Supported WiFi Vendors

Firmware

• Primary RADIUS Server (IP address): 54.247.117.188
• Secondary RADIUS Server (IP address): 79.125.111.180
• Shared secret: (it will be communicated after the activation)
• Splash Page URL: https://guest-wave.802service.com

Other useful parameters:

Purpose

This guide shows how to configure a Ubiquiti Networks managed controller in order to integrate access points with 802.Wave

Prerequisites

This article applies to Ubiquiti UniFi SDN Controller with Firmware release 5.8.28 or later versions. It is required to work with these versions to be fully compatible with 802.Wave.

To correctly integrate Ubiquiti Networks devices, it is necessary that:

• the controller is up and running at configuration time
• the controller is up and running when you are providing the service to your guests
• the Cloud platform must reach the controller at port 8080, 8880 and 8443, by using a public IP address.
• you download and extract our RAR archive onto the controller server, as specified in the next paragraph

Note: on the server-side, it is strongly recommended to have the web UI configured to be accessible through secure connections (HTTPS).

IMPORTANT:
If you wish to use the UniFi SDN Controller, we need to make an activation on your side. So you need to provide us the public IP address of your Controller.

This article applies to to Ubiquiti UniFi SDN Controller with firmware release 5.8.x and 5.10.x or later.
The firmware version 5.10.x has brought relevant changes in discontinuity with the previous versions, which has led to some compatibility issues on our side.

Currently, we're able to ensure the compatibility with Controller version 5.10.x or later, but the some conditions must be satisfied on your organization instance.
So, if you're using version 5.10.x or later, it is mandatory to follow the following specification:

• You cannot use Ubiquiti 5.8.x or older versions. So you have to upgrade all your Ubiquiti to version 5.10.x or later
• You cannot use access points from other hardware manufacturers or firmware, so remove all of them
• You need to remove all the users created by using Ubiquiti 5.8.x or older, and other hardware manufacturers or firmware

If your locations are set with Identity domain = "Organization", then you need to apply this rules to the entire organization, or set Identity domain = "Locations"

Copying the RAR archive

In order to correctly redirect guests to our Splash Page, it is necessary to extract the RAR archive Ubiquiti-Wave onto the controller server

Before extracting the RAR archive, you need to check your settings. Log in to the Unifi Controller web UI, go to Settings > Guest Control, find the Portal Customization tab and set:

• Template Engine: "AngularJS"
  
• Override Default Templates: "Override templates with custom changes"
• Landing Page: Promotional URL -->  https://guest-wave.802service.com

Note: it is important to do this action before extracting the RAR archive. Otherwise, the destination path for your files might not be available.

After this step, you can extract the RAR archive. 

1. In case you have a Unifi Controller installed on you own server:

• If your system is Linux, extract the archive to /usr/lib/unifi/data/sites/default/app-unifi-hotspot-portal
• If your system is Mac, extract the archive to ~/Library/Application Support/UniFi/data/sites/default/app-unifi-hotspot-portal
• If your system is Windows, extract the archive to Ubiquiti UniFi\data\sites\default\app-unifi-hotspot-portal

Please rename the old index.html file to index.html.default before proceeding with the override.

Once done, please check that the file wave_unifi.js includes the redirection to our Splash Page in the c4wPortal variable, as shown below:

var c4wPortal="https://guest-wave.802service.com";

In case you have a Cloud Key:

1. Restart the Cloud Key and extract the RAR archive on your PC
2. Download WinSCP for CK’s file system inspection, at https://winscp.net/eng/download.php
3. Select SFTP protocol, port 22 for configuring the file transfer.
   After accessing the file system, go to /srv/unifi/data/sites/<site_name>/app-unifi-hotspot-portal (for example, in case the Default site is using the correct path is /srv/unifi/data/sites/<site_name>/app-unifi-hotspot-portal /srv/unifi/data/sites/default/app-unifi-hotspot-portal)
4. Please rename the old index.html file to index.html.default before proceeding with the override and copy there the extracted files.
5. Copy also wave_unifi.js file into /srv/unifi/data/sites/default/app-unifi-hotspot-portal/js

SSID setup

To set up your SSID, go to Settings > Wireless Networks and create or edit your wireless network.

RADIUS server configuration

To set up your SSID, go to Settings > Profiles and create or edit your RADIUS server configuration.
It is necessary to check Enable accounting and Enable Interim Update, and set RADIUS Auth Server and RADIUS Accounting Server accordingly with the data specified in the "Parameters for the Solution" paragraph.

Hotspot configuration

Go to Settings > Guest Control

Find the Guest Policies tab and configure the options as follows:

• Guest Portal: check the "Enable Guest Portal" option
• Authentication: Hotspot
• Landing Page: Promotional URL → https://guest-wave.802service.com
• Redirection: check only the "Enable HTTPS Redirection" option

Find the Hotspot tab, check Enable RADIUS-based authorization and uncheck all the other options.

Find the RADIUS tab and configure the options as follows:

• Profile: (select the profile name you set up in the previous step)
• Authentication type: CHAP

Walled Garden

Find the Guest Policies tab and enter here your required entries. The following ones are required for the proper functioning of the system.

Splash Page entries

• 54.247.117.188

CDN entries

• 50.18.178.180
• 54.248.102.194
• 54.246.86.254
• 46.137.206.166
• 54.232.119.5
• 54.253.118.101

Note: currently, the controller does not support the insertion of domains, so you are required to enter IP addresses.

Parameters for the Solution

The parameters indicated above for the Mode Settings section are mandatory for the proper functioning. The necessary parameters to integrate the device with the Solution are the following:

• RADIUS Auth Server
  (Primary) IP Address: 54.247.117.188; Port: 1812
  (Secondary) IP Address: 79.125.111.180; Port: 1812
• RADIUS Accounting Server
  (Primary) IP Address: 54.247.117.188; Port: 1813
  (Secondary) IP Address: 79.125.111.180; Port: 1813

The value for the Password/Shared Secret will be communicated privately by 802.Wave team.

If these parameters change in the future, we will promptly inform you about new values.

The 802.Wave solution provides a bundle of integrated application modules that can be displayed and accessed by end-users on the Splash Page.

The number of applications available depends on the license purchased. Applications are managed by the organization manager through the Admin Panel. There, they can:

• Enable applications for each location
• Configure and manage applications

The organization manager can directly manage applications for each location or delegate this job to the location manager. To view available applications, click on the quick access toolbar on the left Manage → Apps → All.

Managing your applications

Configuring applications can be managed by organization managers or delegated to location managers. But keep in mind, it is not an all or nothing situation. Only some applications can be delegated to location managers while others can remain in the control of organization managers. If delegation option is available, it can be configured by clicking on the top right corner of the application. This opens a drop-down and you can choose Settings.

Some applications by default are available at both organization and location level. Organization managers can choose whether or not they want to provide access to location managers. For example - the Advertising app is available at both organization and location level by default. If the organization manager wants to either enable or disable the Advertising app for the location manager, then he or she has to go to the Location section, open the Apps tab, and click manage the app. Delegating this app using the drop-down menu mentioned earlier is not an option.

Setting access policies

By clicking the Settings button for any application, organization managers can indicate who can configure the app. Possible choices are:

• Owned by organization, same for all locations: only the organization manager can configure the application. Location managers don’t have access to configure or edit the app. The configuration Setting is applied to all locations managed by the organization manager. In this case, only the organization manager is able to uninstall the application.
• Owned by organization, different for each location: Configuration settings are different for each location. The app is managed by the organization manager, and he or she has to open the Apps tab in the Location section, select the desired Location, and then click manage the app. Only the organization manager can configure the application and location managers don’t have access to configure or edit the app.
• Owned and managed by location manager: Both organization manager and the location manager will be able to configure the applications. The location manager can do this by accessing the toolbar on the left Manage → Apps, but the organization manager has to open the Apps tab in the Location section, for the desired Location and then click manage the app. This app can be removed and managed on both levels.

Adding to sidebar / Removing from sidebar

For some applications, at Organization level, you can find Add to sidebar or Remove from sidebar in the marketplace. This allows you to add (or remove) the link to an app to the (from) the sidebar and improve your user experience for frequently-used apps.

If you click the Add to sidebar link, you will be asked the sidebar section where you want to move your application. You can choose between:

• Guest Wi-Fi
• Analytics
• Marketing
• Manage

Please note: if the application is enabled at Location level, then locations owners will also display the link in the sidebar

List of applications

On the main screen, you will see All at the top right corner. This filters and displays all licensed applications available for your Organization/Location by category.

