Cisco Wireless Lan Controller

In this section, we will guide you through the process of configuring captive portal with the Cisco Wireless LAN Controller access point, ensuring seamless and secure internet access for your users.

1. Configure Virtual Interface.

2. Configure the External Guest portal URL and redirection page.

3. Enable AccessControls for the external guest portal.

4. Guest WLAN settings.

Configure Virtual Interface ( if doesn’t exist already )

Configure the External Guest portal URL and redirection page

1. Select ‘External (redirect to external server)’

2. Enter redirect URL and External Webauth URL with IP ’52.0.190.110’.

Enable AccessControls for external guest portal.

1. Select the created Access Control to add access Rules.

2. Create Outbound Rule to allow 52.0.190.110 access.

3. Similarly, create rule for Inbound access.

4. Both Inbound and outbound rules should like below.

Guest WLAN settings

EnGenius Platform

Welcome to the configuration guide for setting up a Captive Portal with the EnGenius Platform access point. This step-by-step walkthrough will enable you to provide secure and user-friendly internet access to your network users.

Step 1: Register a device in the EnGenius portal

1. Log in to the EnGenius portal to register a new device. Log in with your company credentials.

2. From the Home page that opens, Navigate to ORGANIZATION > Inventory & License.

3. On the Inventory & License page that opens, click the + Register Device button and enter the serial number of the device in the popup window that opens.

4. Finally click the Register button to register the device. the device has been registered successfully. Other information related to the device is automatically obtained while registering with the serial number.

Step 2: Add a new SSID

1. After registering the new device, you need to add a new SSID. For that, navigate to CONFIGURE > Access Point > SSID> +Add SSID.

2. Then, as needed, enter the SSID name and security settings. Save the changes by clicking the Apply button. New SSID added successfully.

Step 3: Setup Captive Portal with EnGenius platform

1. After adding the SSID, the next step is to set up the Captive portal, for that, open the newly created SSID.

2. Then open the Captive Portal tab and enable the captive portal in the window that opens.

3. In Authentication type select a Custom RADIUS and enter the IP Address, Port, and Secret.

4. Then scroll down and under the Accounting Server , enter the IP address, Port, and Secret.

5. Scroll down again and enter the Redirect URL.

6. Next click on the Splash Page tab and enter the splash page URL.

7. Then click on Apply button to save the changes.

8. Captive portal successfully added to EnGenius platform.

Meraki

Welcome to the configuration guide for setting up a Captive Portal with the Meraki access point. This comprehensive guide will walk you through the process, ensuring that you can seamlessly manage and enhance your users’ internet experience while maintaining top-notch security and compliance.

Guest Portal

Captive Portals or Guest Portal is a multi-channel platform that enables you to connect and engage with visitors on your premises.

Guest portal screen page allows to create and design a customizable portal from scratch.

A sample of templates will be given as an option to choose to create a portal, layout will be available as a part of the template.

Following are the steps to configure the Guest Portal.

Captive Guest Portal Configuration

The captive portal is designed with following terms that are described below:

• Social Authentication: Needs authentication using social platforms as Facebook, Twitter, Linked and it will ask user to authenticate with a valid account.

• Email Authentication : It will ask the user for their Name and Email address to be able to Authenticate.

• SMS Authentication: It asks the user for their contact number and authenticate over a SMS.

• Token Based: A token is generated by the admin. The users get this token when they register and on entering the token as an authentication, they get access to the internet.

• Username/Password

• Third party

The following are for custom development and can be integrated as per requirement.

1. Third party ERP
2. Third party PMS
3. Third party POS

• Enter ‘Wireless’ , ‘Access Control’
• Choose the SSID to which the Captive portal will be configured.

• In Network Access, Association requirement, Select ‘Open (no encryption)’.
• In Network Access, Splash page, Select ‘Click-through’.

• In Network Access, Captive portal strength, Select ‘Block all access until sign-on is complete’
• In Network Access, Walled garden ranges, Enter the following domains:

_.kloudspot.com _ .facebook.com _ .facebook.net _ .akamaihd.net _ .fbcdn.net _ .atdmt.com _ .fbsbx.com _. twitter.com \* .twimg.com

• In the end Save changes.

• Enter Wireless, click on ‘Splash page’.
• Choose the SSID to which the captive portal will be configured.

• On ‘Splash page’, Custom splash URL, enter the url below;

https://mx01.kloudspot.com/cp/lacomer/index.htm

• Save changes and Exit.

For more details on how to create template and workflow driven portal, please refer to the relevant Kloudspot documentation.

Kloudspot Campaign Management

Kloudspot has a powerful workflow and policy driven campaign management solution centered mostly around Wi-Fi which offers both online and offline campaigns. These online campaigns can be created and managed using Captive Guest Portals. Creation of Captive guest portals is extremely easy using one of many templates supported by KloudCampaign Editor. KloudCampaign Editor can help guide the user to create a captive portal for the hardware they have deployed on the network.

For more details on how to create Campaigns, resources and configure dynamic policies and workflows, please refer to relevant Kloudspot documentation.

