ARUBA MOBILITY CONTROLLER

Explains the steps to configure an Aruba Mobility Controller to work with Seara Cloud

ARUBA MOBILITY CONTROLLER SETUP SEARA CAPTIVE PORTAL

Configuration Authentication

Create a profile for the Seara RADIUS Authentication Server to invoke the Captive Portal page by adding a Server Group profile and defining the Seara RADIUS Server values as follows:

• Configuration >> Authentication >> Create Server Groups >> Create Servers

Configuration Server Options

• Configuration Server Options

Seara RADIUS Server configuration values are as follows:

IP Address : 137.184.xxx.xxx (IP Address Seara RADIUS Server)

Auth Port : 1812

Acct Port : 1813

Shared Key : refer to the Email sent to you

Configuration Server Options

• Once configured, click Submit >> Pending to save the settings.

Configuration Roles & Policies

Create a Roles & Policies profile for Seara RADIUS so that users can access the Internet after successful login.

• Configuration >> Roles & Policies >> Roles >> Create Roles

Select Rule Type as Access Control

• Once configured, click Submit >> Pending to save the settings.

Configuration Aliases

• Configuration >> Roles & Policies >> Aliases >> Create Aliases

Allow Aliases List

• Once configured, click Submit >> Pending to save the settings.

Aliases List for Social Login

Facebook log-in

*.facebook.com

*.facebook.net

*.akamaihd.net

*.digicert.com

*.fbcdn.net

*.fb.com

*.fbsbx.com

Line.me

*.line.me

*.line-apps.com

*.line-scdn.net

Youtube

*.youtube.com

*.youtube.be

*.googlevideo.com

Seara

157.245.200.44

*.seara-portal.net

Configuration WLANs

Create an SSID profile to use Seara Captive Portal and bind it with the Seara external Captive Portal profile.

• Configuration >> WLANs >> Create SSID Name

Create SSID With External Captive Seara and Select AP Group

Vlan Setting

External Captive Portal Setting

Security >> ClearPass or other external Captive Portal

Bind the Seara Auth Server profile created earlier and enter the URL to invoke the Login page. After a successful login, redirect the user to the Seara URL to access the Internet. In this example we use demo.seara-portal.net; you can change the domain per customer site, e.g. yousitedomain.seara-portal.net.

• Auth servers : Select Profile Seara Auth

• Host : yoursitedomain.seara-portal.net

• Page : /login

• Redirect URL: https://yoursitedomain.seara-portal.net

Default role of Profile SSID Name

• Once configured, click Submit >> Pending to save the settings.

Configuration L3 Authentication

Configure the L3 Authentication profile for the Seara RADIUS Server to link the operation of RADIUS with the SSID Profile that uses Seara Captive Portal Authentication.

• Configuration >> Authentication >> L3 Authentication >> Captive Portal Authentication

• Edit Profile: .@Aruba-Mobility_cppm_prof (SSID Name)

L3 Authentication Setting

L3 Authentication Setting

• Once configured, click Submit >> Pending to save the settings.

Configuration AAA Profile

Configure the AAA Profile to specify the Role and invoke the Account Authentication Server for Seara RADIUS.

• Configuration >> Authentication >> AAA Profile

Set initial role for Seara Captive

• Configuration >> Authentication >> AAA Profile >> MAC Authentication Sever Group

Set Authentication Server to Seara RADIUS Server

• Configuration >> Authentication >> AAA Profile >> RADIUS Accounting Sever Group

Set Authentication Accounting Server to Seara RADIUS Server

• Once configured, click Submit >> Pending to save the settings.