• All
• Marketing
• Analytics
• Guest Wi-Fi
• Integrations
• Dev Suite
  
  

Installing an application

On the top part of this section you can filter installed applications by their category:

• All - lists all applications licensed to the account
• Installed - lists only the applications that have been installed

To install a new app, choose the app from the All section and click on the Install button, you can install the selected application and move it to the Installed page.

Applications can be removed by clicking on the top right corner of the application. This opens a drop-down menu from which you can choose remove. This option is available depending on the application and not all applications can be removed. Uninstalling an app can be delegated to organization managers or location managers, depending on who has the rights to. Uninstalled applications can be reinstalled again at a later time.

Getting more info

By clicking on info, you can see a detailed description of the application.

Access Journey

Please find more information in this article: Access Journey.

Display options

You can change the details regarding how the application is displayed on the Splash Page. To do this, you must open the desired application by clicking on the icon of the application and then clicking on the Settings button.

Once inside the application, you must set the following fields:

• Icon: this is the application icon displayed within the App Bar on the Splash Page.
• Pre-authentication: this indicates whether the application is visible and can be used when the end-user is not authenticated.

Changing the name of an application

To change the name of an application on the Splash Page, you must create a custom Splash Page language. From there, you can modify application names. Using the same process, you can change application names for all languages supported by the Splash Page.

Social Media Marketing is a smart marketing tool based on the interactions of your end-users with the social networks.

An Organization or Location Manager can browse or configure the application through the following menu items:

• Likes and followers
• Posts
• Settings
  

Note:
This article contains all the necessary knowledge to make the best use of all the features of the Social Media Marketing application.

Like and followers

What is this?
The Like and followers section is where you can configure the pages that will be presented to your authenticated end-users as a page to like, follow or plus.
Increasing your brand's exposure on social media can be a great opportunity to connect with your existing customers and acquire new ones. That's why this feature may be really valuable for you.

The typical scenarios you can set up are:

• The end-user, after logging in, is immediately able to connect to the Internet, without being required to do anything.
• The end-user, after logging in, is asked (but not required) to click Like/Follow/G+ and like your location.
• The end-user, after logging in, cannot access the Internet unless he clicks Like/Follow/G+ and likes your location.

The Export button allows you also to export short reports and monitor how many end-users click Like/Follow/G+ in the workflow of the Social Media Marketing application.

When is it visible?
This section is always visible at Organization level if the Organization Manager did not set any delegation in Settings > Delegate control to Location Managers. Otherwise, it is not visible.
The section is visible at Location level if the following two conditions are satisfied:

• The Organization set the multilevel control for Like and followers in Settings > Multilevel Control. Otherwise, it is not visible.
• Social Login for the Location is enabled for the following social networks: Facebook, Twitter, and Google+. You can check enabled social networks by looking at the access template that is assigned to the Location, or simply looking at social networks that are displayed on the login box of the Splash Page.

Technical details
This section supports the following social networks:

• Facebook
• Twitter
• Google+
  

The Export button, at the top of the page, allows you to export short reports and monitor how many end-users click Like/Follow/G+ in the workflow of the Social Media Marketing application.

Increase Facebook audience

For Facebook the following options are enabled:

• Like: by enabling this option, the Splash Page will ask your end-users to "Like" your Facebook page after their login.
• Facebook ID: specify the Facebook ID of your page. You can also get this ID by entering the URL of a real Facebook page or taking it from the linked page in the Settings section.

Increase Twitter audience

For Twitter the following options are enabled:

• Ask users to follow your account: by enabling this option, you can ask your end-user to "Follow" your Twitter profile after a successful login to the Splash Page.
• Mode: two modes are currently available:
  • Mandatory: if this mode is enabled, the end-user is required to follow your page in order to gain access to the Internet.
  • Optional: if this mode is enabled, the end-user is asked to follow your page and then redirected to the Internet regardless of whether he has clicked or not.
• Enter your Twitter handler: here you can enter your Twitter profile

Increase Google+ audience

For Google+ the following options are enabled:

• Ask users to follow your account: by enabling this option, you can ask your end-user to "Plus" your location after a successful login to the Splash Page.
• Mode: two modes are currently available:
  • Mandatory: if this mode is enabled, the end-user is required to click "G+" for your page in order to gain access to the Internet.
  • Optional: if this mode is enabled, the end-user is asked to click "G+" for your page and then redirected to the Internet regardless of whether he has clicked or not.
    
• Enter your Google+ page: here you can enter the URL of the page that you want your end-users to click "G+" for your URL.

Posts

What is this?
The Posts section is where you configure the "status" messages that will be published on your end-users' timeline/profile after end-users perform a successful login to the Splash Page.

When is it visible?
This section is always visible at Organization level if the Organization Manager did not set any delegation in Settings > Multilevel Control. Otherwise, it is not visible.
The section is visible at Location level if the following two conditions are satisfied:

• The Organization Manager set the multilevel control for posts in Settings > Multilevel Control. Otherwise, it is not visible.
• Social Login for the Location is enabled for the following social networks: Facebook, Linkedin, and Twitter. You can check enabled social networks by looking at the access template that is assigned to the Location, or simply looking at social networks that are displayed on the login box of the Splash Page.

Technical details
Every time an end-user performs a successful authentication, the Splash Page checks if the Social Media Marketing application is enabled on the Location. If it is, the Social Media Marketing application searches for a rule matching the specific social network and frequency and date/time conditions.
If a rule is found, then the associated content is published on the timeline/profile of the end-user.

This section is divided into three subsections:

• Post
• Content
• Scheduling

Post

In Settings subsection, you can set the rules to limit posting on your end-users' timeline or profile.
The Organization Manager must carefully consider how to configure this part: posts may be valuable to retain customers, but excessive use may be considered otherwise annoying by your end-users.
The following options are currently available:

• Enable social post
  If this option is enabled it will happen that, every time an end-user successfully logs in to the Splash Page using his "social" credentials, a message may be published to the user's social timeline, accordingly with the other options available in this page.
• Set the posting limit
  This option limits the number of messages published on the timeline belonging to the Facebook user. The available options (with the correspondent rules) are the following:
  • At registration only: the message is posted on the timeline only once when the user signs up for the service.
  • Once a day: if the end-user logs in, and the last time he posted a message through the application was within the last 24 hours, then no message is posted on the timeline. Otherwise, the user is asked to post a message.
  • Once every 3 days: if the end-user logs in, and the last time he posted a message through the application was within the last 72 hours, then no message is posted on the timeline. Otherwise, the user is asked to post a message.
  • Once a week: if the end-user logs in, and the last time he posted a message through the application was within the last 24x7 hours, then no message is posted on the timeline. Otherwise, the user is asked to post a message.
  • Once a month: if the end-user logs in, and the last time he posted a message through the application was within the last month, then no message is posted on the timeline. Otherwise, the user is asked to post a message.
  • Once every X login: if the end-user logs in and the last time he posted a message through the application was X login attempts ago or later, then no message is posted on the timeline. Otherwise, the user is asked to post a message.

Content

Once the frequency limit on the posts has been set, you must create the content for the messages that will be published on the timeline/profile of the end-user.

The Social Media Marketing application currently supports the following two actions:

• Configure default content. This will be selected according to the frequency limits set in the Access Post Settings paragraph
• It is possible to override the default content with specific "scheduling" rules to be applied in particular dates or times. If date/time conditions for the "scheduling" rule are matched, then the associated content is selected, otherwise the Social Media Marketing application checks if default content is applied.

The first action consists of entering your data in the Content section and then clicking the Save button.
The second action consists of entering your data in the Content section, then clicking the Schedule button and configuring the input in the Scheduling section.

In this paragraph, we will explain how to configure default content. The second method will be discussed in the subsequent paragraph called "Scheduling".

In order to set default content for all posts, you have to configure the following options:

• Social networks: select the social networks to enable for contents.
  At Organization level, the following social network providers are available: Facebook, LinkedIn, Twitter.
  At Location level, you can find the same social networks if they are enabled for Social Login in the access templates associated with the Location.
• Post: this is the text content that will be published on the social timeline. This option is no longer available for Facebook due to some changes onto their APIs.
• Add a link: this is the URL where the social post will point to.
• Use linked Facebook page: this button appears if Facebook is selected as Social Network and there is a Facebook page set in Your social networks section (located in the Settings page). By clicking this button, the Add a link input field is filled with the URL of the Facebook page set in Your social networks section.
• Upload an image: set an image to be displayed on your social post. Please note that currently, this option will not work for Twitter messages.

Then click on the Save button.
This content will be chosen as the content of the post in the two following cases:

• You didn't schedule any posts
• You scheduled some posts, but none meets date/time conditions you set (you can clarify this by reading the following paragraph about the Scheduling section).
• If the end-user performs a social login with the social network you configured.