Okta Authentication

Overview

Okta Authentication integration allows Captive Portal users to log in using their Okta account credentials. This document provides a step-by-step guide on how to integrate Okta Authentication into the KloudManage.

Prerequisites

Before starting the integration process, ensure that you have the following credentials:

• KloudManage admin account credentials.

• Okta developer account credentials.

Integration Steps

Obtaining Okta ID, Secret and Issuer

1. Visit Okta Developer site and log in to your Okta developer account. If you don’t have an account yet, you have the option to sign up and create one.

https://developer.okta.com

2. Create a new App Integration by navigating to Application > Create App Integration > OIDC-OpenID Connect > Web Application.

3. Click on the Next button.

4. Enter the following details in the New Web App Integration window:

• App Integration Name: Enter a name for your app.

• Sign-in Redirect-URI: This is the URL of the Captive Portal. To obtain this, log in to KloudManage and navigate to Captive Portal > Guest Portal. Copy the URL of the portal you want to add Okta SSO.

5. Scroll down, check the Allow everyone in your organization to access checkbox, and click on the Save button. This is an optional step and can be selected as per your requirement.

6. Once saved, the App you created will open. Copy the Client ID, Client Secret, and Issuer from this page.

Configuring KloudManage with Okta Credentials

1. Log in to KloudManage.

2. Navigate to Settings > Third-Party Integrations.

3. Scroll down to the Social Authentication Setup section.

4. Click on the Edit button.

5. Paste the Okta Client ID, Client Secret, and Issuer copied from the Okta App into their respective places.

6. Click on the Save Social Settings button to save the changes.

Logging in with Okta SSO

After completing the integration steps, users can log in to the Captive Portal using Okta Single Sign-On (SSO). The Okta SSO option should now be available on the Captive Portal login page.

Facebook Authentication

By adding Facebook Social Authentication, Captive Portal users can log in using their Facebook account credentials.

Step 1: Accessing Third-Party Integrations in KloudManage

1. To begin, log in to your KloudManage account and navigate to the Settings page. Look for ‘Third-party Integrations,’ and within it, find the ‘Social Authentication Setup.’

Step 2: Obtaining Facebook App Credentials

1. Before diving into KloudManage settings, you’ll need a Facebook App ID and App Secret. Follow these steps:

2. Visit the Facebook Developer portal.

   https://developers.facebook.com/

3. Sign up for a developer account using your company credentials.

4. After signing up, click on “Create App.”

5. Choose “Other” in the opening window and click “Next.”

6. Enable consumer, and proceed to the next step.

7. Provide a Display Name for your app (visible to users on the Kloudspot Guest Portal) and click “Create app.”

9. In the ‘My Apps’ section, locate and enter your newly created app.

10. Go to the ‘basic’ option in the settings menu.

11. Copy the App ID and App Secret; these will be needed in KloudManage.

12. Scroll down, click “Add Platform,” choose “Website,” and enter your KloudPortal URL.

13. Save the changes.

14. Open the Advanced menu and enable “Allow Cross Domain Share Redirects” in the “Share Redirect Allow List” section.

15. Save the changes.

16. Click “Add Product” in the navigation menu and choose “Facebook Login.”

17. Select the Web platform and enter your Site URL.

18. Follow the subsequent steps and click “Save and Continue.”

19. Click on “Settings” under ‘Facebook Login.’

20. Enter the guest page URL under ‘Valid OAuth Redirect URIs.’

21. Save Changes.

Step 3: Integration in KloudManage

1. Back in KloudManage, paste the copied App ID and App Secret.

2. Click “Save Social Settings.”

Instagram Authentication

Integrate Instagram authentication with the Captive Portal

By adding Instagram Social Authentication, Captive Portal users can log in using their Instagram account credentials.

Step 1: Accessing Third-Party Integrations in KloudManage

1. To begin, log in to your KloudManage account and navigate to the Settings page. Look for Third-party Integrations, and within it, find the Social Authentication Setup.

Step 2: Obtaining Instagram App Credentials

1. Before diving into KloudManage settings, you’ll need an Instagram App Secret and Instagram App ID. Follow these steps:

2. Visit the Facebook Developer portal.

   https://developers.facebook.com/

3. Sign up for a developer account using your company credentials.

4. After signing up, click on Create App.

5. Choose Other in the opening window and click Next.

6. Enable the consumer, and proceed to the next step.

7. Provide a Display Name for your app (visible to users on the Kloudspot Guest Portal) and click Create app.

8. After creating the app, navigate to Add Product in the menu, and choose Instagram Basic Display.

9. Click Create new app, enter the App name, and then click Create App.

10. Scroll down in the basic display window, copy the Instagram App Secret and Instagram App ID, and save them for later use.

11. Add Valid OAuth Redirect URIs, Deauthorize callback URL, Data Deletion Request URL, and click Save changes.

12. Navigate to App roles > Roles to add App roles.

13. Click Add people, select Instagram Tester, and enter your Instagram username. Click Add.

14. The status will be pending.

15. To approve, log in to your Instagram account, and go to More > Settings > Website Permissions > Apps and Permissions. In Tester Invites, click Accept.

