cisco meraki v1.2 - odyssyspage 6 of 13 global reach technology ltd commercial in confidence...
TRANSCRIPT
CiscoMerakiSetupGuide
Page2of13GlobalReachTechnologyLtdCommercialinConfidence
DisclaimerTHISDOCUMENTATIONANDALLINFORMATIONCONTAINEDHEREIN(“MATERIAL”)ISPROVIDEDFORGENERALINFORMATIONPURPOSESONLY.GLOBALREACHANDITSLICENSORSMAKENOWARRANTYOFANYKIND,EXPRESSORIMPLIED,WITHREGARDTOTHEMATERIAL,INCLUDING,BUTNOTLIMITEDTO,THEIMPLIEDWARRANTIESOFMERCHANTABILITY,NON-INFRINGEMENTANDFITNESSFORAPARTICULARPURPOSE,ORTHATTHEMATERIALISERROR-FREE,ACCURATEORRELIABLE.GLOBALREACHRESERVESTHERIGHTTOMAKECHANGESORUPDATESTOTHEMATERIALATANYTIME.LimitationofLiabilityINNOEVENTSHALLGLOBALREACHBELIABLEFORANYDIRECT,INDIRECT,INCIDENTAL,SPECIALORCONSEQUENTIALDAMAGES,ORDAMAGESFORLOSSOFPROFITS,REVENUE,DATAORUSE,INCURREDBYYOUORANYTHIRDPARTY,WHETHERINANACTIONINCONTRACTORTORT,ARISINGFROMYOURACCESSTO,ORUSEOF,THEMATERIAL.VERSION1.2PUBLISHEDSEPTEMBER2016
Page3of13GlobalReachTechnologyLtdCommercialinConfidence
IMPORTANT-BEFOREYOUSTARTBeforeattemptingtointegrateyourhardwarecontrollerintoOdyssys,pleaseensurethatALLofthefollowingrequirementsareinplace;
• YouhaveacontrollerinstalledinanenvironmentwherecompatibleAccessPointsareconfiguredtoworkwiththecontroller,i.e-DNS,DHCPoptionsconfiguredcorrectly
• Accesspointsmustbeabletosuccessfullyobtaintheconfigurationfromcontroller
Yourclientenvironmentisconfiguredtoallownetworkclientsto;
• AssociatetoanAccessPoint
• ObtainanIPaddress
• AccesstotheinternetThefollowingcomponentsarerequiredtobeconfiguredandworkinginyourenvironmentbeforeattemptingintegrationwithOdyssys;
• DHCPServer
• DNSServer
• FirewallNATPLEASENOTE-OdyssysdoesnotusestandardRADIUSports,thereforepleasemakesureyouallowtheportsinyourfirewall,definedinyourmanage.odyssys.netCaptivePortalsettings.Thisisatechnicaldocumentandassuch,integrationofyourhardwarewithOdyssysshouldonlybehandledbytrainedindividuals.
Page4of13GlobalReachTechnologyLtdCommercialinConfidence
GETTINGSTARTEDWITHODYSSYSBeforeyouattempttoconfigureyourcontrollerforusewithOdyssys,youwillneedtocreateyourownCaptivePortalinordertogettherequireddetails.1.WithinyourInternetbrowser,navigatetohttps://manage.odyssys.net2.LogintoOdyssys,usingyourCustomerID,UsernameandPassword
3.UsingthenavigationpanelonthelefthandsideoftheOdyssysDashboard,select"CaptivePortals"then"CaptivePortals"andfinally"CreateCaptivePortal"
4.EnterthefollowingdetailstocreateanewCaptivePortalName:<NameofyourCaptivePortal>Description:<DescriptionofyourCaptivePortal>RADIUSSharedSecret:<Eitherkeepthecurrentsharedsecretorcreateyourown>HardwareVendor:Meraki
Page5of13GlobalReachTechnologyLtdCommercialinConfidence
Click"Create"tosavethesettingsandcompleteinitialsetupoftheCaptivePortal5.SelectthenewlycreatedCaptivePortalanditwilldisplaytheinformationrequiredtoconfigureMeraki-Pleasenoteyoumayneedtoscrolldowntoseetheinformation.
TECHNOTETheinformationwilldifferforeachCaptivePortalcreatedandisuniquetoeachCaptivePortal.