By clicking the Delete button, it is possible to delete the current post content.

Scheduling

In this section, it is possible to set a list of contents along with some date/time conditions.

Once an end-user successfully logs in using the Social Login, the system checks all the scheduled posts and finds those meeting date/time conditions set.
Please note that scheduled posts listed are ordered according to their last update time: in detail, more recently modified posts are displayed at the top of the list, less recently modified posts are displayed at the bottom of the list.

According to the frequency limits set in the Settings paragraph, the following three cases may occur:

• No scheduled posts meet date/time conditions. In this case, the Social Media Marketing application selects the posts configured in the Post content section and publishes its content to the timeline/profile of the end-user
• One scheduled post meets date/time conditions. In this case, its content is published to the timeline/profile of the end-user
• More than one scheduled posts are meeting date/time conditions. In this case, the Social Media Marketing application publishes the content of the more recently modified post (as we mentioned before, the first post in the list is the one created or updated more recently and the last one is the one created or updated less recently)

Please note that date/time conditions are calculated accordingly to the time zone set in the International Settings. Please learn more here.

The list of posts contains a summary of the rules set for each item. It is possible to edit or delete each item by clicking the appropriate button.
When creating or modifying a post, you must set the following options:

• How often do you want to schedule this status?: this option indicates the type of scheduling rule going to be set. The following options are currently available and will be analyzed in detail later:
  • Just once
  • Daily
  • Weekly
  • Monthly

• Location: this option is available only for the Organization level if the Post options were not delegated (in the Settings tab). It allows setting a content to be published only when the end-user comes from specific Locations. If this field is empty then the content is applied to all Locations.
• Access Point: this option is available only for the Organization level if the Post options were not delegated (in the Settings tab). If one or more Locations were selected in the Location input, then the content is applied to all the Locations. If the Location is specified but the Hotspot field is empty, then the content is applied to all the Access Points of the selected Location.
• E-mail notification when this message is posted: if this option is enabled, then the system sends an E-mail notification each time a scheduled content is published on a timeline. The recipient of this email is an admin system user (For details on this, see Adding and managing system users).
  In detail:
  • The manager flagged as "admin" in the Organization instance (the manager who is able to create new manager accounts), if the Post options were not delegated (in the Settings tab)
  • The manager flagged as "admin" in the Location instance (the manager who is able to create new manager accounts), if the Post options were not delegated (in the Settings tab)

Below, you can find all the available types of scheduling rules you can set through the How often do you want to schedule this status? option, along with the options available for each type.

Just once

By setting "Just once" in How often do you want to schedule this status?, you can create content that will be published at most once in the timeline of the end-user.
It is possible to select this type of access post only once per end-user. Next time this content will not be chosen, unless the Just once condition is changed.

In order to schedule a Just once access post, you must specify the following date/time conditions that that must be both satisfied:

• Active from ... to ...: the start date and the end date when the content may be selected as access post of the end-user.
• Posting between ... and ...: the start time and the end time when the content may be selected as access post of the end-user.

In short, a Just once access post may be selected as the one to be published on a timeline of the end-user when the following conditions are simultaneously satisfied:

• it is possible to select content to publish according to the frequency limit set in the Settings subsection.
• the end-user is authenticating to the Splash Page in the date interval indicated in the Active from ... to ... option.
• the end-user is authenticating to the Splash Page in the time interval indicated in the Posting between ... and ... option.
• the specific access post was not published before on the timeline of the end-user.
• the specific access is the first on the list where all conditions are simultaneously satisfied.

Daily

By setting "Daily" in the How often do you want to schedule this status?, you can create content that will be published every time the particular conditions of the day are satisfied.
It is possible to select a type of access post with an unlimited number of times.

In detail you have to select:

• Active from ... to ...: the start date and the end date when the content may be selected as access post of the end-user.
• Posting between ... and ...: the start time and the end time when the content may be selected as access post of the end-user.
• Day Parting: the days of the week when the rule is valid (Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday, Sunday). It is necessary to select at least one day.

In short, such content will be selected as the one to publish to the timeline of the end-user when the following conditions are satisfied:

• it is possible to select content to publish according to the frequency limit set in the Settings subsection.
• the end-user is authenticating to the Splash Page in the date interval indicated in the Active from ... to ... option.
• the end-user is authenticating to the Splash Page in the time interval indicated in the Posting between ... and ... option.
• the current day of a week is selected in the Day Parting option.
• the specific access is the first on the list where all conditions are simultaneously satisfied.

Weekly

By setting "Weekly" in the How often do you want to schedule this status?, you can create content that will be published every time the particular conditions in a week are satisfied.
It is possible to select a type of access post with an unlimited number of times.

This rule is very similar to the previous one. The difference is that it is only possible to select a day of the week.

In detail you have to select:

• Active from ... to ...: the start date and the end date when the content may be selected as access post of the end-user.
• On: one day of the week when the rule is valid (Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday, or Sunday).
• Posting between ... and ...: the start time and the end time when the content may be selected as access post of the end-user.

In short, such content will be selected as the one to publish to the timeline of the end-user when the following conditions are satisfied:

• it is possible to select content to publish according to the frequency limit set in the Settings subsection.
• the end-user is authenticating to the Splash Page in the date interval indicated in the Active from ... to ... option.
• the end-user is authenticating to the Splash Page in the time interval indicated in the Posting between ... and ... option.
• the current day of a week is selected in the On option.
• the specific access is the first on the list where all conditions are simultaneously satisfied.

Monthly

By setting "Monthly" in the How often do you want to schedule this status?, you can create content that will be published every time that particular conditions in a month are satisfied.
It is possible to select a type of access post with an unlimited number of times.

In detail you have to select:

• Active from ... to ...: the start date and the end date when the content may be selected as access post of the end-user.
• Every month on: a day number of the month (between 1st and 31st) when the rule is valid
• Posting between ... and ...: the start time and the end time when the content may be selected as access post of the end-user.

In short, such content will be selected as the one to publish to the timeline of the end-user when the following conditions are satisfied:

• it is possible to select content to publish according to the frequency limit set in the Settings subsection.
• the end-user is authenticating to the Splash Page in the date interval indicated in the Active from ... to ... option.
• the end-user is authenticating to the Splash Page in the time interval indicated in the Posting between ... and ... option.
• the current day of a week is selected in the Every month on option.
• the specific access is the first on the list where all conditions are simultaneously satisfied.

Settings

What is this?
The Settings section lets you perform the following actions:

• Link your Facebook public page. This allows you automatically setting the URL of your Facebook page in the Post section, under the Content section
• Allow the Location Manager to manage some sections of the Social Media Marketing application

When is it visible?
This section is visible on the Organization level.

This section is divided into two subsections:

• Connect your social media accounts
• Delegate control to Location Managers

Connect your social media accounts

This section lets you link a social account to the Social Media Marketing application. After this, you can automatically set the URL of your Facebook page in the Post section, under the Content section.
In order to link a Facebook page, you must click the Link button under the Facebook label and logo, and then provide access credentials for Facebook. Then the Social Media Marketing application displays the list of Facebook pages managed by the account provided and you must select one of them.

In all cases, when linking your social account to the Social Media Marketing application for the first time, you will be required to authorize an application called "Social Tools" to get your social data. This happens directly in the Social Media Marketing application after clicking the Link this account button.
Then the request will not be displayed in future unless the authorization to the application is revoked on the Facebook back-end.

The access is performed directly on social platforms.
Volare is storing only the access token, which does not contain any sensitive information. We do NOT store any username or password of any third-party social provider.

Please note that normally, once the user account/page is linked, the access token is valid for 60 days and that's why it is possible to post to social networks. But there may be cases where it expires faster, such as:

• changes in the settings of your account (for example the password)
• changes in the Facebook page permissions or settings
• you may have unauthorized the application called  "Social Tools"

Please note that the token may expire (usually after 60 days from your "Link" action) and, in this case, you will see an alert under this section. To refresh your token, just unlink and link again your account.

Delegate control to Location Managers

This section allows Organization Managers to delegate the configuration tabs to Location Managers. Delegating a tab to a Location will make the single tab to disappear at Organization level.

Tips/FAQs for "Social Media Marketing"

Below you can find some tips to help use the Social Media Marketing application:

What is a Facebook public page?

As mentioned, the Social Media Marketing application can publish updates and get the feeds belonging to a Facebook public page.
Not all Facebook pages are "public": a just created Facebook page is by default "private" and is only visible to the people who manage the page. Once it is published, it is visible to the public.
In order to learn more, please check the Facebook Help Centre.

My LinkedIn and Twitter content is not correctly published. Why?

Sometimes social network providers do not accept contents if they are considering your post as a duplicate of another one recently posted. In this case, you can change the content or wait.