Step 3: Integration in KloudManage

1. Back in KloudManage, paste the copied App ID and App Secret.

2. Click Save Social Settings.

Google Workspace Oauth 2.0 Authentication

1. By adding Google Authentication, Captive Portal users can log in using their Google account credentials. Click the link given below to access the login page.

https://console.cloud.google.com/

2. Login with the Admin account.

3. Now select the project or create a project by clicking on the dropdown at the top right corner.

4. This popup will contain all your projects and also gives you the flexibility to create a new project.

5. After selecting an existing or a new project the below window will open.

6. Next, you need to enable the Google Workspace Marketplace SDK. For that navigate to Enabled APIs and Services.

7. Then search for Google Workspace Marketplace SDK and enable it.

8. Then navigate to Credentials to create Client ID and Secret.

9. In the window that appears, there are several login options.

10. In this case, the captive portal supports OAuth2. 0.

11. To configure OAuth you need to create a Client ID and Secret.

12. Click on CREATE CREDENTIALS button at the top and select the OAuth Client Id from the dropdown list.

13. Then Create your Client ID. The screen below will be displayed once it has been created.

14. This screen contains the Client Id and Secret. Copy it and paste it somewhere else for later use.

15. Next you have to copy the captive portal URL, for that login to the captive portal and open the guest portal section.

16. Copy the URL by clicking on the yellow icon from the Captive portal’s Last Published column.

17. Then click on The +Add URI button and add the Captive Portal URI. Then click the Save button.

18. Log in to Captive Portal and navigate to NMS settings- >Third party Integrations -> Social Authentication Setup .

19. Here, pastes the Client Id and Secret that you copied earlier.

20. OAuth2.0 has been integrated successfully.

21. People within the organization or in the same domain can then use it.

LinkedIn Authentication

1. By adding LinkedIn Social Authentication, Captive Portal users can log in using their LinkedIn account credentials.

2. To integrate LinkedIn into the Captive Portal , a LinkedIn APP ID and LinkedIn APP Secret key are required.

3. To add it, Log in to the kloudManage account and navigate to the Settings page, then to ‘Third-party Integrations’ then scroll down and find the Social Authentication Setup.

4. To obtain the credentials, follow the instructions below.

5. Log in to the LinkedIn developer account with company credentials. To access the login page, click on the link provided below.

https://www.linkedin.com/developers/

6. Then go to My Apps.

7. Click on the Create App button from the My App window.

8. Then ‘ Create an app’ window that will open. Fill in all the required fields in this window.

• App Name: The name you’d like to give the app.
• LinkedIn Page: Search for your company’s LinkedIn account and add it.
• App Logo: Upload a logo suitable for your App.

9. Check the acknowledgment checkbox and Click Create App button.

10. Then, on the Test App page that opens, click the Request Access button next to the Sign in with LinkedIn.

11. Check the acknowledgment checkbox that appears and click on the Request Access button.

12. As soon as you get access, you will be able to see the product, ‘Sign in with LinkedIn’ in the ‘Added product’ section.

13. To get application credentials Click on the Auth Tab.

14. Then, from the page that opens, you will obtain the Client ID, and Client Secret. Copy it and paste it into the ‘ Third-party Integrations’ settings and click on the Save Social Settings button.

15. Copy the Captive portal Index page URL and paste it into the authorized redirect URL text box.

16. LinkedIn authentication is done successfully.

Microsoft Authentication

You can access your captive portal with your Microsoft account credentials. To use this service, the KloudManage tool must be linked to a Microsoft Azure account. This document explains how to do so.

To Get Microsoft Credentials

1. To integrate Microsoft Azure into Captive Portal, you need 3 credentials.

• Microsoft Client ID
• Tenant ID
• Microsoft Client secret

2. To get the credentials, click on the link given below and log in to Microsoft Azure.

https://azure.microsoft.com/en-us/#home

3. Click the App registration button on the Microsoft Azure Home page that appears.

4. This will direct you to the App registration page. Here you click on the New registration button.

5. Enter the App name , Select the Supported account type as a single tenant. Then click the Register button.

6. The new app has been successfully registered. Copy the Application ID and tenet ID from the overview window and paste them somewhere else for later use

7. Then click on the Add a certificate or secret button to create a client secret.

8. Click the New Client Secret button in the Certificates and Secrets window that appears.

9. Enter the description in the popup that appears and click the Add button.

10. New Client secret created successfully. Copy it and paste it somewhere else for later use.

Add credentials to the KloudManage tool

1. Log in to the KloudSpot network management tool. Then navigate to Settings > Third-party Integration.

2. Then scroll down to the Social Authentication Setup section. Paste the Microsoft Client ID, Tenant ID, and Microsoft Client Secret in the respective text boxes. Then click on the Save Social Settings button.

3. Microsoft Azure credentials have been successfully added.

Authenticate the App.

1. After generating the app, you need to grant the necessary permissions to it. For that, navigate to API permissions > Microsoft graph.

2. Then in the request API permissions window that opens, select the required permissions, and click the Update permissions button. Required permissions are listed below.

