Digi IX20W-PR User Manual page 399

6. Set walled garden settings.
Walled garden settings define the "white list" of domains and subnets that unauthenticated
clients are able to access. Include the domain or subnet of the RADIUS server(s) that are being
used for authentication.
n Add domains that can be accessed by the client prior to authentication:
(config network hotspot new_hotspot)> add walled_garden domains end
domain_name
(config network hotspot new_hotspot)>
Repeat to add additional domains.
n Add IP addresses and subnets that can be accessed by the client prior to
authentication:
(config network hotspot new_hotspot)> add walled_garden subnets end
value
(config network hotspot new_hotspot)>
where value is an IPv4 address and optional subnet mask, using the format IPv4_
address[/netmask], or the keyword any.
Repeat to add additional IP addresses or subnets.
7. Save the configuration and apply the change
(config)> save
Configuration saved.
>
8. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.
Configure the hotspot to use RADIUS users authentication
RADIUS users authentication requires each hotspot user to enter a username and password. Users are
created on an external RADIUS server, and the username and password is validated by the external
RADIUS server.
By default, the router redirects unauthenticated users to the HTML authentication page located on the
router at etc/config/hotspot/login.html. You can customize the authentication page as needed, or
host an authentication page on a remote server. See
information.
Required configuration items
n Create a new hotspot
n Select RADIUS users authentication.
n IP address or hostname of the primary RADIUS server.
n Users configured on the RADIUS server.
n RADIUS server secret.
n RADIUS NAS ID.
IX20 User Guide
Customize the hotspot login page
or Enable hotspot using the default
for further
configuration.
Hotspot
399