What timezone is applied to my scheduling of date/time conditions?

The timezone is applied accordingly to the Default time zone value set in the International Settings section of the Admin Panel (for details on this, see International settings). In detail:

• In the Delegate control to Location Managers section you can delegate the management of the section to the Location, then the Location's timezone is applied (according to the International Settings)
• Otherwise, if you didn't delegate the section, the Organization's time zone is applied.

The System Manager is a user who has access to the Admin Panel, he/she can be the admin or have limited access depending on the role defined while creating the account. To access Managers section, click on the quick access toolbar on the left Manage → Settings → Managers. From here you can manage existing users or add a new user.

• An Organization Manager is able to see all System Managers of the Organization and is also able to view the Location Managers of a particular Location by getting down to the Location level.
• A Location Manager is able to see all Location Managers that are registered to the same Location.

When a new Organization/Location is created, then a System Manager is also created. This manager will have admin rights and he/she will be able to create new System Managers in the platform. System Managers created hereafter are able to access the platform according to their role, but they are not "Admin" and they cannot create new System Managers. You can view a table showing all System Managers and their roles:

• Username: the username for the end-user
• Name: the full name of the end-user (first and last name)
• Role: A set of privileges allocated to the end-user.
• Admin: this field indicates if the manager is able to create and delete other users. As already mentioned, An Organization Manager can be "Admin" only when the account is created by 802.Wave team during license activation. A Location Manager is an Admin only when the account is created by the System Manager at the Organization level, during the first setup of the Location.

By clicking on the single System Manager, you can view the following information:

• First Name
• Last Name
• Phone number
• Email
• Username
• Role

and you can perform the following actions:

• Lock / Unlock: allows you to disable the selected System Manager account without having to delete it. By clicking on the Unlock button you can enable access.
• Edit: allows you to update the previously entered data.
• Reset password: allows you to reset the password to access the Admin Panel.
• Delete: allows you to permanently delete the selected System Manager. This action is available if the logged system user is "Admin".

During the creation of a new system user, the following information is required:

• First Name
• Last Name
• Phone number
• Email
• Role
• Send activation details by email: a notification e-mail to the provided e-mail address, including the access credentials for the Admin Panel. The email does not need to be sent.
• Send activation details by text message: a notification text message to the phone number including the access credentials for the Admin Panel. The text message does not need to be sent.

First access

Please read First-time login to the admin panel to learn more about the first access of a System Manager to the Admin Panel.

System Manager roles

Currently, the following available roles are:

• Full: This role has full access to all the sections (the "classic" System Manager).
• Analysis: this role only has access to Analytics.
• Applications: this role only has access to Applications.
• Provisioning: this role can access the following sections: Dashboard, Users, Guest Wi-Fi and Manage.
• Marketing: this role can access the following sections: Dashboard, Analytics, Apps, Splash Page.
• Customers: this role can only access the Users section.

The walled garden is a list of web sites/domains that end-users are able to visit without being authenticated.
In order to correctly configure the Social Login feature, it is necessary to add web sites to the walled garden. Mainly because the authentication is directly performed on the social network website, and no password is stored or processed in our Solution.
Social Login can be configured to run with the following providers:

• Facebook
• Foursquare
• Gmail
• Google+
• Instagram
• LinkedIn
• Pinterest
• Twitter
• VKontakte

More detailed instructions for each supported vendor are provided below.

Aerohive Networks

In the Walled Garden section it is possible to configure the walled garden, that is a range of IP addresses that can be visited by end-users even without being authenticated. You can add an address or a range of addresses by clicking New as illustrated in the picture below.

You can set a single IP address or a range (by configuring the appropriate subnet mask). It is not possible to enter domain names.

Facebook	*facebook.com *facebook.net *akamaihd.net *fbcdn.net *atdmt.com *fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *doubleclick.net *google.com
Foursquare	*foursquare.com *4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*google.com *googleapis.com *gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*google.com *googleapis.com *gstatic.com *googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*instagram.com *akamaihd.net
LinkedIn	*linkedin.com *licdn.com *akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *recaptcha.net *google.com *gstatic.com
Pinterest	*pinterest.com *pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*twitter.com *twimg.com *abs.twitter.com
VKontakte	*vk.com *oauth.vk.com *vk.me

 

Otherwise
You cannot use domain names, but you can add the following IP address/subnet mask couples:

Facebook	31.13.92.0/255.255.255.0 185.60.216.0/255.255.255.0 157.240.20.0/255.255.255.0 95.100.156.1/255.255.255.0 31.13.61.0/255.255.255.0 31.13.86.0/255.255.255.0 31.13.91.0/255.255.255.0 31.13.77.0/255.255.255.0
Foursquare	The information is not available at the moment. Sorry for the inconvenience.
Google	216.239.32.0/255.255.224.0 64.233.160.0/255.255.224.0 66.249.64.0/255.255.224.0 72.14.192.0/255.255.192.0 209.85.128.0/255.255.128.0 66.102.0.0/255.255.240.0 74.125.0.0/255.255.0.0 64.18.0.0/255.255.240.0 207.126.144.0/255.255.240.0 173.194.0.0/255.255.0.0 We recommend you to add also IP address ranges of your local Google domain (e.g. google.us for USA, google.it for Italy, google.co.uk for UK, etc.).
Google+	216.239.32.0/255.255.224.0 64.233.160.0/255.255.224.0 66.249.64.0/255.255.224.0 72.14.192.0/255.255.192.0 209.85.128.0/255.255.128.0 66.102.0.0/255.255.240.0 74.125.0.0/255.255.0.0 64.18.0.0/255.255.240.0 207.126.144.0/255.255.240.0 173.194.0.0/255.255.0.0 We recommend you to add also IP address ranges of your local Google domain (e.g. google.us for USA, google.it for Italy, google.co.uk for UK, etc.).
Instagram	31.13.92.0/255.255.255.0 185.60.216.0/255.255.255.0 157.240.20.0/255.255.255.0 95.100.156.1/255.255.255.0 31.13.61.0/255.255.255.0 31.13.86.0/255.255.255.0 31.13.91.0/255.255.255.0 31.13.77.0/255.255.255.0
LinkedIn	185.63.144.0/255.255.255.0 192.229.233.0/255.255.255.0 91.225.246.0/255.255.255.0 91.225.248.0/255.255.255.0 109.69.137.0/255.255.255.0 LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding the following IP addresses ranges might cause issues with the Android CNA Browser 216.58.198.0/255.255.255.0 216.58.205.0/255.255.255.0
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	104.244.42.0/255.255.255.0 104.244.43.0/255.255.255.0 104.244.46.0/255.255.255.0
VKontakte	87.240.128.0/255.255.224.0

 

Aruba Networks (Controller)

In the Configuration tab in the main page. under Advanced Services you have to click Stateful Firewall and then choose the Destination tab. Then create a new destination profile.

After that you can click the profile and specify all the domains included.

Then in the Configuration tab in the main page. Under Security you have to click Authentication and then choose the L3 Authentication tab.
By clicking a name of a profile you can also configure the walled garden for your device. It is necessary to add all the domain profiles created in the previous step.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Aruba Networks - IAP Mode

To set up the walled garden, you must the Edit Captive WiFi > Security page in the web interface and then click the link next to the Walled garden label.

After that, add the domains to open under the Whitelist text box.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Cambium Networks

You can configure the walled garden by opening Configure → WLAN in the navigation bar on the left and then going to the Guest Access tab.

Then it is necessary to add the following domains:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

 

Cisco (Controller)

It is possible to implement the "walled garden" feature for this device by using ACLs.
For each IP address/subnet mask couple, it is necessary to specify two rules: one for outcoming connections, the other for incoming connections.