• Email
• Offline Access
• Open Id
• Profile
• User Read
• User ReadBasic All

Add redirect URI

1. The final step of Microsoft Azure integration is to add the redirect URI. To do so, Navigate to Overview > Add a Redirect URI > Add platform > Web.

2. On the configuration web page that appears, enter the captive portal’s URI and check the ID tokens checkbox, then click on the configure button to configure.

3. If you want to add more captive portal URIs, you can add them by clicking the Add URI button.

Twitter Authentication

1. By adding Twitter Social Authentication, Captive Portal users can log in using their Twitter account credentials.

2. To integrate Twitter into the Captive Portal , a Twitter APP ID and Twitter APP Secret key are required.

3. To add it, Log in to the kloud Manage account and navigate to the Settings page, then to ‘Third-party Integrations’ then scroll down and find the Social Authentication Setup.

4. To obtain the credentials, follow the instructions below.

5. Log in to the Twitter developer account with company credentials.

6. To access the login page, click on the link provided below.

https://developer.twitter.com/en

7. After signing up and logging in, a window will appear as shown below. Enter your App name in it and click on the Get Keys button.

8. Then in the window that opens, click on the Dashboard button, and enter the dashboard of the created app.

9. Copy the API key and API key secret found on this screen and paste it somewhere else for later use.

10. Select the app we created from the Projects & Apps menu in the dashboard.

11. Then click on the Set up button to configure User authentication settings.

12. Then select Web app in the ‘Type of App’. Enter the Redirect URL and Website URL in the ‘App Info’ section and click the Save button.

Redirect URL: It is useful to specify which page the user should be directed to after logging in with Twitter.

Website URL: Enter your company website URL.

13. Then a window containing Client ID and Client secret will open. Then click the Done button.

14. Then go to ‘Third-party Integrations’ settings, paste the previously copied API key and API key secret, and click the Save Social Settings button.

15. Twitter authentication has been integrated successfully.

WhatsApp Integration

Integrating WhatsApp with KloudManage using Twilio Provider

Introduction

Integrating WhatsApp with KloudManage provides the capability to receive WhatsApp notifications within the KloudManage and enables authentication for the Captive Portal. This document outlines the steps to integrate WhatsApp using the Twilio provider.

Prerequisites

• Access to a Twilio developer account.
• Access to KloudManage with administrative privileges.

Obtaining WhatsApp Credentials

1. Log in to Twilio Developer Account. For that, Navigate to Twilio Developer Login Page.

2. If you don’t have a Twilio developer account, you can create a new one by providing your Email ID and Phone Number.

3. Upon first login, configure your settings as seen in the welcome page screenshot below.

4. Click on the Get Started With Twilio button.

5. When prompted with the terms and conditions popup, acknowledge by checking the checkbox and click Confirm.

   

6. First, set up the WhatsApp sandbox and message template within Twilio. Following this, you will receive the Account SID, Auth Token, and Twilio phone number. Refer to the Twilio documentation for instructions on how to complete this process.

7. When creating the message template, make sure it is similar with the hardcoded template in KloudMange. Use the template provided below.

     {{code}} is your verification code. For your security, do not share this code.
   

Integrate Twilio Credentials into KloudManage

1. Access KloudManage and navigate to Settings > Third-party Integration.

2. Under the Whatsapp Integration section, select Twilio as the provider.

3. Enter the Account SID, Auth Token, and Phone Number received from Twilio.

4. Click on the Save Whatsapp settings button to save the integration settings.

   

5. Following the outlined steps, you have successfully integrated WhatsApp with KloudManage using the Twilio provider.

6. This integration enables the seamless flow of WhatsApp notifications and facilitates Captive Portal authentication within the KloudManage.

Two-factor authentication with MAC address

Introduction

This document describes how to create a two-factor authentication system that uses MAC address identification along with OTP, email, or token-based authentication methods. By incorporating MAC authentication into the login process, this method improves security and access control in captive portal systems.

Mac address and SMS authentication - This is a two-step verification process. First, it verifies the device’s MAC address, then sends an OTP via SMS to authenticate the user’s mobile phone number.

Mac address and Email authentication - This is a two-step verification process. Initially, it authenticates the device’s MAC address and subsequently sends an authentication email to verify the user’s email address.

Mac address and token authentication - This is a two-step verification process. It starts by authenticating the device’s MAC address, followed by the use of a token for further authentication.

Getting Started

1. This feature is specifically designed for use with the Scorpio template on EnGenius hardware. For detailed instructions on customizing templates, refer to the “Customizing Captive Portal Templates” section.

2. Begin by selecting the Scorpio template using the designated button.

3. On the “Configure Template” page, navigate to the “Index Page” section.

4. Click on the settings button to customize the Index page.

5. The form fields to select will vary based on the two-factor authentication method you wish to use..

• For SMS authentication, select the Phone field.
• For email authentication, select the Email field.
• For token-based authentication, select the Access Code field.

6. In the “Enable First Step MAC Authentication” section, ensure that both the Enable and Bind Strictly checkboxes are checked.

