Onboarding

​

Step 1 — Add the Device to Wiacom

1. Go to Inventory → Routers → Add New Router
2. Select Huawei / WLAN Controller from the vendor dropdown
3. Enter the required details and assign a location
4. Click Save

​

Step 2 — Create a Guest VLAN

Log in to the Huawei WLAN Controller web interface → Configuration:

1. AC Config → VLAN → Add: set a VLAN ID (e.g. 500), enable Create VLANIF
   • Description: guestwifi, IP Address format: IPv4
   • IPv4 Address/Mask: gateway IP for the guest subnet
2. IP → DHCP: ensure DHCP is enabled, click Create
   • Address pool type: Interface address pool, Select interface: VLAN<ID>
   • Advanced → Primary/Secondary DNS: your preferred DNS servers

​

Step 3 — Configure Walled Garden (Domain ACL)

Go to Security → ACL → Domain Name Configuration. Add each domain with an incrementing Domain Name ID: Under User ACL Settings → Create:

• ACL name: guestwifi, ACL number: 6030
• For each domain: Add Rule → Action: Permit, Protocol: IP, Dest domain: select domain

​

Step 4 — Configure External Portal Server

Security → AAA → External Portal Server tab:

• HTTP protocol: Enabled, HTTP interoperation mode: HTTP-based
• Port for listening to HTTP packets: 8000

Portal Authentication Server List → Create: URL Option Settings: Parameter Parsing Configuration:

• Protocol type: HTTP
• Login success response: Redirect to <PORTAL_URL>?res=success

​

Step 5 — Configure RADIUS

Security → AAA → RADIUS → RADIUS Server Profile → Create:

• Profile name: guestwifi
• Key / Confirm key: <RADIUS_SHARED_SECRET>

Authentication/Accounting Server — Create twice:

​

Step 6 — Configure Authentication Profile

1. Authentication Profile → Create → name guestwifi
2. Expand profile → Portal Profile → Add → name guestwifi
   • Portal authentication: External portal server, Active server: guestwifi, Authentication mode: Layer 3
3. RADIUS Server Profile → select guestwifi
4. Authentication Scheme → Add → name guestwifi, First authentication: RADIUS
5. Accounting Scheme → Add → name guestwifi, Real-time accounting: On, Interval: 3
6. Authentication-free Rule Profile → Add → name guestwifi, Control mode: ACL, ACL number: 6030
7. Advanced tab: HTTPS Redirection Status: Off, Portal URL encoding: Off

​

Step 7 — Configure VAP and SSID Profiles

1. AP Config → Profile → VAP Profile → Create → name guestwifi
   • Status: On, VAP type: Service VAP, Forwarding mode: Tunnel
   • Service VLAN ID: your guest VLAN, Home agent: AP, Layer 3 roaming: On, IP learning: On
2. SSID Profile → Create → name guestwifi, SSID: your guest WiFi name
3. AP Group → [group] → VAP Configuration → Add → VAP profile: guestwifi, WLAN ID: available ID
4. Under guestwifi profile: SSID Profile → guestwifi
5. Security Profile → Create → name guestwifi, Security Policy: Open
6. Authentication Profile → select guestwifi
7. Click Save at the top to persist all settings

​

Troubleshooting