The following example deals with the addition of a rule for: 5.178.40.0/255.255.240.0

Rule #1:
Action: Permit
Source IP/Mask: 5.178.40.0/255.255.240.0
Destination IP/Mask: 0.0.0.0/0.0.0.0
Protocol: Any
Source Port: Any
Dest Port: 80
DSCP: Any
Direction: Outbound

Rule #2:
Action: Permit
Source IP/Mask: 0.0.0.0/0.0.0.0
Destination IP/Mask: 5.178.40.0/255.255.240.0
Protocol: Any
Source Port: 80
Dest Port: Any
DSCP: Any
Direction: Inbound

The IP address/subnet mask couples to add, are the following:

Facebook	31.13.92.0/255.255.255.0 185.60.216.0/255.255.255.0 157.240.20.0/255.255.255.0 95.100.156.1/255.255.255.0 31.13.61.0/255.255.255.0 31.13.86.0/255.255.255.0 31.13.91.0/255.255.255.0 31.13.77.0/255.255.255.0
Foursquare	The information is not available at the moment. Sorry for the inconvenience.
Google	216.239.32.0/255.255.224.0 64.233.160.0/255.255.224.0 66.249.64.0/255.255.224.0 72.14.192.0/255.255.192.0 209.85.128.0/255.255.128.0 66.102.0.0/255.255.240.0 74.125.0.0/255.255.0.0 64.18.0.0/255.255.240.0 207.126.144.0/255.255.240.0 173.194.0.0/255.255.0.0 We recommend you to add also IP address ranges of your local Google domain (e.g. google.us for USA, google.it for Italy, google.co.uk for UK, etc.).
Google+	216.239.32.0/255.255.224.0 64.233.160.0/255.255.224.0 66.249.64.0/255.255.224.0 72.14.192.0/255.255.192.0 209.85.128.0/255.255.128.0 66.102.0.0/255.255.240.0 74.125.0.0/255.255.0.0 64.18.0.0/255.255.240.0 207.126.144.0/255.255.240.0 173.194.0.0/255.255.0.0 We recommend you to add also IP address ranges of your local Google domain (e.g. google.us for USA, google.it for Italy, google.co.uk for UK, etc.).
Instagram	31.13.92.0/255.255.255.0 185.60.216.0/255.255.255.0 157.240.20.0/255.255.255.0 95.100.156.1/255.255.255.0 31.13.61.0/255.255.255.0 31.13.86.0/255.255.255.0 31.13.91.0/255.255.255.0 31.13.77.0/255.255.255.0
LinkedIn	185.63.144.0/255.255.255.0 192.229.233.0/255.255.255.0 91.225.246.0/255.255.255.0 91.225.248.0/255.255.255.0 109.69.137.0/255.255.255.0 LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding the following IP addresses ranges might cause issues with the Android CNA Browser 216.58.198.0/255.255.255.0 216.58.205.0/255.255.255.0
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	104.244.42.0/255.255.255.0 104.244.43.0/255.255.255.0 104.244.46.0/255.255.255.0
VKontakte	87.240.128.0/255.255.224.0

Cradlepoint

Please go in the main page of your local AP interface or the Cradlepoint ECM and click the System Settings menu dropdown. Then choose your hotspot service, scroll down to Allowed hosts/domains prior to Authentication and click on Add in order to insert a new domain.

it is necessary to add the following domains:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

DD-WRT

In the Services > Hotspot menu, it is necessary to enable Chillispot and set the walled garden in the UAM Allowed field. You must enter a value, or a set of comma-separated values. Since Chillispot does not support domain names, it is necessary to enter IP addresses ranges.

The IP addresses ranges to enter are the following:

Facebook	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
Foursquare	The information is not available at the moment. Sorry for the inconvenience.
Google	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
LinkedIn	185.63.144.0/24 192.229.233.0/24 91.225.246.0/24 91.225.248.0/24 109.69.137.0/24 LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding the following IP addresses ranges might cause issues with the Android CNA Browser 216.58.198.0/24 216.58.205.0/24
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	104.244.42.0/24 104.244.43.0/24 104.244.46.0/24
VKontakte	87.240.128.0/19

Deliberant

In order to set up the walled garden, it is necessary first to access the Configuration > Wireless section and scroll down until the White list section is visible.

Then, it is necessary to add the following domains:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Endian

In order to set up the walled garden, it is necessary to access the Hotspot Settings section in the Hotspot top menu, select the Enable Hotspot option and then fill the Allowed Sites / Access section.

Then, it is necessary to add the following domains:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

EnGenius (Captive Portal ready)

In order to configure the walled garden, it is necessary to enter the System > Hotspot Configuration page and then insert a whitespace-separated list of domains enclosed by quotation mark characters (" ") in the row where "HS_UAMALLOW" and "HS_UAMDOMAINS" attributes are.
Then you have to click Submit and reboot the device in menu System > Reboot.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

EnGenius (ezMaster cloud controller)

Click on the menu HotSpot Service and then on Captive Portal.
Then, please find the Walled Garden section your Captive Portal profile. Here you can set some hosts or a range of IP addresses that can be visited by end-users even without being authenticated. You must enter a value, or a set of comma-separated values.
It is necessary to add the following domains:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

Fortinet

In order to configure “Walled Garden” for social network, create access-rule for application in access policy. For this example, create access-rule with criteria to match domain-name of corresponding social website. Depending on customer location different domain and sub-domain need to be added under access rule.
The domains to open are the following:

Facebook	facebook.com m.facebook.com facebook.net akamaihd.net fbcdn.net static.xx.fbcdn.ne atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com api.linkedin.com static.licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twimg.com api.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Hewlett Packard (Cloud managed)

In Wireless Configuration > Networks, in the Security Tab, you can find the Walled Garden section. Here you can set the list of hosts or IP address ranges that are allowed to unauthenticated end-users.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

 

Hewlett Packard (MSM series)

Please click Public access > Attributes > Configure Attributes on the top menu, to see the list of the existing RADIUS profiles. Choose your profile and add one "ACCESS-LIST" attribute for each URL exception that you are going to create. The value of the attribute is the following:

cloud4wi,ACCEPT,all,WALLEDGARDEN_URL,all

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Example
If you want to configure the walled garden list for Facebook, you have to add the following entries:

For Google+, we recommend you to add also your local Google domain (e.g. "google.us" for USA, "google.it" for Italy, "google.co.uk" for UK, etc.).

Huawei

Please find the complete list of the domains:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

Icomera Moovbox

In order to configure the walled garden, it is necessary to click Bridge Groups in the Configuration left-side menu, then click Edit in the row of Access Point and then click the Edit Captive Portal button.
The UAM Allowed List field is where we can set the configuration of the walled garden: here it is necessary to enter a value, or a set of comma-separated values. Domain names are not supported and so it is necessary to enter IP addresses ranges.

The IP address ranges to enter are the following:

Facebook	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
Foursquare	The information is not available at the moment. Sorry for the inconvenience.
Google	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
LinkedIn	185.63.144.0/24 192.229.233.0/24 91.225.246.0/24 91.225.248.0/24 109.69.137.0/24 LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding the following IP addresses ranges might cause issues with the Android CNA Browser 216.58.198.0/24 216.58.205.0/24
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	104.244.42.0/24 104.244.43.0/24 104.244.46.0/24
VKontakte	87.240.128.0/19

IgniteNet

After clicking the menu HotSpot (Site Menu → Configuration → Advanced Setup → HotSpot) you are redirected to a new page where you can create a new profile.

Please find here the section called Auth Exceptions (Walled garden). Here it is possible to set some hosts or a range of IP addresses that can be visited by end-users even without being authenticated. You must enter a value, or a set of comma-separated values.

It is necessary to add the following domains:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for the USA, "*google.it" for Italy, "*google.co.uk" for the UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for the USA, "*google.it" for Italy, "*google.co.uk" for the UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

LigoWave VAC/LAC

In order to configure the walled garden, create access-rule for application in access policy. For this example, create access-rule with criteria to match domain-name of corresponding social website. Depending on customer location different domain and sub-domain need to be added under access rule.
The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net static.xx.fbcdn.ne atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com api.linkedin.com static.licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twimg.com api.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Click Rights > Rights > Access Rules and add new rule. See screenshot below showing procedure to add facebook domain for social login.

Below screenshot list some common domain names defined under Access Rules.

Click Rights > Rights > Access Policy to add a new Access Policy and select corresponding Access rule that will allow user to website prior pre-authentication.

Click Rights > Rights > Rights Policy to assign newly created Access policy to your Splash Page. See below screenshot for reference.

Meraki

In order to get the best possible support to the Social Login feature, it is necessary to make a request to Meraki asking for the activation of walled garden feature. This will allow to open not only hostnames to end-users, but even IP address ranges (by using CIDR notation) and subdomains (by using domain wildcards).

After the activation of this feature, a tip below the walled garden input will indicate the right syntax to enter new domains.

First of all, it is mandatory to add the Splash Page URL into this list (see Meraki - MR series), otherwise the end-user will not be able to visit the authentication page.
Then, in the case of Social Login, you must add the following entries:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

Mikrotik

In the IP > Hotspot menu, it is necessary to open the Walled Garden tab and specify which sites the end-user will be able to visit without being authenticated.
It is mandatory to add the Splash Page URL into this list (see Mikrotik), otherwise the end-user will not be able to visit the authentication page. Furthermore, you must allow the following Dst. Host values:

Facebook	*facebook* *akamai* *fbcdn* *atdmt* *fbsbx* For iOS guests using the CNA browser, in some countries you may need to add also: *doubleclick* *google*
Foursquare	*foursquare* *4sqi* In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*google* *googleapis* *gstatic*
Google+	*google* *googleapis* *gstatic*
Instagram	*instagram*
LinkedIn	*linkedin* *licdn* *akamaiedge* LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *recaptcha* *google* *gstatic*
Pinterest	*pinterest* *pinimg* In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*twitter* *twimg*
VKontakte	*vk.com *oauth.vk.com *vk.me

The configuration specified in the picture below refers to this configuration:

Mojo Networks

By clicking on Mojo Wireless Manager, you will be redirected to the Configuration page.
Open to the Device Configuration tab and then click on SSID Profiles, then click on Add New Wi-Fi Profile and finally on the Captive Portal section.
Here you can find the section called Walled garden Sites.