   • Enable: Activates First Step MAC Authentication.
   • Bind Strictly: Enabling this option associates a specific MAC address with a second-step authentication method. Then, the user can only log in using the information provided in the two-factor authentication settings.

7. Then select the Second Step of Authentication. Select SMS, Email, or Token Based authentication as per your requirement.

8. Adjust any additional configurations as needed, then click “Save Changes” to apply the settings.

9. For further guidance on template customization, refer back to the “Customizing Captive Portal Templates” section.

10. Once customization is complete, click Save to save the changes.

Assigning the Captive Portal

1. Assign the configured captive portal to the relevant access point. Refer to the “Assign a Guest Portal to the Access Point” section to know how to do this.

Creating a Two-Factor Authentication Group

1. Navigate to Captive Portals > Captive Portal Settings > Two Factor Authentication Settings > Group.

2. Click on Create Group and define a new group. In the “Assign Captive Portal” column, select the previously configured captive portal.

3. Once the group is created, proceed to add user details. Click on the User Details tab and then click on the Create New User button to add a new user.

4. In the popup window that open, Enable the user by checking the Enable checkbox and provide the required information.

5. When adding a user, ensure to provide relevant information based on the configured two-factor authentication method:

   • Name: User’s name.
   • MAC Address: MAC address of the user’s device.
   • Enable Token Authentication: Enable this option for token-based authentication.
   • Access Token: Upon enabling token authentication, an access token will be generated. This token is linked to the associated MAC address and grants access to the captive portal.
   • Email: User’s email address for email authentication.
   • Phone: User’s phone number for OTP authentication.
   • Assigned Group: Select the group created earlier from the dropdown list.
   • Expiry Time: Set the duration for which the user can access the internet via the captive portal.

6. Click Save to save the user.

7. Conduct thorough testing of the captive portal to ensure proper functionality of MAC Authentication. In case of any issues, refer back to the outlined steps for troubleshooting.

Azure Authentication for Captive Portal

Overview

This technical documentation guides you through the process of configuring Azure authentication for a Captive Portal using the Soul template on Meraki hardware. Follow the steps outlined below to seamlessly integrate Azure for social login on your captive portal.

Template Customization with Soul Template

1. This feature is compatible with the Soul template on Meraki hardware.

2. To start the configuration, “Azure” should be integrated with Kloud Manage, and refer to the Microsoft Authentication section to know how to do it.

3. For detailed instructions on customizing templates, refer to the Customizing Captive Portal Templates section.

4. In this case, proceed by selecting the Soul template using the designated button.

5. On the “Configure Template” page, click on the Welcome Page button.

6. Click on the settings button to customize the Index page.

7. In the settings window, select Azure as the form of social login. If second step mac authentication is needed, please check enable second step mac authentication checkbox.

8. Adjust other configurations as needed.

9. Click the Save changes button.

10. To further customize the template, refer to the Customizing Captive Portal Templates section.

11. After customizing the portal, click on the Save button to save your settings.

Assigning the Captive Portal to Access Point

Follow the instructions in the Assign a Guest Portal to the Access Point section to assign the created captive portal to the access point.

Add Redirect URI to Azure

Add the redirect URL of your captive portal to the Azure portal. Refer to the Add Redirect URI section in the Microsoft Authentication documentation for detailed instructions.

Creating a Two-Factor Authentication Group

1. In case of a MAC address not found error, create a group.
2. Refer to the Creating a Two-Factor Authentication Group section for detailed steps. In this case, the Enable token authentication checkbox can be ignored.
3. Only adding the MAC address is necessary for this Azure authentication.

4. Assign the user to the created group. Also, you can add expiry time also.
5. Save the changes.
6. Multiple MAC addresses can be added in this manner.

7. Once the above steps are completed, users can log in to the captive portal using Azure authentication.

Okta Authentication for Captive Portal

Overview

This technical documentation guides you through the process of configuring Okta authentication for a Captive Portal using the Pine template on EnGenius hardware. Follow the steps outlined below to seamlessly integrate Okta for social login on your captive portal.

Template Customization with Pine Template

1. This feature is compatible with the Pine template on EnGenius hardware.

2. To start the configuration, Okta should be integrated with KloudManage, refer to the Okta Authentication section to know how to do it.

3. For detailed instructions on customizing templates, refer to the Customizing Captive Portal Templates section.

4. In this case, proceed by selecting the Pine template using the designated button.

5. On the Configure Template page, click on the Index Page.

6. Click on the settings button to customize the Index page.

7. In the settings window, select Okta as the form of social login.

8. Adjust other configurations as needed.

9. Click the Save Changes button.

10. To further customize the template, refer to the Customizing Captive Portal Templates section.

11. After customizing the portal, click on the Save All button to save your guest portal.

Assigning the Captive Portal to Access Point

Follow the instructions in the Assign a Guest Portal to the Access Point section to assign the created captive portal to the access point.

Add Redirect URI to Okta

1. Add the redirect URL of your captive portal to the Okta App. Refer to the Okta Authentication document for detailed instructions.