Page6of13GlobalReachTechnologyLtdCommercialinConfidence
CONFIGURINGODYSSYSWITHINCISCOMERAKI1.LogintoyourCiscoMerakiDashboard(dashboard.meraki.com)
2.Select“Configure”then“SSIDs”.
3.Click“rename”toassignanametoyourSSIDandthenclick“Save”oncecompleted.
4.Click“editsettings”andenterinthesettingslistedbelow.Associationrequirements:Open(noencryption)SplashPage:SignonwithmyRADIUSserver.RADIUSforsplashpage:ThesedetailsareobtainedfromyourOdyssysaccount.RADIUSaccounting:RADIUSaccountingisenabled(Note-YoumayneedtosendasupportrequesttoMerakitoenablethisfeature)RADIUSaccountingservers:ThesedetailsareobtainedfromyourOdyssysaccount.
Page7of13GlobalReachTechnologyLtdCommercialinConfidence
Page8of13GlobalReachTechnologyLtdCommercialinConfidence
WalledGarden:WalledGardenisenabled.WalledGardenRanges:ThesedetailsareobtainedfromyourOdyssysaccount,undertheCaptivePortal->GeneralInfotabandclickShowWalledGardenIPs(Note-YoumayneedtosendasupportrequesttoMerakitoenabledomainbasedWalledGardenentries)
Saveyourchangesoncecompleted.
Page9of13GlobalReachTechnologyLtdCommercialinConfidence
5.Select“Configure”fromtheleft-handsidemenuthen“SplashPage”.
6.Enterinthebelowsettings:CustomsplashURL:EnterintheSplashPageURLfromyourOdyssysaccount.Splashbehavior:EnterintheSuccessPageURLfromyourOdyssysaccount.
Saveyourchangesoncecompleted.7.Select“Wireless”then“SSIDs”andenableyourSSIDtocompletethesetup.
Page10of13GlobalReachTechnologyLtdCommercialinConfidence
ACCESSCONTROLLISTADDRESSESOdyssys54.246.86.10754.246.87.6454.243.42.24152.31.81.5154.75.232.4554.247.65.13254.75.236.90Twitterapi.twitter.com*.twimg.comGoogle74.125.29.8474.125.226.24374.125.228.1074.125.228.7474.125.228.111130.111.19.240173.194.74.95Facebook*.facebook.com*.akamaihd.net*.fbcdn.netconnect.facebook.comLinkedIn8.247.88.22523.202.203.12064.94.107.57138.108.7.20216.52.242.80216.52.242.86PayPalExpressCheckout173.0.82.77/3292.122.246.85/3266.117.29.34/32216.113.188.89/3266.235.147.113/32IfyouwishtodisableApple'sCaptiveAssistantpleaseaddthefollowingtoyourwalledgardenwww.apple.comwww.airport.uswww.ibook.infowww.thinkdifferent.uswww.itools.infowww.appleiphonecell.comcaptive.apple.com
Page11of13GlobalReachTechnologyLtdCommercialinConfidence
FREQUENTLYASKEDQUESTIONS
Q.Iwanttoadddifferentauthenticationprovidertypes,howdoIdothis?A.PleaseseeourOdyssysAuthenticationguideforfurtherinformation.
Q.IneedmoreinformationonhowtosetupOdyssysA.PleaseseeourOdyssyssetupguide.
Page12of13GlobalReachTechnologyLtdCommercialinConfidence
GLOSSARY
ACL AccessControlListAAA Authentication,Authorization,andAccountingDHCP DynamicHostConfigurationProtocolDNS DomainNameServiceNAT NetworkAddressTranslationPORT Aprocess-specificoranapplication-specificsoftwareconstructservingasacommunicationendpoint,
whichisusedbytheTransportLayerprotocolsofInternetProtocolsuite,suchasUserDiagramProtocol(UDP)andTransmissionControlProtocol(TCP)
RADIUS RemoteAuthenticationDialInUserService(RADIUS)SHAREDSECRET AsinglepasswordsharedbetweentwodevicesSSID ServiceSetIdentifier-AuniqueidentifierforyourWi-FiserviceWLAN WirelessLocalAreaNetworkWLC WirelessLocalAreaNetworkController
GlobalReachTechnologyLtdCravenHouse,121KingswayLondonWC2B6PAT+44(0)[email protected]©GlobalReachTechnologyLimitedAllrightsreserved.GlobalReachandtheGlobalReachlogoareregisteredtrademarks.