Configure a Passpoint Policy

Create or manage a passpoint policy.

  1. Select Policies > Passpoint.
  2. Select an existing policy or to create a new passpoint policy.
    Type a unique policy name and select Add to define a new policy.

    The Configuration dashboard opens.

  3. Configure the following Settings to define an internet connection medium for the passpoint policy:
    HESSID Select to apply a homogenous ESS ID. Leaving this option blank applies the BSSID instead
    Internet Select to activate Internet access to users of the passpoint hotspot
    OSU SSID Define a 32 character maximum sign-on ID that must be correctly provided to access the passpoint policy‘s hotspot resources
    Domain Name Add a 255-character maximum domain name to the pool available to the passpoint policy
    Roam Consort Provide a 0 to 255 character roaming consortium number. A roaming consort number is sent as roaming consortium information in a hotspot query response
    IPv4 Address Type Select the IPv4 formatted address type for this passpoint policy. IPv4 is a connectionless protocol operating on a best effort delivery model. IPv4 does not guarantee delivery or assures proper sequencing or avoidance of duplicate delivery (unlike TCP). Options include not-available, available, and unknown
    IPv6 Address Type Select the IPv6 formatted address type for this passpoint policy. IPv6 is the latest revision of the Internet Protocol (IP) designed to replace IPv4. IPV6 provides enhanced identification and location information for computers on networks routing traffic across the Internet. Options include not-available, available, and unknown
  4. Set the following Basic Configuration:
    Access Network Type Select the network access method for this passpoint policy. Access network types include:
    • private - General access to a private network hotspot (default setting)
    • private-guest - Access to a private network hotspot with guest services
    • chargeable-public - Access to a public hotspot with billable services
    • personal-device - Access to a hotspot for personal devices such as wireless routers
    • emergency services - Dedicated network hotspot access for emergency services only
    Venue Group Passpoint is supported across a wide range of wireless network deployment scenarios and client devices. Select the group type best suited to the majority of hotspot requestors utilizing the passpoint policy‘s unique configuration
    Venue Name Lang Select Add and provide a venue name language code and name
    • Code - Type the two- or three-character ISO-14962-1997 encoded string that defines the language used
    • Name - Type the name of the venue. The name cannot exceed 252 characters
    Venue Type Select the venue type value between 0 and 255 best suited to where the actual location passpoint requestors are located
    Venue Name The administrator assigned name of the venue or physical location of the deployed access point hotspot
  5. Set the WLAN Metrics parameters:
    Up Speed Select to activate this option and estimate the maximum upstream bandwidth from 0 to 4,294,967,295 Kbps
    Down Speed Select to activate this option and estimate the maximum downstream bandwidth from 0 to 4,294,967,295 Kbps
  6. Set the following Connection Capability for the passpoint policy's FTP, HTTP, ICMP, IPSec VPN, PPTP VPN, SIP, SSH, and TLS VPN interfaces:
    Use the drop-down list boxes to define these interfaces as open, closed, or unknown for this passpoint policy configuration.
    Tip

    Tip

    The best practice is to deactivate unused interfaces to close unnecessary security holes.
  7. Select Add to set a Connection Capability Variable to make specific virtual ports open, closed, or unknown for Wi-Fi connection attempts and to set rules for how the user can connect with routing preference using this passpoint policy.
  8. Select Add to set a Network Authentication Type to select how Wi-Fi connection attempts are authenticated and validated using a dedicated redirection URL resource.
  9. Set the following Operator Network Parameters:
    Operator Name Provide the unique name of the administrator or operator responsible for the configuration and management or the hotspot. The name cannot exceed 64 characters
    Operator Name Lang Operator names can be listed in multiple languages. Select Add to create operator name languages. Type the two- or three-character ISO-14962-1997 encoded string that defines the language used in the Code field. Type the name of the operator in the Name field. The name cannot exceed 252 characters
    PLMNID Operators providing mobile and Wi-Fi hotspot services have a unique Public Land Mobile Network (PLMN) ID. Select Add to create PLMN information for operators responsible for the configuration and operation of the hotspot. Provide a description for the PLMN, not exceeding 64 characters. Type a three-digit Mobile Country Code (MCC) and two-digit Mobile Network Code (MNC) for the PLMN ID. The MCC identifies the region and country where the hotspot is deployed. The MNC identifies the operator responsible for the configuration and management of the hotspot by PLMN ID and country. Both the MCC and MNC fields are mandatory
  10. Select Save to update passpoint policy settings.
9037761-04 Rev AB