2. Once the above steps are completed, users can log in to the captive portal using Okta.

Sponsor Authentication with OTP

Introduction

One method of authentication within captive portals is sponsor-based authentication, where users are granted access by a sponsor. In this document, we will discuss the setup and configuration of sponsor authentication with one-time passwords (OTPs) using the Flora template in Meraki hardware or the Raga template in Kloudspot Gateway hardware.

Template Customization

1. Choose the Flora template for Meraki hardware or the Raga template for Kloudspot Gateway hardware. For a detailed walkthrough on customizing templates, please refer to the “Customizing Captive Portal Templates” section.

2. Access the welcome page in the template configuration section.

3. Click on the settings button.

4. Select the following form fields: Name, Phone, Email, Sponsor Email, and WI-FI Access Period.

   Note: WI-FI Access Period is optional but recommended for better control over access duration.

5. Scroll down and check the Sponsor Based Authentication checkbox.

6. Check the Enable Sponsor authentication with OTP option.

   Note: If you only want Sponsor Based Authentication, you do not need to check the Sponsor authentication with the OTP.

7. Adjust other configurations as necessary.

8. Click the Save changes button.

9. To learn more about template customization, refer to the Customizing Captive Portal Templates section.

10. After customizing the portal as per your requirement click on Save button and save.

Assigning the Captive Portal to Access Point

1. Follow the guidelines provided in the Assign a Guest Portal to the Access Point section to assign the customized captive portal to the access point.

   Note: The captive portal’s expiration time will coincide with the access point’s expiration time if the WI-FI Access Period check box is not checked.

Add Sponsored Email or Domain

1. Access captive portal settings.

2. Go to Sponsor Authentication Settings tab.

3. Click on the Create new button.

4. Select the previously created template.

5. Choose one of the following options:

   a. Enter the sponsor’s email address directly:

   • Check the Set Sponsor Emails checkbox.
   • Click on the Add email address button.
   • Enter sponsor name and email.

b. Provide Sponsor’s Email Domains:

• Enter email domains, separating multiple domains with commas.

6. Set the timeout duration for sponsor requests.

7. Click the Save button to save the changes.

Testing

1. Now that the captive portal is configured, it’s essential to test it to ensure proper functionality. Test the captive portal by accessing the network and initiating the sponsor authentication process.

2. On the captive portal login page, enter the user’s email ID, phone number, sponsor’s email, name, Wi-Fi expiration time and click on the Request Access button.

Note: The Wi-Fi expiration time dropdown is only available if the WI-FI Access Period field is checked.

3. Authentication mail will be sent to the sponsor immediately.

4. The sponsor can approve or decline it.

5. Once approved, the user can use the internet.

MAC Authentication

Introduction

This technical document provides step-by-step instructions for configuring Captive Portal MAC Authentication using EnGenius hardware and Block template. Captive Portal MAC Authentication allows access to the internet only to users whose MAC addresses are whitelisted.

Template Configuration

1. Navigate to Captive Portal > Guest Portals > Create New.

2. Enter captive portal name and click on Create.

3. Choose the Block Template from EnGenius Hardware.

2. Navigate to the Access Blocked Page within the template configuration section.

3. Click on the settings button.

4. Configure the following parameters as per your requirements:

   • Logo
   • Title Text
   • Warning Text
   • Redirect URL
   • Background Image

5. Once configured, click on the Save Changes button to apply the settings.

6. Finally, click the Save All button to save the template.

Assigning the Captive Portal to Access Point

1. After creating and configuring the template, the next step is to assign it to an access point.

2. Follow the guidelines provided in the Assign a Guest Portal to the Access Point section to assign the customized captive portal to the access point.

Whitelisting MAC Addresses

To allow internet access to users based on MAC address whitelisting, follow these steps:

Create a Whitelist Group:

1. Refer the Create a Group whitelist section to learn how to do that.

2. Enter the following details:

   • Authentication Domain
   • Name
   • Expiry Type
   • Expiry Date

   Note: No need to add a CSV file. Ensure the name of the group matches your network name.

Create a User Whitelist:

1. Refer the Create a User Whitelist section to learn how to do this.

2. Check the Select Group checkbox and choose the group created in the previous step.

3. Add the MAC addresses of the users who should have direct access to the captive portal.

4. Once the above steps are completed, users whose MAC addresses are whitelisted will have access to the internet via the configured Captive Portal.

Create Guest Users

1. In this section, we delve into the crucial process of generating guest user accounts within your captive portal. Creating guest users is a fundamental step with multifaceted benefits.

By crafting individualized guest accounts, you gain control over access, ensuring that only authorized individuals can connect to your network. This level of control enhances security and provides a more personalized experience for your guests.

Moreover, guest user creation empowers you with the ability to monitor and track network usage, fostering accountability and compliance. Additionally, this feature streamlines the authentication process for your guests, ensuring a seamless and secure connection.

2. To facilitate this process, it’s necessary to include fields for entering a user ID and password on the guest portal’s welcome page. To learn how to design a welcome page with these elements, please consult the “Customizing Captive Portal Templates” section for detailed instructions.

