Juniper Mist

CONFIGURATION GUIDE

The purpose of the following manual is to describe the necessary configuration of Juniper Mist equipment for integration with Octopus Platform.

1- Pre-requisites

Before starting the configuration you must log in to Juniper Mist: https://manage.mist.com/#!signout
If there is a firewall in the network that might block the traffic, you will need to allow access to some domains to enable user's authentication:
- Radius Servers:
  - Primary: <IP_Radius_1> 1812 and 1813 UDP ports
  - Secondary: <IP_Radius_2> 1812 and 1813 UDP ports
- Splash Portal server:
  - Domain <captive_portal_domain> 80 and 443 TCP ports
For the operation of the Guest and Enterprise modules configuration, it will be necessary to previously contract the Octopus platform licenses with the respective modules.

2- Guest module configuration

2.1 Create or edit WLAN WiFi Guest

Go to Network > WLANs > Select or create the WLAN to be used:

SSID: SSID of the network, Example: Wifi Guest

WLAN Status: Enable

Security: Open Access

2.2 Captive Portal

Guest Portal: Forward to external portal
Portal URL: https://captive_portal_domain>/login/hotspot/mist

2.3 Walled Garden

Allowed Hostnames:
- Enter all the domains you want to allow

If you wish to add extra domains (Social Networks, Paypal, etc...) they can be consulted from the following link.

Bypass guest/external portal in case of exception: Disable

Una vez terminado la configuración hacer click en Create

Re-enter the SSID created earlier and copy the following parameter generated in the API Secret platform

2.3 Authorized MAC Addresses

For user validation to work correctly in the WiFi platform it is necessary to identify the NAS that will be able to make authentication requests to the Radius Server. In this case, all the MAC addresses of the Access Points that will radiate the configured SSID must be added.

These MAC addresses are easily accessible within the Access Point tab, where all connected devices are shown in more detail.