Configuring a Guest Access Splash Page Profile

Enter a unique name to identify the splash profile.

NOTE: If you attempt to enter an existing splash profile's name, Aruba Central displays a message stating that Splash page with this name already exists.

Configure any of the following authentication methods to provide a secure network access to the guest users and visitors.

Anonymous

Authenticated

Facebook Wi-Fi

Configure the Anonymous login method if you want to allow guest users to log in to the Splash page without providing any credentials.

For anonymous user authentication, you can also enable a pre-shared key to allow access. To enable a pre-shared key based authentication, set the Guest Key to ON and specify a password.

Configure authentication and authorization attributes, and login credentials that enable users to access the Internet as guests. You can configure an authentication method based on sponsored access and social networking login profiles.

The authenticated options available for configuring the guest splash page are described in the following rows.

The Username/Password based authentication method allows pre-configured visitors to obtain access to wireless connection and the Internet. The visitors or guest users can register themselves by using the splash page when trying to access the network. The password is delivered to the users through print, SMSShort Message Service. SMS refers to short text messages (up to 140 characters) sent and received through mobile phones. or email depending on the options selected during registration.

To allow the guest users to register by themselves:

1. Enable Self-Registration.

2. Set the Verification Required to ON if the guest user account must be verified.

3. Specify a verification criteria to allow the self-registered users to verify through email or phone.

If email-based verification is enabled and the Send Verification Link is selected, a verification link is sent to the email address of the user. The guest users can click the link to obtain access to the Internet.

If phone-based verification is enabled, the guest users will receive an SMS. The administrators can also customize the content of the SMS by clicking on Customize SMS.

4. Specify the duration within the range of 1-60 minutes, during which the users can access free Wi-FiWi-Fi is a technology that allows electronic devices to connect to a WLAN network, mainly using the 2.4 GHz and 5 GHz radio bands. Wi-Fi can apply to products that use any 802.11 standard. to verify the link. The users can log in to the network for the specified duration and click the verification link to obtain access to the Internet.

By default, the expiration date for the accounts of self-registered guest users is set to infinite during registration. The administrator or the guest operator can set the expiration date after registration.

Social Login—Enable this option to allow guest users to use their existing login credentials from social networking profiles such as Facebook, Twitter, Google, or LinkedIn and sign into a third-party website. When a social login based profile is configured, a new login account to access the guest network or third-party websites is not required.

Facebook— Allows guest users to use their Facebook credentials to log in to the splash page. To enable Facebook integration, you must create a Facebook app and obtain the app ID and secret key. For more information on app creation, see Creating a Facebook App. Enter the app ID and secret key for client ID and client Secret respectively to complete the integration.

Twitter—Allows guest users to use their Twitter credentials to log in to the splash page. To enable Twitter integration, you must create a Twitter app and obtain the app ID and secret key. For more information, see Creating a Twitter App. Enter the app ID and secret key for client ID and client secret respectively to complete the integration.

Google—Allows guest users to use their Google credentials to log in to the splash page. To enable Google integration, you must create a Google app and obtain the app ID and secret key. For more information, see Creating a Twitter App .

1. Enter the app ID and secret key for client ID and client secret respectively.

2. To restrict authentication attempts to only the members of a Google hosted domain, enter the domain name in the Gmail for Work Domain text box. Ensure that you have a valid domain account licensed by Google Domains or Google Apps. For more information see:

https://apps.google.com/intx/en_in/

https://domains.google.com/about/

3. Specify a text for the Sign-In button.

LinkedIn—Allows guest user to use their LinkedIn credentials to log in to the splash page. To enable LinkedIn integration, you must create a LinkedIn app and obtain the app ID and secret key. For more information, see Creating a LinkedIn App. Enter the app ID and secret key for client ID and client secret respectively to complete the integration.

If you want to enable network access through the free Wi-Fi service offered by Facebook. Select the Facebook Wi-Fi option. The Facebook Wi-Fi feature allows you to pair your network with a Facebook business page, thereby allowing the guest users to log in from Wi-Fi hotspotsHotspot refers to a WLAN node that provides Internet connection and virtual private network (VPN) access from a given location. A business traveler, for example, with a laptop equipped for Wi-Fi can look up a local hotspot, contact it, and get connected through its network to reach the Internet. using their Facebook credentials.

If the Facebook Wi-Fi business page is set up, when the users try to access the Internet, the browser redirects the user to the Facebook page. The user can log in with their Facebook account credentials and can either check in to access free Internet or skip checking in and then continue.

After selecting the Facebook Wi-Fi option, complete the following steps to continue with the Facebook Wi-Fi configuration.

1. Click the Configure Now link.

2. Sign in to your Facebook account.

3. If you do not have a business page, click Create Page. For more information on setting Facebook Wi-Fi service, see Setting up Facebook Wi-Fi for Your Business at https://www.facebook.com/help/126760650808045.

NOTE: Instant AP devices support Facebook Wi-Fi services on their own, without Aruba Central. However, for enabling social login based authentication, the guest splash pages must be configured in Aruba Central. For more information on Facebook Wi-Fi configuration on an Instant AP, see the Aruba Instant User Guide.

To allow users access the Internet when the external captive portalA captive portal is a web page that allows the users to authenticate and sign in before connecting to a public-access network. Captive portals are typically used by business centers, airports, hotel lobbies, coffee shops, and other venues that offer free Wi-Fi hotspots for the guest users. server is not available, click the Allow Internet In Failure toggle switch. By default, this option is disabled.

