Skyfii Integration with Wi-Fi Cloud

Deployment Overview

WatchGuard Wi-Fi Cloud integrates with Skyfii to provide captive portal services to end users. With Wi-Fi Cloud, you can configure an SSID to direct users to the Skyfii captive portal. This enables you to utilize your marketing campaigns configured in Skyfii for your Wi-Fi Cloud users, and send analytics data to Skyfii servers.

Test Topology

For more information about network port configuration for communications between your APs, Wi-Fi Cloud, and Skyfii, see your firewall documentation, Skyfii documentation, and the WatchGuard Wi-Fi Cloud documentation.

SkyFii Topology

WatchGuard Wi-Fi Cloud Basic Configuration

For detailed information on WatchGuard Wi-Fi Cloud AP deployment, see the Wi-Fi Cloud Getting Started Guide.

Configure WatchGuard Wi-Fi Cloud for Skyfii Integration

These sections describe how to configure Wi-Fi Cloud to integrate with Skyfii.

Add a RADIUS Server

Before you begin, verify the RADIUS server settings with your Skyfii support documentation. The Skyfii settings are subject to change.

To configure a RADIUS server in Wi-Fi Cloud:

  1. Open Discover.
  2. Select the location where to apply the settings.
  3. Select Configure > WiFi > RADIUS.
  4. Click Add RADIUS Server.
  5. Type the RADIUS Server Name, IP Address, Authentication Port, Accounting Port, and Shared Secret of the Skyfii RADIUS server.
  6. Click Save.
  7. Repeat these steps to create a secondary RADIUS server.

Screen shot of the RADIUS server settings in Wi-Fi Cloud Discover

Add an SSID

To specify the parameters for wireless access, you must create and assign SSIDs to your APs. The SSID settings are automatically inherited from parent locations. Verify the correct top-level location when you create the SSID.

To add an SSID:

  1. Open Discover.
  2. Select the location where to apply the settings.
  3. Select Configure > WiFi, then select the SSID tab.
  4. Click Add SSID.
  5. Type an SSID Name and Profile Name.
  6. In the Select SSID Type section, select Guest.

Screen shot of the Add SSID name page in Wi-Fi Cloud Discover

  1. Select the Security tab.
  2. Set the Select Security Level for Associations option to Open.

Screen shot of the Add SSID security page in Wi-Fi Cloud Discover

  1. Select the Captive Portal tab.
  2. Select the Captive Portal check box.
  3. From the drop-down list, select Third-Party Hosted as the portal type.
  4. Select the With RADIUS Authentication check box.
  5. In the Splash Page URL text box, type the appropriate captive portal domain.

Use the format: <captive-portal-domain>/welcome/watchguard/cloud/.

For example: https://guestwifi-us.skyfii.com/welcome/watchguard/cloud

Verify the regional captive portal domain name in the Skyfii support documentation:

  1. In the Shared Secret text box, type the shared secret for Skyfii. Currently, this is "secret". Verify this shared secret with the current Skyfii support documentation before you proceed.
  1. In the Websites that users can access before login section (Walled Garden), make sure you add the Skyfii portal URL and any other supporting sites that are used by the portal. For more information, see the Skyfii support documentation for the required servers in your region.

You must add each IP address listed in your regional server documentation:

You must also add these addresses:

  1. In the Redirect URL text box, type the web site URL to which a user will be redirected after accessing the Skyfii portal.
    Optionally, you can use a Venue that you configured in the Skyfii cloud interface.

WatchGuard Wi-Fi Cloud Captive Portal Expanded

  1. Click the RADIUS Settings link.
  2. From the Primary and Secondary Authentication Server and Accounting Server drop-down lists, select the RADIUS server configuration you created for Skyfii.
  3. Set the Accounting Interval to 1 minute.

Screen shot of the RADIUS settings for a Captive Portal in Wi-Fi Cloud Discover

  1. Click Save to save the RADIUS settings.
  1. Click Save to save the SSID settings.

The SSID will be applied to APs in the selected location. Make sure you configure radio and device settings for your APs if you have not already configured these settings.