3. To create a guest user, Log in to your Kloud Manage account.

4. Then Navigate to CAPTIVE PORTAL > GUEST USERS > Add Guest user.

5. Fill in the following in the window that opens.

User ID: Enter the User ID that will help the user to log in.

Name: Enter the User’s name.

Email: Enter the User’s Email address.

Allowed Number of Devices: Enter the limit on how many devices this token can be used on.

Additional User Info: Enter any additional information about the user here. This is optional.

Max Bandwidth per Device in MBs (0 for unlimited): Enter the maximum bandwidth available with this token.

Max Upload Speed per Device in MBPS (0 for unlimited): Enter the maximum Upload Speed available with this token.

Max Download Speed per Device in MBPS (0 for unlimited): Enter the maximum Download Speed available with this token.

Start DateTime: Select the date from when this token should be activated.

Expiry DateTime: Select the last date for which the token should be active.

Password: Enter the password required to login to the user.

Re-enter Password: Re-enter the password.

6. Click on the Save button to save the guest user.

7. If you want to add multiple users together, you can use the Bulk Upload Multi-Users option.

8. You can do more with the buttons below the action field.

1. Edit User details

2. Credit details

3. device details

4. Change the password

5. Delete the user

Approve or decline the user request

In cases where the chosen authentication method is “Verify by Admin Authentication,” guests entering the portal are required to provide their email ID and send an authentication request. In this section, we’ll explore the steps to either APPROVE or DECLINE these authentication requests.

Consult the “Customizing Captive Portal Templates " section for instructions on incorporating the Admin Authentication method.

1. When you connect to Wi-Fi, the login page will appear.

2. Fill in the form field information. This will differ depending on the portal you enter.

3. Then click Verify by Admin Authentication button.

4. As soon as the user logs in, the CP_ADMIN and CP_USER will receive an email, informing them that a new user request has arrived.

5. After the authentication process, the connection will be activated.

Approve a new user request.

1. If Admin Authentication is enabled in the authentication type. Each new user must be approved by the CP_ADMIN/CP_USER. Follow the steps described below to accomplish this.

2. Log in to your Kloud Manage account.

3. Then Navigate to CAPTIVE PORTAL > USER AUTHENTICATION.

4. The next window displays a list of all authentication requests. Here admin can approve or decline as required.

5. After you approve, enter the user’s allotted time in the popup window that appears and click the Save button. By default, one day is permitted. You can edit it if you want to make changes.

6. The user will receive an approve/decline message after 1 minute of approval/decline.

7. Then ‘ Click here to continue’ button and access the portal.

Create a user whitelist

1. This feature is particularly useful for scenarios where certain users, such as staff or trusted individuals, should have uninterrupted internet access without the need to authenticate through the captive portal. By creating a User Whitelist, you can streamline their connectivity experience while ensuring that others still go through the necessary authentication steps.

In this section, we will explore how to set up and manage a User Whitelist within your KloudPortal configuration.

2. To create a user whitelist, Log in to your Kloud Manage account.

3. Then Navigate to CAPTIVE PORTAL > USER WHITELIST > Create User.

4. Enter all the necessary information and click the Save button.

5. There are two choices available: either include this device in an existing group or specify a custom expiration date. Choose any of these as per your requirement.

Create a user blacklist

1. Creating a User Blacklist is a crucial aspect of network management, especially when you need to restrict specific users’ access to your network. Unlike the User Whitelist, which grants certain individuals uninterrupted internet access, the User Blacklist allows you to block or suspend access for specific users or devices.

In this section, we will delve into the process of setting up and managing a User Blacklist within your Kloud Portal configuration.

2. To create a user blacklist, Log in to your Kloud Manage account.

3. Then Navigate to CAPTIVE PORTAL > USER BLACKLIST > Create New.

4. Enter all the necessary information and click the Create button.

Create a Group Whitelist

The group whitelist feature is a way to allow a specific group of users to bypass the captive portal login process and access the internet directly. This feature can be useful in situations where certain users, such as employees or trusted partners, need to have immediate access to the internet without having to log in every time they connect to the network.

Create a group whitelist.

1. To create a Group whitelist, Log in to your Kloud Manage account.

2. Then Navigate to CAPTIVE PORTAL > GROUP WHITELIST > Create Group

3. Fill in all the details and click the Save button.

4. Then click on the Upload Bulk Users CSV icon from the action column.

5. In the window that opens, you can upload the CSV file.

6. Click on the " Click here to download the sample file " button to get a sample of the CSV file.

7. You can add the required information in the downloaded .csv file. Things to keep in mind while adding information are given in the CSV file.

8. Once the CSV file is ready, click on the question mark symbol in the popup window. Then select the CSV file you saved and click on the Save Changes button.

Create a guest token

1. A guest token serves as an exclusive identifier designed for individuals using a captive portal for their initial network access. It eliminates the necessity of entering a username and password, as the guest token serves as the primary login credential for users.

Furthermore, guest tokens can be customized to automatically expire either after a defined duration or when the user logs out. This functionality plays a vital role in enhancing network security by guaranteeing that access is restricted exclusively to authorized users, thereby safeguarding the network from unauthorized entry.

