details as follows

External Web Portal: https://engage.iperawifi.com/onboarding

The Promotional URL: https://engage.iperawifi.com/onboarding?res=success

In the access control tab and add the domains to the ACL list

It is mandatory to add the following domains to ACL

• engage.iperawifi.com
• static.iperawifi.com

If you wish to support social network logins, you need to add rules for domains below for each network you plan to support

Microsoft 365 (*)	login.microsoftonline.com	Google	accounts.google.com
	aadcdn.msauth.net		www.google.com
	login.live.com		fonts.gstatic.com
	akamaihd.net		play.google.com
	aadcdn.msftauth.net		ssl.gstatic.com
Facebook	www.facebook.com		accounts.youtube.com
	www.facebook.net		accounts.google.com
	static.xx.fbcdn.net	TikTok (**)	*.tiktok.com
Twitter	api.twitter.com		firebaseinstallations.googleapis.com
	abs-0.twimg.com		storage.googleapis.com
	pbs.twimg.com		*.ibytedtos.com
LinkedIn	www.linkedin.com		*.tiktokv.com
	static.licdn.com		open-api.tiktok.com
	media.licdn.com		www.tiktok.com
	ponf.linkedin.com		*.ttwstatic.com
	platform.linkedin.com		*.tiktokcdn.com
Apple	www.apple.com
	appleid.apple.com
	appleid.cdn-apple.com
	is4-ssl.mzstatic.com

(*) Please refer to the below URL if you wish to use Microsoft login method
https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/review-admin-consent-requests 

(**) Google, Facebook, Twitter, and Apple should be also added for TikTok

Parameters for the Configuration

AWS

   IPERA Radius IP Address (Primary): 35.156.39.198
   IPERA Radius IP Address (Secondary): 35.156.23.166
   Shared Secret: (it will be communicated in a separate e-mail)
   Authentication Port Number: 1812
   Accounting Port Number: 1813
   Redirect URL after login: https://engage.iperawifi.com/onboarding
   External Webauth URL: https://engage.iperawifi.com/onboarding?res=success

Azure

   IPERA Radius IP Address (Primary): 20.174.25.122
   IPERA Radius IP Address (Secondary): 20.174.42.3
   Shared Secret: (it will be communicated in a separate e-mail)
   Authentication Port Number: 1812
   Accounting Port Number: 1813
   Redirect URL after login: https://me.iperawifi.com/onboarding
   External Webauth URL: https://me.iperawifi.com/onboarding?res=success

Any changes on the above parameters and values will be communicated with IPERA customers in advance.