To add a new entry, click on Add and enter Destinations and Default Ports. Then click on OK.

The domains to open are the following (please use ports 80 and 443):

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net static.xx.fbcdn.ne atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com api.linkedin.com static.licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twimg.com api.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Nomadix

it is possible to set the list of web sites allowed for unauthenticated end-users by accessing the Configuration > Pass through Address Settings section. To enable this configuration, check the Passthrough Addresses - Enable option.
Each URL can be added to this list by entering the correct value in the appropriate box and then clicking the Add button, and it must be entered without the http:// prefix (for example: www.facebook.com is correct; http://www.facebook.com/ is not correct).
To remove the URL that was previously added, re-enter it and then click the Remove button.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Open-Mesh

In order to set up the access point, it is necessary to access the SSID #1 section (or alternatively, the SSID #2 section) in the web interface and then add the Splash Page URL and all the necessary domains separated by commas, as indicated below.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Power Cloud Systems

In the Walled Garden section, for the selected zone, it is possible to set some hosts or IP address ranges that can be visited by end-users even without being authenticated. Below is the correct configuration in order to support Social Login with Power Cloud Systems devices.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com abs.twimg.com abs-0.twimg.com api.twitter.com twimg.com
VKontakte	vk.com oauth.vk.com vk.me

Ruckus Cloud

If you are configuring a new network, click on Networks in the left sidebar, click on Add Network and find the Walled Garden input textarea.
If you are configuring an existing network, click on Networks in the left sidebar, find your network, click on the Edit Network button and find the Walled Garden input textarea.

The domains to open are the following:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

Ruckus Wireless - Controller Mode

The walled garden can be configured by selecting the Configure tab in the main menu, accessing the Hotspot Service section and then selecting the Walled Garden subsection.

Note:
It is strongly recommended to update devices to the last firmware version available: in fact, by using the version 9.8 or later of the firmware, it is possible to enter wildcard domains in the walled garden, making configuration easier.

The domains to open, for version 9.8 or later, are the following:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

For older versions, IP address ranges to enter are the following:

Facebook	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
Foursquare	The information is not available at the moment. Sorry for the inconvenience.
Google	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
LinkedIn	185.63.144.0/24 192.229.233.0/24 91.225.246.0/24 91.225.248.0/24 109.69.137.0/24 LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding the following IP addresses ranges might cause issues with the Android CNA Browser 216.58.198.0/24 216.58.205.0/24
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	104.244.42.0/24 104.244.43.0/24 104.244.46.0/24
VKontakte	87.240.128.0/19

Ubiquiti Networks – Controller

Go to Settings > Guest Control, find the Guest Policies tab and enter here your required entries. The following ones are required for the proper functioning of the system.

Facebook	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
Foursquare	The information is not available at the moment. Sorry for the inconvenience.
Google	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
LinkedIn	185.63.144.0/24 192.229.233.0/24 91.225.246.0/24 91.225.248.0/24 109.69.137.0/24 LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding the following IP addresses ranges might cause issues with the Android CNA Browser 216.58.198.0/24 216.58.205.0/24
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	104.244.42.0/24 104.244.43.0/24 104.244.46.0/24
VKontakte	87.240.128.0/19

Ubiquiti Networks – Standalone

Please access the Configuration :: Hotspot section and click the Walled Garden button.

Then click the Add new entry button.

Then you can add the walled garden. The IP address ranges to enter are the following:

Facebook	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
Foursquare	The information is not available at the moment. Sorry for the inconvenience.
Google	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	216.239.32.0/19 64.233.160.0/19 66.249.64.0/19 72.14.192.0/18 209.85.128.0/17 66.102.0.0/20 74.125.0.0/16 64.18.0.0/20 207.126.144.0/20 173.194.0.0/16 We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	31.13.92.0/24 185.60.216.0/24 157.240.20.0/24 95.100.156.1/24 31.13.61.0/24 31.13.86.0/24 31.13.91.0/24 31.13.77.0/24
LinkedIn	185.63.144.0/24 192.229.233.0/24 91.225.246.0/24 91.225.248.0/24 109.69.137.0/24 LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding the following IP addresses ranges might cause issues with the Android CNA Browser 216.58.198.0/24 216.58.205.0/24
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	104.244.42.0/24 104.244.43.0/24 104.244.46.0/24
VKontakte	87.240.128.0/19

Ruckus Wireless SmartCell Gateway

By clicking the Configuration menu link, clicking on AP Zones and then WISPr (Hotspot) in the left sidebar, you can see the Walled Garden section.
The IP addresses ranges to enter are the following:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

Samsung Controller

You can use domain names in the walled garden. The example below creates access-rule with criteria to match domain-name for the corresponding social website. Depending on the customer location, different domain and sub-domain need to be added under access rule.

The domains to open are the following:

Facebook	www.facebook.com static.xx.fbcdn.net www.fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	www.foursquare.com 4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the Walled Garden entries for Facebook.
Google	google.com googleapis.com gstatic.com googleusercontent.com accounts.google.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com accounts.google.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	www.instagram.com instagramstatic-a.akamaihd.net
LinkedIn	linkedin.com licdn.com api.linkedin.com static.licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	www.pinterest.com s-passets-cache-ak0.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the Walled Garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com abs.twimg.com abs-0.twimg.com api.twitter.com
VKontakte	The information is not available at the moment. Sorry for the inconvenience.

Tanaza

In order to configure the walled garden, it is necessary to access the Configure > SSID page in the web interface and then click the name of the SSID that will be used as access point.
Then it is necessary to select the Wireless Security tab and to add the domains to open in the Add custom domain/ip field.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Teldat

You can add the walled garden through your command line. The IP address ranges to enter are the following:

Facebook	31.13.92.0/255.255.255.0 185.60.216.0/255.255.255.0 157.240.20.0/255.255.255.0 95.100.156.1/255.255.255.0 31.13.61.0/255.255.255.0 31.13.86.0/255.255.255.0 31.13.91.0/255.255.255.0 31.13.77.0/255.255.255.0
Foursquare	The information is not available at the moment. Sorry for the inconvenience.
Google	216.239.32.0/255.255.224.0 64.233.160.0/255.255.224.0 66.249.64.0/255.255.224.0 72.14.192.0/255.255.192.0 209.85.128.0/255.255.128.0 66.102.0.0/255.255.240.0 74.125.0.0/255.255.0.0 64.18.0.0/255.255.240.0 207.126.144.0/255.255.240.0 173.194.0.0/255.255.0.0 We recommend you to add also IP address ranges of your local Google domain (e.g. google.us for USA, google.it for Italy, google.co.uk for UK, etc.).
Google+	216.239.32.0/255.255.224.0 64.233.160.0/255.255.224.0 66.249.64.0/255.255.224.0 72.14.192.0/255.255.192.0 209.85.128.0/255.255.128.0 66.102.0.0/255.255.240.0 74.125.0.0/255.255.0.0 64.18.0.0/255.255.240.0 207.126.144.0/255.255.240.0 173.194.0.0/255.255.0.0 We recommend you to add also IP address ranges of your local Google domain (e.g. google.us for USA, google.it for Italy, google.co.uk for UK, etc.).
Instagram	31.13.92.0/255.255.255.0 185.60.216.0/255.255.255.0 157.240.20.0/255.255.255.0 95.100.156.1/255.255.255.0 31.13.61.0/255.255.255.0 31.13.86.0/255.255.255.0 31.13.91.0/255.255.255.0 31.13.77.0/255.255.255.0
LinkedIn	185.63.144.0/255.255.255.0 192.229.233.0/255.255.255.0 91.225.246.0/255.255.255.0 91.225.248.0/255.255.255.0 109.69.137.0/255.255.255.0 LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding the following IP addresses ranges might cause issues with the Android CNA Browser 216.58.198.0/255.255.255.0 216.58.205.0/255.255.255.0
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	104.244.42.0/255.255.255.0 104.244.43.0/255.255.255.0 104.244.46.0/255.255.255.0
VKontakte	87.240.128.0/255.255.224.0

Teltonika

In the Walled Garden section, it is necessary to configure the following entries:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com accounts.google.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com instagramstatic-a.akamaihd.net akamaihd.net
LinkedIn	linkedin.com licdn.com api.linkedin.com static.licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com s-passets-cache-ak0.pinimg.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Ubiquiti Networks – Standalone

In order to configure the walled garden, you must access the Services page in the web interface, and then click the Setup link in the CoovaChilli Hotspot section. Then enter all values, comma separated, in the UAM Allow Domains input field.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Wi-Next

In order to set up the walled garden, it is necessary to access the Services > Hotspot page in the web interface and add the domains in the Url allowed field.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	pinterest.com pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	twitter.com twimg.com abs.twitter.com
VKontakte	vk.com oauth.vk.com vk.me

Xclaim

In order to configure the walled garden, create access-rule for application in access policy. For this example, create access-rule with criteria to match domain-name of corresponding social website. Depending on customer location different domain and sub-domain need to be added under access rule.

