Aruba Central

This article describes the installation and configuration steps for Aruba Central. Our test was performed with Aruba AP-303-RW.

Aruba Central

Log in to your account on Aruba Central portal.

From menu on the left, under Wireless Configuration, select Networks.

Click Create New and configure the following:

Type – Wireless
Name (SSID) – ArubaWiFi (or whatever you wish)
Primary Usage – Guest

Click Next and continue configuration.

Client IP Assignment – Virtual Controller Assigned

Click Next and continue configuration.

Splash Page Type – External

Captive Portal Profile
– Press + … and set the following.

Name: StartHotspot
Type: Radius Authentication
IP or Hostname: wifihotspot.io
URL: /login
Port: 443
Use HTTPS: Yes
Captive Portal Failure: Deny Internet
Automatic URL Whitelisting: Unticked
Redirect URL: leave blank

Click Save.

Encryption: Disabled
MAC Authentication: Disabled
Primary Server: Press + … and set following:

Name: StartHotspot1
IP Address: 13.92.228.228
Shared Key: contact our office
Retype Key: as above

Other values should be left at default settings.

Click Save.


Accounting:
Accounting: Use accounting servers
Accounting Mode: Authentication
Accounting Interval: 5 min

Walled Garden:
Under Whitelist click + and type following domains:

wifihotspot.io
cdn.wifihotspot.io
starthotspot.com
cdn.starthotspot.com
cdnhotspot.azureedge.net
t-msedge.net
static.cloudflareinsights.com

Advanced:
Under Reauth Interval set 24 hrs

Click Next.

Access Rules: Role-Based
Under Role click on New and enter Preauth as the Name.
Click Ok.
Under Access Rules for Selected Roles click on the Plus icon.

Add a new rule one by one for each of the following:

Access Control / Network / Any / Allow / To a Domain Name: wifihotspot.io
Access Control / Network / Any / Allow / To a Domain Name: cdn.wifihotspot.io
Access Control / Network / Any / Allow / To a Domain Name: starthotspot.com

Click on Save to each one and then add the next until all are listed.

Finally, add the following rule:

Access Control / Network / Any / Deny / To All Destinations

Under the Role on the left choose default_wired_port_profile, select Assign Pre-authentication Role and select Preauth.

Troubleshooting

If the default domain is set to HTTP, iOS may prevent the user from logging in after payment. To resolve this, make sure to add this URL on the portal in the Wi-Fi Location / Advanced page:
https://securelogin.hpe.com/auth/index.html/u


Updated on February 25, 2025

Was this article helpful?