Omada Controller v5

CONFIGURATION GUIDE

The purpose of the following manual is to describe the necessary configuration of Omada controler equipment for integration with Octopus Platform

1- Pre-requisites

• If there is a firewall in the network that might block the traffic, you will need to allow access to some domains to enable user's authentication:

  • Radius Servers:

    • Primary: <IP_Radius_1> 1812 and 1813 UDP ports

    • Secondary: <IP_Radius_2> 1812 and 1813 UDP ports

  • Splash Portal server: 

    • Domain <captive_portal_domain> 80 and 443 TCP ports

• For the operation of the Guest and Enterprise modules configuration, it will be necessary to previously contract the Octopus platform licenses with the respective modules.

2- Guest module configuration

2.1 WLAN Configuration

First step is to create a new WLAN Group. To do this, access to Settings > Wireless Networks and add a new WLAN Group by clicking on the Create New Group icon:

Open

Set the desired name and click on Apply:

Open

Once added, next step would be to create an SSID associated with this new WLAN Group. To do this, click on the Create New Network button and fill in the following parameters:

2.2 Radius Servers

Now we will add the radius to be used for validation in the captive portal, to do this we access Settings > Authentication > RADIUS Profile and click on Create New RAIUS Profile and fill in the following parameters:

2.3 Captive Portal

Next, add the new Splash Portal for user validation. To do this, go to Settings > Authentication > Portal and click on the Create New Portal icon. Once the drop-down menu opens, fill in the following parameters:

2.4 Walled Garden

To add free access domains, click on the Add icon and add the necessary domains with the following configuration:

2.5 APs Configuration

2.6 Authorized MAC Addresses

In order to allow the users to authenticate themselves in the captive portal correctly, it is necessary to identify the NAS that will send the authentication requests to the Radius Server. In this case, it is required to add the MAC address of every Access Point that will radiate the configured SSID.

3- Enterprise module configuration

In order to integrate the configurations of this module with the platform, it is necessary to contract the Octopus Wifi Enterprise Module.

3.1 Captive portal + MAC Authentication Configuration

If you wish to configure the functionality that would allow MACs registered on the WIFI platform to be validated a second time directly without the captive portal appearing to users, additional configuration is required.

Go to Settings > Authentication > MAC-Based Authentication and activate the MAC-Based Authentication

3.2 MAC Authentication Configuration

To create an SSID dedicated to MAC Authentication validation only, go to Wireless Settings > Wireless Networks and add a new WLAN by clicking on + Create New Wireless Network:

Then go to Settings > Authentication > MAC-Based Authentication and activate the MAC-Based Authentication function.

3.3 Configuration of “Access Profiles” funtionality in the Octopus Platform

Through the Octopus platform it is possible to configure a series of reply attributes of the Access-Accept packages, grouped in the so-called Access Profile. These Access Profiles allow to activate a series of functionalities in the Omada. Although the most common and proprietary Omada radius dictionaries are available, the following is a list of some of the most interesting ones: