Add a Site
Add a new site by clicking on the Add New Site button in the drop down menu on top right.
Select site type as Cisco WLC, enter a name to identify and Save.
Add WLC controller to your site
Under the WLC tab on your account, press the add WLC button and give a name for your WLC controller.
Provide a name to identify your controller and press Save.
Spotipo will create a set of credentials for your controller, please note them down for future reference.
Configure Spotipo Radius Authentication servers for your Cisco WLC
Go to Security -> RADIUS -> Authentication, add new RADIUS Authentication Servers and enter IP Address, Port and Shared Secret.
IP Address: 34.77.150.10
Port: 1812
Shared Secret: Generated in previous Step.
Optionally you can add a backup Radius server as well, please use below settings.
IP Address: 35.205.248.64
Port: 1812
Shared Secret: Generated in previous Step.
Configure Spotipo Radius Accounting servers for your Cisco WLC
Go to Security -> RADIUS -> Accounting, add new RADIUS Accounting Servers and enter IP Address, Port and Shared Secret.
IP Address: 34.77.150.10
Port: 1813
Shared Secret: Generated in previous Step.
Optionally add a backup server with settings,
IP Address: 35.205.248.64
Port: 1813
Shared Secret: Generated in previous Step.
Configure pre-authentication ACL for Spotipo in your CISCO WLC
Go to Access Control Lists and add a new IPv4 Access Control List (or a new FlexConnect ACL if you’re using FlexConnect) and name it guest_preauth.
Hover your mouse’s pointer on the blue arrow and select Add-Remove URL.
Now add below URLs.
logme2wifi.com
facebook.com
fbcdn.net
akamaihd.net
facebook.net
Configure WebAuth to use Spotipo as External Portal
Go to Web Auth and select Web Login Page. Select External as the Web Authentication Type. Use below details to fill in.
Select the Web Authentication type as External
Use
https://logme2wifi.com/ciscowlc/postauth/
as the redirect URL after login
Use the Splash page URL generated in your spotipo account as External Web Auth URL
Configure WLAN settings on your Cisco WLC for spotipo
Go to WLANs and open your WLAN profile for which Hotspot needs to be enabled. .
Go to Security -> L3 Security and select Web Policy in “Layer 3 Security”.
In Preauthentication ACL” select guest_preauth.
Check “Override Global Config”, select External as “Web Auth Type” and enter the Splash page URL generated in your spotipo account
Go to AAA Servers tab and enable Authentication and Accounting Servers you have created before.
Remember to set the order of AAA servers.
In the advanced tab, ensure to check allow AAA override option.
Test and be in awe ;)
Now your WLAN should be enabled for hotspot with Spotipo.