Hotspot Settings

Hotspot Identification

On the Hotspot Identification tab, configure the settings to uniquely identify the hotspot and specify the languages for the venue.

Table 1. Hotspot Identification settings
SettingDescription
Name(Required)

Type a name for the hotspot.

HESSID(Required)

Type the Homogenous Extended Service Set Identifier (HESSID) for the Hotspot 2.0 network.

One SSID can be used across multiple WLANs (BSS). A Beacon with the same {HESSID, SSID} pair belongs to same WLAN. The {HESSID, SSID} pair must be unique for each WLAN. By default, the HESSID is the MAC address of the controller Ethernet port. Hotspots can have the same HESSID as long as the SSID is unique. If you configure the HESSID manually, we recommend using an AP BSSID as the HESSID. In a mobility domain, manually configure the HESSID to a unique value, to differentiate it from the value used in the WLAN of the controller.

Domain(Required)

Type the Fully-Qualified Domain Name (FQDN) for the Hotspot 2.0 network. (Default: empty string)

Domain names in the domain name list might contain sub-domains. If the FQDN of the service provider is not in the domain name list but is in the realm list, mobile devices that use that service provider are considered to be roaming.

Venue InfoDescribe the venue. From the lists of predefined values, first select the category of the venue, and then select the subtype.

Example: Institutional, Hospital

Select Add, configure the settings, and then select ADD.

Operator Name(Required)

Type the name of the venue operator.

Venue Name(Required)

Type the name of the venue.

Language(Required)

Select a language from the list. You can configure up to four languages for each venue.

Service Provider Identification

On the SP Identification tab, configure the settings to identify the service provider and configure authentication. Select existing Service Provider Profiles, or select Add to add a new Service Provider Profile. For more information, see Configure a Hotspot Service Provider Profile.

Note

Note

Keep your DNS server records up to date so that mobile devices can resolve the server domain names (FQDN).

Mobile devices with a SIM or USIM credential, can obtain a realm from the hotspot NAI Realm list. While hotspot access usually requires 3GPP credentials, a targeted NAI home query is an efficient alternative approach. The device connection manager compares the realm information from the list to the information stored on the device. The connection manager uses the preconfigured user preferences and policy from the mobile device to make a decision between a hotspot AP or a non-hotspot AP, if both are available.

Table 2. Service Provider Profile Settings
SettingDescription
NAI Realm: The Network Access Identification (NAI) Realm list is a list of realms that can be successfully authenticated. Each realm may have up to four supported EAP methods.
  • Add all realms that can authenticate the login credentials or certificate credentials of a mobile device, including the realms of all roaming partners that are accessible from the hotspot AP. Include the realm of the home service provider.
  • Add a realm for the PLMN ID. This is the cellular network identity based on public land mobile network (PLMN) information.

Select Add and configure the settings.

Realm(Required)

Type the Fully-Qualified Domain Name (FQDN) of the service provider.

Wildcards are supported for realm. For example, you can enter *.extreme.area120.com, instead of entering specific realms.

EAP MethodFrom the list, select the Extensible Authentication Protocol (EAP) authentication type.

Mobile devices provisioned to authenticate against the home service provider do not require the EAP methods configured for the NAI Realm List.

DescriptionType a description for the realm.

Although optional, descriptions can be helpful when you are troubleshooting your network.

Roaming Consortium: Use roaming consortium authentication when you do not know all the authenticated realms. Using identifiers unique to the organization in the beacon is a battery efficient roaming method because ANQP queries are not required.

Select Add, configure the settings for the Roaming Consortium, and then select ADD.

Consortium(Required)

Type the Roaming Consortium Organization Identifier (RCOI).

Specify up to eight identifiers unique to the organization that are part of the MAC address.

DescriptionType a description for the consortium.

Although optional, descriptions can be helpful when you are troubleshooting your network.

3GPP CellularNetwork: Create a list of cellular network IDs in the form of mobile country code (MCC), mobile network code (MNC). This list establishes whether an AP has a roaming arrangement with the 3GPP service providers.

Select Add, configure the settings for a 3rd Generation Partnership Project (3GPP) mobile network, and then select ADD.

MCC(Required)

Type the mobile country code (MCC).

MNC(Required)

Type the mobile network code (MNC).

DescriptionType a description for the 3GPP mobile network.

Although optional, descriptions can be helpful when you are troubleshooting your network.

Advanced SettingsSelect the arrow to expand this section and configure the following settings:
  • NAI Realm
  • Roaming Consortium
  • 3GPP CellularNetwork
Note: Advanced Settings override the corresponding settings in the associated Service Provider profiles.

Network Characteristics

On the Network Characteristics tab, configure network settings to specify the type of access network, IP address type availability, WLAN metrics, and connection capabilities.

Table 3. Network Characteristics settings
SettingDescription
Access Network: From the list, select the type of access network:
  • Private network—An enterprise network with user accounts.
  • Private network with guest access—An enterprise network providing guest access.
  • Chargeable public network—(Default) Open to anyone but access requires payment.
  • Free public network—An open network, free of charge but may still require acceptance of terms of use (and may involve OSU servers with a captive portal).
DGAFSelect DGAF to enable Downstream Group Addressed Forwarding for the access network. If enabled, the system forwards all downlink wireless broadcast ARP and multicast packets. (Default: disabled)
IP Address Type Availability: Mobile devices use information about IP address type availability to make network selection decisions. Select the level of restriction for each network type.
IPV4From the list, select the type of IPV4 address:
  • Not Available
  • Public
  • Port Restricted
  • Single NAT
  • Double NAT
  • Port Restricted Single NAT
  • Port Restricted Double NAT
  • Unknown
IPV6From the list, select the type of IPV6 address:
  • Not Available
  • Available
  • Unknown
WLAN Metrics: Mobile devices use the WAN Metrics settings to make network selection decisions. The mobile device can determine whether necessary throughput is available from the hotspot before connecting. If the mobile device receives indication that the basic service set (BSS) is at capacity, the device will not associate with that AP.
Link StatusFrom the list, select a status. (Up, Down, or Test)
Downlink SpeedSpecify the download speed in kbps.
Uplink SpeedSpecify the upload speed in kbps.
Connection Capability: Select Add, configure the settings, and then select ADD.

Mobile devices use connection capability information to make network selection decisions by determining which services are blocked or supported at the hotspot.

ProtocolFrom the list, select the network protocol.
Port NumberType the port number.
StatusFrom the list, select a status. (Open, Closed, or Unknown)

Online Signup

With Online Signup (OSU), users who are not part of the provider network can manually connect to the hotspot. This feature also provides added security for users who want to connect anonymously.

From the Network Authentication Type list, select an authentication method and configure the settings.

Table 4. Online Signup settings
SettingDescription
Acceptance of Terms and Conditions—Redirection occurs after the user accepts the Terms and Conditions.
Online Sign up—Authentication supports online enrollment.
OSU SSIDType the SSID for the online signup service.
CWP (Captive Web Portal)—Redirection occurs after the CWP authenticates the user.
Redirection URLType the HTTP or HTTPS address for automatic redirection after authentication.