Add a Site

Add a new site by clicking on the Add New Site button in the drop down menu on top right.

Select site type as Cisco WLC, enter a name to identify and Save.

Add WLC controller to your site

Under the WLC tab on your account, press the add WLC button and give a name for your WLC controller.

Provide a name to identify your controller and press Save.

Spotipo will create a set of credentials for your controller, please note them down for future reference.

Configure Spotipo Radius Authentication servers for your Cisco WLC

Go to Security -> RADIUS -> Authentication, add new RADIUS Authentication Servers and enter IP Address, Port and Shared Secret.

  • IP Address: 34.77.150.10
  • Port: 1812
  • Shared Secret: Generated in previous Step.

Optionally you can add a backup Radius server as well, please use below settings.

  • IP Address: 35.205.248.64
  • Port: 1812
  • Shared Secret: Generated in previous Step.

Configure Spotipo Radius Accounting servers for your Cisco WLC


Go to Security -> RADIUS -> Accounting, add new RADIUS Accounting Servers and enter IP Address, Port and Shared Secret.

  • IP Address: 34.77.150.10
  • Port: 1813
  • Shared Secret: Generated in previous Step.


Optionally add a backup server with settings,

  • IP Address: 35.205.248.64
  • Port: 1813
  • Shared Secret: Generated in previous Step.

Configure pre-authentication ACL for Spotipo in your CISCO WLC

Go to Access Control Lists and add a new IPv4 Access Control List (or a new FlexConnect ACL if you’re using FlexConnect) and name it guest_preauth.

Hover your mouse’s pointer on the blue arrow and select Add-Remove URL.

Now add below URLs.

logme2wifi.com
facebook.com
fbcdn.net
akamaihd.net
facebook.net

Configure WebAuth to use Spotipo as External Portal

Go to Web Auth and select Web Login Page. Select External as the Web Authentication Type. Use below details to fill in.

  • Select the Web Authentication type as External
  • Use
https://logme2wifi.com/ciscowlc/postauth/

   as the redirect URL after login

  • Use the Splash page URL generated in your spotipo account as External Web Auth URL

Configure WLAN settings on your Cisco WLC for spotipo


Go to WLANs and open your WLAN profile for which Hotspot needs to be enabled. .

  • Go to Security -> L3 Security and select Web Policy in “Layer 3 Security”.
  • In Preauthentication ACL” select guest_preauth.
  • Check “Override Global Config”, select External as “Web Auth Type” and enter the Splash page URL generated in your spotipo account

Go to AAA Servers tab and enable Authentication and Accounting Servers you have created before.

Remember to set the order of AAA servers.

In the advanced tab, ensure to check allow AAA override option.

Test and be in awe ;)


Now your WLAN should be enabled for hotspot with Spotipo.

Did this answer your question?