Guest access – Aerohive (Extreme)

In this topic, you will learn how to configure legacy Aerohive devices using the Extreme Cloud IQ (previously HiveManager) to work together with the Portnox™ Cloud captive portal for guest user authentication.

Before you begin configuring your access point, you must configure the guest network in Portnox Cloud and note down the values of the fields: IP (for walled garden), Captive Portal URL, and Shared secret.

Warning: This topic contains documentation prepared by our support agents more than 12 months ago. It may not cover the newest models or the newest interfaces of NAS devices. We’re working on bringing you updated documentation for NAS devices in the near future. However, the methods of setting up third-party devices may still change when the manufacturers update their firmware or release new models. Therefore, to get the most accurate and current configuration guidance, we strongly recommend that you refer to the documentation provided by the manufacturer. If you need help setting up newer equipment that does not match the description in this topic, contact us at support@portnox.com.
  1. In Extreme Cloud IQ, navigate to Configure > Add Network Policy, and add a new network policy or edit an existing one.
  2. Navigate to Configure > Wireless Networks, add a new SSID, and then select Add Standard Network.
  3. In the Wireless Networks tab, do the following:

    1. Specify Name (SSID).
    2. In SSID Authentication, select Open.
    3. Activate the switch Enable Captive Web Portal.
    4. Select User Auth on Captive Web Portal and deselect Enable UPA.
    5. In Choose Authentication Type, select Redirect to External URL for Authentication.
  4. Add a default Captive Web Portal:

    1. Specify the Name.
    2. In Login URL, enter the Captive Portal URL that you obtained when you configured the guest network in Portnox Cloud.
    3. In Password Encryption, select No Encryption.
    4. In Authentication Method, select MS-CHAP V2.
    5. In Walled Garden, click on +, and as Service Type, select Advanced.
    6. As IP Object/Host Name, add the IP (for walled garden) values that you obtained when you configured the guest network in Portnox Cloud and in Service, select All.

    7. Click on SAVE CWP.
  5. In Authentication Settings > Authenticate via RADIUS Server, click on + to add a new RADIUS server.
  6. Specify the RADIUS Server Group Name and click on + to add a new external RADIUS server. Then, enter the details of the Portnox Cloud RADIUS server that you created earlier: the IP/Host Name, the Authentication Port, the Accounting Port, and the Shared Secret, and click on Save External RADIUS.

  7. Select the RADIUS server and click on Save RADIUS.

  8. Select the relevant SSID, Add a new AP Template, and click on Next.

  9. Select Apply the network policy to selected devices.