To override the default common name, click the Override Common Name toggle switch and specify a common name. The common name is the web page URLUniform Resource Locator. URL is a global address used for locating web resources on the Internet. of the guest access portal. By default, the common name is set to securelogin.arubanetworks.com. The guest users can override this default name by adding their own common name.

If your devices are managed by AirWave and you want to use your own certificate for the captive portal service, ensure that the captive portal certificate is pushed to the Instant AP from the AirWave management system. When the appropriate certificate is loaded on the AP, perform the following actions:

1. Run the show captive-portal-domains command at the Instant AP command prompt.

2. Note the common name or the internal captive portal domain name.

3. Add this domain name in the Override Common Name field on the Splash Page configuration page.

4. Save the changes.

To set password for anonymous users, enable the Guest Key and enter a password.

Enable the Sponsored Guest option to provide authorization control to a guest sponsor for allowing and denying a guest from accessing the network.

Enter accepted company domain names. The domain name must match the suffix of the sponsor's email address. The domain names must be company names and not any public domain names such as gmail, yahoomail, and so on. To add more domain names, click the add icon and enter the domain name. This is a mandatory field.

Enter the allowed email addresses. If you leave this field empty, all emails that correspond to the allowed domains list are permitted to sponsor guests. To add more sponsor emails, click the add icon and enter the sponsor's email address. This is an optional field.

If Anonymous or Authenticated option is selected as the guest user authentication method, specify a method for redirecting the users after a successful authentication. Select one of the following options:

Redirect to Original URL— When selected, upon successful authentication, the user is redirected to the URL that was originally requested.

Redirect URL— Specify a redirect URL if you want to override the original request of users and redirect them to another URL.

If the Authenticated option is selected as the guest user authentication method, enter the authentication failure message text string returned by the server when the user authentication fails.

Enter the maximum time in Day(s): Hour(s): Minute(s) format for which a client session remains active. The default value is 0:8:00. When the session expires, the users must re-authenticate.

If MACMedia Access Control. A MAC address is a unique identifier assigned to network interfaces for communications on a network. caching is enabled, the users are allowed or denied access based on the MAC address of the connective device.

Select this check box if you want to allow the users to share the Splash Page profile. The Splash Page profiles under All Devices can be shared across all the groups.

Use this option to set a data usage limit for authenticated guest users, anonymous profiles, and Facebook Wi-Fi logins. By default, no daily usage limit is applied.

To set a daily usage limit, use one of the following options:

By Time— Specify the time limit in hours and minutes for data usage during a day. When a user exceeds the configured time limit, the device is disconnected from the network until the next day begins; that is, until 00.00 hours in the specified timezone.

By Data— Specify a limit for data usage in MB. You can set this limit to either Per User, Per Session, or Per Device. When the data usage exceeds the configured limit, the user device is disconnected from the network until the next day begins; that is, until 00.00 hours in the specified time zone.

Per User— This option applies the data usage limit based on authenticated user credentials.

Per Session—This option applies the data usage limit based on user sessions.

Per Device—This option applies the data usage limit based on the MAC address of the client device connected to the network.

Important Points to Note

The values configured for this feature do not serve as hard limits. There might be a slight delay in enforcing daily usage limits due to the time required for processing information.

For anonymous and Facebook Wi-Fi logins, the daily usage limit is applied per MAC address of the client device connected to the network.

To change the color of the splash page, select a color from the Background Color palette.

To change the color of the sign in button, select a color from the Button Color palette.

Select the fill color for the splash page header from the Header fill color palette.

To change the font color of the text on the splash page, select a color from the Page font color palette.

Select the font color of the splash page from the palette.

To upload a logo, click Browse, and browse the image file. Ensure that the image file size does not exceed 256 KB.

Click Browse to upload a background image. Ensure that the background image file size does not exceed 512 KB.

Add a suitable title for the splash page.

Enter the welcome text to be displayed on the splash page. Ensure that the welcome text does not exceed 20,000 characters.

Enter the terms and conditions to be displayed on the splash page. Ensure that the terms and conditions text does not exceed 20000 characters.

The text box also allows you to use HTML tags for formatting text. For example, to highlight text with italics, you can wrap the text with the <i> </i> HTML tag.

Specify an acceptance criteria for terms and condition by selecting any of the following options from the Display "I Accept" Checkbox:

No, Accept by default

Yes, Display Checkbox

If the I ACCEPT check box must be displayed on the Splash page, select the display format for terms and conditions.

Ensure that Display Option For Terms & Conditions has the Inline Text option auto-selected and displayed as an uneditable text.

Login Section

1–255 characters

1–255 characters

1–255 characters

1–255 characters

1–255 characters

1–255 characters

1–255 characters

1–255 characters

1–255 characters

1–255 characters

1–255 characters

1–255 characters

Up to 20000 characters

Up to 20000 characters

Up to 20000 characters

Up to 20000 characters

Register Section

Up to 20000 characters

1–255 characters

1–255 characters

1–255 characters

—

—

1–255 characters

1–255 characters

Up to 20000 characters

Verification Section

1–255 characters

1–255 characters

Up to 20000 characters

Up to 20000 characters

Up to 20000 characters

Up to 20000 characters

Up to 20000 characters

Up to 20000 characters

1–255 characters

1–255 characters