CWA Network Settings

To configure a Centralized Web Authentication (CWA) captive portal:

Go to Configure > Network > WLANS.
CWA Network on ExtremeCloud IQ Controller

Configure the following settings:

Table 1. Centralized Web Authentication Network Settings
Field	Description
Network Name	Enter a unique, user-friendly value that makes sense for your business. Example: Staff
SSID	Enter a character string to identify the wireless network. Maximum 32 characters. Upper and lowercase allowed. Example: PermanentStaff
Status	Enable or disable the network service. Disabling the network service shuts off the service but does not delete it.
Auth Type	The Authorization Type for a CWA captive portal must be WPA2 Enterprise (802.1x EAP)
Enable Captive Portal	Select this option to configure a captive portal network.
MAC-Based Authentication	(Optional) Select this option to enable MBA. When selected, multi-factor authentication is enabled. The following parameter displays when MAC-based Authentication is enabled: MBA Timeout Role. Select the role that will be assigned to a wireless client during MAC-based authentication (MBA) if the RADIUS server access request times out. If no MBA Timeout Role is selected, then a RADIUS server timeout is treated like an Access-Reject, which prevents the client from accessing the network. Other options: — create a new role — edit role — delete role
Captive Portal Type	CWA
AAA Policy	Specify the AAA Policy associated with the captive portal. Define the RADIUS server used for authentication in the AAA Policy. This is the IP address of the captive portal. See AAA Policy for CWA — RADIUS Server definition.
Default Auth Role	Specify the default authorization role that is configured on ExtremeCloud IQ Controller.
Default VLAN	Specify the default VLAN that is configured on ExtremeCloud IQ Controller.

AAA Policy for CWA — RADIUS Server definition is the address of the Captive Portal Server