2. To create a guest token, Log in to your Kloud Manage account.

3. Then Navigate to CAPTIVE PORTAL > GUEST TOKENS > Add Multi-Device Tokens.

4. Fill the following in the window that opens.

Check the Active checkbox to activate the token.

Token: Enter the token you want to create here. The user will log in using this.

Allowed Number of Devices: Enter the limit on how many devices this token can be used on.

Max Bandwidth per Device in MBs (0 for unlimited): Enter the maximum bandwidth available with this token.

Max Upload Speed per Device in MBPS (0 for unlimited): Enter the maximum Upload Speed available with this token.

Max Download Speed per Device in MBPS (0 for unlimited): Enter the maximum Download Speed available with this token.

Start DateTime: Select the date from when this token should be activated.

Expiry DateTime: Select the last date for which the token should be active.

5. Click the Save button to save the changes.

6. You can download a CSV file that contains all the registered tokens by clicking on the ‘ Export as CSV ’ button.

7. You can print all the tokens by clicking on the ‘ Print Token ’ button.

8. You can filter tokens on the basis of their status, Token Group Name, and Start Date Time.

9. If you want to generate tokens automatically then you can use the G enerate Multi-Device Token option.

10. If you want to import multi-device tokens then you can use the B ulk Upload Multi-Device Token option.

Authenticate or decline a sponsored user

When utilizing Sponsor Email authentication in your portal, users are required to provide their email addresses, along with their sponsor’s email address, and then submit a request. Following this, both the administrator and the sponsor will expeditiously receive an email containing the authentication request. This section will provide comprehensive guidance on efficiently managing and responding to these authentication requests.

Consult the “Customizing Captive Portal Templates" section for instructions on incorporating the Sponsor Email authentication method.

1. When a user enters the captive portal, they will be asked to enter the sponsor’s email id on the welcome page.

2. Enter the sponsor’s email address and click on the Request Access button.

3. The sponsor will receive the requested information via email immediately. Click on the CLICK HERE button to access the approval page.

4. Sponsor can give his response by clicking on the Approve/Decline button in the window that opens.

5. Once a response has been provided, the confirmation window will appear.

6. If it is approved, the user will get an email informing about it.

7. Then the user can use the internet by clicking the C lick here to continue button from the success page.

Media Resources

Media resources serve as the fundamental building blocks. These resources encompass a variety of content types, from static images and slideshows to dynamic elements like YouTube videos, Twitter feeds, Google ads, and even Survey Monkey surveys. This section will guide you through the process of seamlessly integrating these diverse media resources into your campaigns, ensuring your content engages and captivates your captive portal’s audience effectively.

1. Resources to run in a campaign can be called as media resources.

2. Log in to your Kloud Manage account.

3. Then Navigate to CAPTIVE PORTAL > MEDIA RESOURCES > Add Media Resources.

4. Enter the resource name and select the media type from the drop-down.

5. Media types supporting Images, slideshows, and videos are static content and YouTube, Twitter, google ads, and survey monkey are external content.

6. Custom content can also be included on the web page and will be presented on the campaign.

7. Select the type, add the content, and click on the Save button.

8. New added media resources will display on the table with some actions.

• Edit icon: allows the user to edit the resource.
• Delete icon: allows the s user to delete the added resource.
• Preview icon: allows the user to view the resource.

Media Campaigns

1. After adding your media resources, the next step is creating media campaigns. In this section, we’ll guide you through crafting effective campaigns that make the most of your resources. You’ll learn how to create engaging campaigns that leave a strong impression on your captive portal’s audience.

2. To set up a media campaign, it’s essential to begin by adding a media resource. You can find instructions on how to create a media resource in the “Media Resource” section.

3. Log in to your Kloud Manage account.

4. Then Navigate to CAPTIVE PORTAL > MEDIA CAMPAIGN > Add Media Campaign.

Basic

1. Add a media name and select type, two types of media campaign options are provided which are online and offline.

2. Online campaign is referred to as the Kloud portal, and it runs only when the user is connected.

3. Offline type campaign runs after the user is logged in and got out of network, so it is scheduled

4. Trigger condition and Campaign frequency can be selected depending upon the user’s choice to run a campaign.

5. Select a weight to prioritize the run time of the campaign.

Content

1. Select Content Type and media Resources then click the Next button.

2. Content Type: it will only have static content images, slideshows, and videos.

Filter

1. Filters to run a campaign based on some attributes such as tags.

2. Enabled access points with some tags, so that campaign run on users who are connected to those ap’s and devices.

3. User can add more demographic options to run campaigns for specific users such as gender, age group, browser, devices, OS.

Schedule Campaign

1. Users can schedule a campaign by selecting the day and time to run a campaign and can also opt for the always option.

2. The campaign will be different depending on when the user logs in

Location

1. Campaigns will run on a selected location; the user can also select the zone and the particular devices for a campaign to run.

2. Click the Save button to save the campaign.

3. Once the campaign is created, it will be shown in the campaign list.

• Edit icon: Allows to edit the campaign.
• Delete icon: allows to delete the added campaign.