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com api.linkedin.com static.licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	twitter.com twimg.com abs.twimg.com api.twitter.com
VKontakte	The information is not available at the moment. Sorry for the inconvenience.

Xirrus

In the Array AP you can find the WPR Whitelist Configuration section on SSID > SSID Management.

The domains to add are the following:

Facebook	*.facebook.com *.facebook.net *.akamaihd.net *.fbcdn.net *.atdmt.com *.fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: *.doubleclick.net *.google.com
Foursquare	*.foursquare.com *.4sqi.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	*.google.com *.googleapis.com *.gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	*.google.com *.googleapis.com *.gstatic.com *.googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	*.instagram.com *.akamaihd.net
LinkedIn	*.linkedin.com *.licdn.com *.akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser *.recaptcha.net *.google.com *.gstatic.com
Pinterest	*.pinterest.com *.pinimg.com In the login box displayed during the login, it is possible to connect a Pinterest account to an existing Facebook, Google+ or Twitter account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook, Google+ or Twitter.
Twitter	*.twitter.com *.twimg.com
VKontakte	*.vk.com *.vk.me

 

Zebra

In the Configuration → Service section in the Basic Configuration tab, by scrolling down the form, you can find other parameters as shown in the picture below.

The DNS Whitelist parameter allows you to set the walled garden, that is a list of web sites/domains that end-users are able to visit even without logging in to the Splash Page.

To update your walled garden list, you have to click on the button (ffff) and then manage your entries as shown in the picture below

The domains to open are the following:

Facebook	facebook.com facebook.net akamaihd.net fbcdn.net atdmt.com fbsbx.com For iOS guests using the CNA browser, in some countries you may need to add also: doubleclick.net google.com
Foursquare	foursquare.com 4sqi.net doubleclick.net In the login box displayed during the login, it is possible to connect a Foursquare account to an existing Facebook account. In order to allow this operation, it is necessary to add also the walled garden entries for Facebook.
Google	google.com googleapis.com gstatic.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Google+	google.com googleapis.com gstatic.com googleusercontent.com We recommend you to add also your local Google domain (e.g. "*google.us" for USA, "*google.it" for Italy, "*google.co.uk" for UK, etc.).
Instagram	instagram.com akamaihd.net
LinkedIn	linkedin.com licdn.com api.linkedin.com static.licdn.com akamaiedge.net LinkedIn might display a security verification screen to make sure that end-users are not robots. In this case you may need to add the following entries. Please note that adding gstatic.com might cause issues with the Android CNA Browser recaptcha.net google.com gstatic.com
Pinterest	The information is not available at the moment. Sorry for the inconvenience.
Twitter	twitter.com twimg.com abs.twimg.com api.twitter.com
VKontakte	The information is not available at the moment. Sorry for the inconvenience.

By configuring the Login profiles section, you can define the login flow for your end-users and define all the available options on the Splash Page. A Login profile is an entity containing all these options.

Once you have a Login profile, you can assign it to a location (through the Locations section, by clicking on the left sidebar at Manage → Login Profiles) and enable there all the desired options.
Your location will be pre-configured with two login profiles (called "Click-through access" and "Username and password"). You can edit any existing Login profile or create a new one.

For any option you can set the ownership:

• If you want to set the option for the location, then you have to set the lock option:
• If you want to let your location to override your value for the option, then you have to set the unlock option:

The Login profile section consists of two tabs: Login options and Advanced.

Login options

This tab contains the most frequent login options to be used and consists of the following sub-sections:

• Primary Sign-Up
• Social Login
• One Time Password Login (when Kiosk is enabled in the organization instance)
  

PRIMARY SIGN-UP

The first thing to think about is: how do you want your users to sign up for the service?

By configuring the Sign-up option, you can set the decide between the following options:

• Username/Password: this option enables the classic user registration form where end-users need to register and receive a username and password.
• Click-through: this option enables the click-through mode, where end-user need to provide information requested by the organization or location manager. In this mode, the registration form, self-care page, and password recovery page are not displayed on the Splash Page.
• None: none of the registration methods above are selected.

Note: This option does not include Social Login. You can enable the Social Login flow by the corresponding sub-section called Social Login.

Depending on what you configured in this sections, there may be other options to configure.

If you configured Username/Password, then the following options are available:

Username: by selecting this option you can determine how the system builds a username for a registered end-user. Options include:

• Mobile number: the username for the end-user is the mobile phone number provided during registration. If the phone number does not belong to any registered end-users, the username will be the phone number. Otherwise, if it already belongs to a registered end-user, and if the Multiple registrations of the same mobile number option is enabled, the username will consist of the provided phone number + a numeric suffix.
• Customer name: the username for the end-user is based on the first name and the last name provided. More precisely, the username will consist of: the first 6 letters of the first name (or the whole first name if it is 6 letters or less) + the "." character + the first 6 letters of the last name (or the whole last name if it 6 letters or less) + a progressive number used in order to avoid duplicate usernames
  (e.g. John Doe → john.doe1 ; Alexander Smithee → alexan.smithe1)
• Generated by the system: the username for the end-user is a random alphanumeric string chosen by the system.
• Email: the username is the email address of the end-user.

Allow sign-up from the Splash Page: by selecting this option, it is possible to establish whether an end-user can register through the Splash Page. Possible values for this option are:

• Yes: the end-user can register directly through the Splash Page (autonomous registration).
• No: the end-user should go to the Location Manager in person and ask for personal access credentials.

Registration fields: by selecting this option, it is possible to specify fields that will be requested from end-users in the registration form. If no fields are specified, the default registration fields will be prompted to end-users. It is possible to enable the following fields:

• First name
• Last name
• Email
• Birthday
• Gender
• Phone number
• Personal ID
• Personal ID (Brazil)
• Passport number
• Country

Mandatory registration fields: by selecting this option, you can specify which of the Registration fields specified (in the previous option) are mandatory. If no fields are specified, default mandatory fields will be prompted to end-users.

Allow multiple accounts with the same phone number: by selecting this option, it is possible to determine if the system can accept two or more end-users with the same mobile number within the location. Possible values for this option are:

• Yes: multiple registrations with the same phone number are allowed. In this case, if Username type is set to Mobile Phone, the username will consist of the provided phone number + a numeric suffix.
• No: multiple registrations with the same phone number are not allowed. If the phone number provided is already used in the location, then the end-user receives an error until another mobile number is entered.

Allow multiple accounts with the same email: by selecting this option, you can determine if the system can accept two or more end-users with the same email address within the location. Possible values for this option are:

• Yes: multiple registrations with the same email address are allowed. In this case, if Username type is set to Email, the username will consist of the provided email address + a numeric suffix. For example: john.doe@802service.com2
• No: multiple registrations with the email address are not allowed. If the email address provided is already used in the Location, then the end-user receives an error until another email address is entered.

Show sign-up summary screen: by selecting this option, you will enable a summary screen that is shown to any end-user as soon as the sign-up form is submitted without validation errors. Here the end-user is able to check if the data are correct and decide whether go online or go back to the sign-up form. Possible values for this option are:

• Yes: this screen is shown
• No: this screen is not shown and the end-user will go directly online after signing up

Enable self-care portal: by selecting this option, you can enable the My profile section for the Splash Page. If enabled, end-users can display and update their personal data, unregister from the service, check for active internet plans, and check the list of traffic sessions in the past. This option is not available if the Sign-up method is set to "Click-through". Possible values are:

• Yes: the My profile section is available to end-users.
• No: the My profile section is not available to end-users.

