Purple Wi-Fi and Wi-Fi Cloud Integration Guide

Deployment Overview

This guide demonstrates how to integrate WatchGuard Wi-Fi Cloud with Purple Wi-Fi authentication to enable guest users to authenticate to a captive portal.

Platform and Software

The hardware and software used to complete the steps in this document include:

  • Purple Wi-Fi:
    • Purple Wi-Fi Management Portal
  • WatchGuard:
    • WatchGuard AP325
    • WatchGuard Wi-Fi Cloud Account

Test Topology
Diagram of the network flow for AP and Purple Wi-Fi authentication

Purple Wi-Fi Configuration

  1. Log in to the Purple Wi-Fi Management Portal.
  2. Click .

Purple Wi-Fi Management page

  1. Select Management > Locations.

Purple Wi-Fi management page

  1. Select Venues and Groups.
  2. Follow the instructions in the wizard to add a new venue.
  3. Select your new venue from Venues and Groups.
  4. From your venue, select Hardware.
  5. Click Add hardware.
  6. From the Hardware type drop-down list, select WatchGuard Wi-Fi Cloud AP.
  7. The Name is added automatically when you select the Hardware type, and you can manually edit this name.
  8. In the Hardware Mac Address text box, add the MAC address of your WatchGuard AP.
  9. Click View Manual Online or Download Manual to get the configuration steps and information required for the WatchGuard Wi-Fi Cloud configuration.

Purple Wi-Fi management - Venue hardware page

  1. Click Save details.

Purple Wi-Fi management - Venue hardware page

WatchGuard Wi-Fi Cloud Basic Configuration

For detailed information on WatchGuard Wi-Fi Cloud AP deployment, see the Getting Started Guide.

These instructions use Manage for the Wi-Fi Cloud configuration. You can now also perform these configuration steps with the Discover application. For more information, see About Discover.

Configure WatchGuard Wi-Fi Cloud to Integrate with Purple Wi-Fi

The information required in these steps is detailed in the manual that you downloaded from Purple Wi-Fi in the previous step. For more information, see Purple Wi-Fi Configuration.

  1. Log in to WatchGuard Wi-Fi Cloud.
  2. Open Manage.
  3. Select Configuration > Device Configuration > RADIUS Profiles.
  4. On the RADIUS Profiles tab, click Add RADIUS Profile.

Add RADIUS Profile page in Wi-Fi Cloud Manage

  • In the Profile Name text box, type a descriptive name for the profile.
  • In the IP Address text box, type the Primary IP address of the RADIUS server from Purple Wi-Fi.
  • In the Authentication Port text box, type the port number listed for the RADIUS server from Purple Wi-Fi.
  • In the Accounting Port text box, use the default setting.
  • In the Shared secret text box, type the shared secret from the Purple Wi-Fi RADIUS server.
  1. Click Save.
  2. Repeat these steps for the second Purple Wi-Fi RADIUS server.
  1. From Manage, select Configuration > Device Configuration > SSID Profiles.
  2. Click Add New Wi-Fi Profile.

Add SSID Profile page in Wi-Fi Cloud Manage

  • Type the Profile Name and SSID name.
  • Select the Broadcast SSID check box.
  • Expand the Security section.
  • From the Security Mode drop-down list, select Open.
  • Select the Client Isolation check box.
  1. Expand the Network section.
  1. Select NAT, then configure the IP address range and DNS server details:
  • Start IP Address
  • End IP Address
  • Local IP Address
  • Subnet Mask
  • Lease Time
  • DNS Servers

Add SSID Profile - Network Settings page in Wi-Fi Cloud Manage

  1. Expand the Captive Portal section of the SSID Profile.

Add SSID Profile - Captive Portal Settings page in Wi-Fi Cloud Manage

  • Select the Enable Captive Portal text box.
  • Select External Splash Page with RADIUS Authentication.
  • In the Splash Page URL text box, type the URL provided by Purple Wi-Fi.
  • In the Shared Secret text box, type the shared secret used with Purple Wi-Fi.
  • In the Walled Garden section, add the domains provided by Purple Wi-Fi.
  • In the Redirect URL text box, type the URL provided by Purple Wi-Fi.
  • Clear the Enable HTTPS Redirection text box.
  1. In the Captive Portal settings, click the RADIUS Settingslink.

Add SSID Profile - Captive Portal - RADIUS Settings page in Wi-Fi Cloud Manage

  • In the Called Station Id text box, type %m.
  • From the Primary Authentication Server drop-down list, select the RADIUS server you configured for Purple Wi-Fi.
  • From the Secondary Authentication Server drop-down list, select the RADIUS server you configured for Purple Wi-Fi.
  • From the Primary Accounting Server drop-down list, select the RADIUS server you configured for Purple Wi-Fi.
  • From the Secondary Accounting Server drop-down list, select the RADIUS server you configured for Purple Wi-Fi.
  • From the Interval list, select 2 minutes.
  1. Click Save to save the RADIUS settings
  2. Click Save to save the SSID Profile.

SSID Profiles page in Wi-Fi Cloud Manage

  1. From Manage, select Configuration > Device Configuration > Device Templates.
  2. Click Add Device Template.
  3. In the Template Name text box, type a descriptive name for the Device Template.
  4. Expand the Device Password section, then in the Password text box, type a password to use for this template.

Add Device Template page in Wi-Fi Cloud Manage

  1. Expand the Radio Settings section for each radio.
  2. In Wi-Fi Profiles tab, click Add SSID Profile, then add the SSID Profile you created for the guest network.

Add Device Template - Radio Settings page in Wi-Fi Cloud Manage

  1. Click Save to save device template.

Device Templates page in Wi-Fi Cloud Manage

  1. From Manage, select Monitoring > Managed Devices.
  2. Select the required AP, then click the Device Template link to apply the new Device Template to the AP.

Monitoring > Managed Devices page in Wi-Fi Cloud Manage

Test Purple Wi-Fi Integration

  1. Use your wireless client device to connect to the Wi-Fi Cloud captive portal.
  2. Your browser will redirect to the Purple Wi-Fi authentication page.

Purple Wi-Fi login page

  1. You are prompted to log in with your existing account or you can register a new account.
  2. When you are authenticated, you will be able to access the Internet through the captive portal.