Get the WatchGuard AP Details for Skyfii Integration

You must record the name and MAC address of each WatchGuard AP you want to use in your Skyfii integration.

To obtain the details for each WatchGuard AP:

  1. Open Discover.
  2. Select Monitor > WiFi, then select Access Points.
    Your managed APs are displayed.
  3. Record the Name and MAC Address of each AP you want to use with Skyfii.

Screen shot of the Monitor > WiFi  > Access Points Page in Wi-Fi Cloud Discover

Configure Wi-Fi Cloud to Forward Analytics Data

To configure Wi-Fi Cloud to forward presence analytics data to Skyfii servers:

  1. Open Discover.
  2. Select the location where to apply the settings.
  3. Select Configure > WiFi, then select Device Settings.
  4. Select the Device tab.

Screen shot of the Third-Party Analytics configuration in Wi-Fi Cloud Discover

  1. Select the Analytics Integration with Third-Party Server check box.
  2. Select JSON as the Visibility Analytics Format.
  3. In the Server URL text box, type the URL of the Skyfii analytics server.

Use the format: <ingest-domain>/watchguard/cloud/

For example: https://skyingestor-us.skyfii.com/watchguard/cloud

Use the appropriate server for your region:

  1. Set the Send Intervalto 10 seconds.
  2. In the Authorization section, select Key, then type the Skyfii authorization key. For example: FHWqVX2FAFqo4wrXnLa87JmF4
    Confirm this Authorization Key with your Skyfii support documentation.
  3. In the Client RSSI Update Interval section of the Device Settings, set the RSSI Update Interval to 10 seconds.

Screen shot of the Client RSSI Update Interval settings in Wi-Fi Cloud Discover

  1. Click Save to save the device settings.

Configure Skyfii for WatchGuard Wi-Fi Cloud

Before you begin, verify these directions with Skyfii support documentation (https://support.skyfii.com). The Skyfii settings are subject to change.

  1. Log in to your Skyfii Cloud region.
  2. Click in the upper-right corner of the Skyfii interface.

Screen shot of the Administration icon bar in Skyfii

  1. Select Venues.
  2. Click Add New.

Screen shot of the Add Venue page in Skyfii

  • Type a Name for the venue.
  • From the Region drop-down list, select your region.
  • From the Timezone drop-down list, select your timezone.
  • From the Category drop-down list, select an appropriate category.
  • From the Network drop-down list, select the appropriate network.
  • Select the Enabled check box.
  • From the Campaign Marketing List drop-down list, select a campaign or select Create new Marketing List.

Screen shot of the Campaign List settings in Skyfii

  • You can optionally type an Address, Suburb, Postcode, Country, State, Latitude, and Longitude.

Screen shot of the optional Venue settings page in Skyfii

  1. Click Create.
  2. From the navigation pane, select Venues.
  3. Select the Venue you created.
  4. Click the Engage Settings link.

Screen shot of the Venue Engage Settings page in Skyfii

  1. You can optionally configure the Minimum minutes between contact, Marketing Email From Address, and Market Email From Name.
  2. Click Save Changes.

Create an Access Point

To create an Access Point in Skyfii:

  1. Click in the upper-right corner of the Skyfii interface.
  2. Select Access Points.
  3. From the Venue drop-down list, select the Venue you created.

Screen shot of the Create Access Point page in Skyfii

  • If you have configured a floor, select a Floor from the Floor drop-down list.
  • Type the Name and MAC Address of the WatchGuard AP. Click Add One or Add Range to add multiple APs.
  • From the AP Placement Profile drop-down list, select the profile for your configuration.
  1. Click Create.

Test the Skyfii Integration

To test your integration with Skyfii:

  1. Use a wireless client to connect to the SSID you created in Wi-Fi Cloud.
  2. Open a web browser.
    The Skyfii splash page appears.
  3. Complete the requested information on the splash page.
    You should be forwarded to the Redirect URL or Venue you configured.