Allow password recovery from Splash Page: by selecting this option, it is possible to choose whether the password recovery is allowed for end-users or not. This is not available if the Sign-up method is set to "Click-through". Possible values are:

• Yes: end-users are able to recover passwords to access the service by clicking on the appropriate link within the Splash Page.
• No: end-users cannot automatically recover passwords and must go to the location manager in person to obtain credentials.

If you configured Click-Through, then the following options are available:

Registration fields: By configuring this option, it is possible to require the end-user to enter some personal data, such as:

• First name
• Last name
• Email
• Birthday
• Gender
• Phone number
• Personal ID
• Personal ID (Brazil)
• Passport number
• Country

Mandatory registration fields: by selecting this option, you can specify which of the Registration fields specified (in the previous option) are mandatory. If no fields are specified, any field displayed to end-users is intended as optional.

If you configured None, then no further options are available

SOCIAL LOGIN

This sub-section allows you to enable the Social Login flow on your location.
To do that, just set Enable: Yes.
Once Social Login is enabled, you can choose to enable the integration with the following social network providers:

• Facebook
• LinkedIn
• Twitter
• Google+
• Gmail
• VKontakte
• Instagram
• Foursquare
• Pinterest

ONE TIME PASSWORD LOGIN

If Kiosk is enabled on your organization instance, then you will see this sub-section. From here you can enable your Splash Page to accept-one time passwords designed for Kiosk.
To enable the One-time password login, just set Status: Enabled.

Advanced

This section contains more advanced login option and consists of the following sub-sections:

• Policies
• Access control
• Communications
• Success page

POLICIES

In this sub-section, you can set every option regarding any policy that the user may/has to accept in order to get the Internet access.

Acceptance of Terms of Use and Privacy Policy: By configuring this option, it is possible to set the following modes of policy acceptance:

• Explicit: the end-user has to check Terms of Use and Privacy Policy before clicking the button to go online. If it does not happen, then the end-user gets an error
• Implicit: when the end-user clicks the button to go online, then it is intended that he accepted Terms of Use and Privacy Policy and no checkboxes for this will be shown to the end-user. A specific statement on the Splash Page describes this behavior without any ambiguity.

Terms of use and Privacy Policies: By configuring this option, it is possible to set the following modes of policy acceptance:

• Unified in single clause: the end-user will get a unique acceptance statement for Terms of Use and Privacy Policy.
  
• Implicit: the end-user will get two separate acceptance statements, one for Terms of Use and one for Privacy Policy.
  

Terms of Use: By configuring this option, it is possible to customize the Terms of Use clauses as described below:

• Default text: the Terms of Use of the service are the default one provided by Volare
  
• Custom text: the end-user is able to customize in the Terms of Use for the service, in all the provided languages.
  

Privacy Policy: By configuring this option, it is possible to customize the clauses of the Terms of Use as described below:

• Default text: the Terms of Use of the service are the default one provided by Volare
  
• Custom text: the end-user is able to customize in the Terms of Use for the service, in all the provided languages.

Pre-check Terms of Use and Privacy Policy: By checking this option, Terms of Use and Privacy Policy will be checked by default on the Splash Page.

Promotional Communication Policy: by selecting this option, you can ask end-users to agree to receive marketing communications from the service provider. You can send communications using the following applications: Emails and Triggered Campaigns. Possible values are:

• No: end-users will not be asked to receive any marketing communications. End-users won’t be able to accept or decline marketing communications and will not receive them at all.
• Opt-in to receive promotional communications: end-users will be asked to click on the checkbox if he or she wants to receive marketing communications.
• Opt-out of receiving promotional communications: end-users have a choice not to click on the checkbox if he or she does not want to receive marketing communications.
  If Opt-in or Opt-out are enabled, then it is also possible to choose between displaying the default text or a custom one for any supported language.

Pre-check Promotional Communication Policy: this is displayed only if Promotional Communication Policy is set to "Opt-in to receive promotional communications". If you check this option, then the marketing clause will appear checked by default on the Splash Page. Otherwise, it will not be checked.

Minimum Age Verification: by enabling this option you can ask your end-users to confirm to be older than a certain age. You can use this option to restrict your service based on the age of your end-users.

Custom Opt-in: this option allows you to define custom opt-in clauses that you can submit to your end-users, without any obligation of acceptance for them. When the end-user accepts one or some clauses, this information will be stored in the platform and displayed in the end-users' CSV file that you can export from the People section.
You can define up to 5 opt-in clauses simultaneously, and for each clause you have to provide:

• Terms name: an alphanumeric value (only [0-9][a-z][A-Z] accepted) that is used for inventory purposes and displayed only in the end-users' CSV file (it won't be shown to your end-users)
• Text: you can define the text that will be displayed next to your checkboxes, for each language you set on the Splash page.

ACCESS CONTROL

This sub-section allows enabling all the features connected with access control.

Smart Authentication: this is a type of MAC authentication that ties devices to user accounts and on second login pre-authenticates users when they open the Splash Page.
If the Smart Authentication is enabled and the user previously had signed in by using the same device, then he will be automatically signed in when opening of the Splash Page, without any need of manual authentication.
See the following article for more details: Smart Authentication.

Primary Sign-Up Validation: by selecting this option, it is possible to add a validation step during the registration of end-users. Possible values are:

• None: no validation step required
• Password via text message: the password is sent to the phone number provided by the end-user (available only for "Username/Password").
• Inbound text/call: the end-user is required to call or send a text message to a specified phone number in order to receive username and password (available only for "Username/Password").
  This option enables: Enable inbound call, Enable inbound text messages (separate options to enable inbound texts, or calls, or both)
• Email: a validation email is sent to the email address provided by the end-user. The user is required to check his mailbox and click on a link to unlock his account (available for "Username/Password" and "Click-Through"). Please find here an example of how it works: Set up Click-through with email validation.
• Validation code via text message: the end-user receives a text message containing the username and a verification code. The end-user has to enter the verification code to get the access (available for "Username/Password" and "Click-Through")

Social Login Validation: by selecting this option, it is possible to add a validation step when the end-user signs up through Social Login. Possible values are:

• Validation code via text message: the end-user receives a text message containing the username and a verification code. The end-user has to enter the verification code to get the access.
• Send a text or call: the end-user is required to call or send a text message to a specified phone number in order to receive username and password
• None: no validation step required

Require access code for foreign users: by selecting this option you can require any end-user providing a foreign mobile country code (different than the default one set in the Preferences) to enter an identification code in order to get the access. Possible values are:

• Yes: foreign end-users are asked to enter the code
• No: this validation step is not required

Shared password: by selecting this option, it is possible to ask the end-user to enter a shared password after any successful authentication, in order to get the access. Possible values are:

• Yes: shared password is required
• No: this validation step is not required

Sponsor validation: by selecting this option you enabled the Sponsor validation that let an end-user to get the access only after having been enabled by qualified people (called "sponsor"). Possible values are:

• None: the Sponsor validation is disabled
• Multi Sponsor: Sponsor validation is enabled for some domains that you have to enter in the provided input field, separated by commas
• Single Sponsor: Sponsor validation is enabled. Only one email address is allowed as sponsor, and you have to enter it in the provided input field

Please note that enabling Sponsor Validation will disable the following options:
Primary Sign-Up Validation, Social Login Validation, Require access code for foreign users, Shared password.

COMMUNICATIONS

This sub-section allows enabling the Splash Page to send e-mails to the end-user on sign-up/sign in.

Send welcome email at sign-up: by selecting this option, the Splash Page sends an e-mail on end-users' sign-up. Possible values are:

• Yes: the platform sends a welcome email on the sign-up of the user
• No: no welcome email is sent on the sign-up of the user

Send welcome email at sign-in: by selecting this option, the Splash Page sends an e-mail on end-users' sign-in. Possible values are:

• Yes: the platform sends a welcome email on user's sign-in
• No: no welcome email is sent on user's sign-in

SUCCESS PAGE

This sub-section allows enabling some behaviors after the end-user has successfully got the access.-

Show log out button: by selecting this option, you can enable the "Logout" buttons and links on the Splash Page. Possible values are:

• Yes: "Logout" buttons and links are displayed
• No: "Logout" buttons and links are not displayed

Please note that in the cases below this option will be hidden and no logout button will be displayed on the Splash Page:

• You enabled the Smart Authentication
• Your access point does not support "logout" from the web interface.

Display welcome box on landing page: by selecting this option, it is possible to show the welcome box after end-user authentication. The possible values for this option are:

• • Yes: the welcome box is displayed.
  • No: the welcome box is not displayed.

Internet Plans can be created and managed by the Organization/Location Manager, depending on how the Location is set up and the delegation privileges set. An Internet Plan needs to be assigned to an end-user profile for that end-user to access Guest Wi-Fi.

When creating a new Internet Plan, the following fields need to be filled out. You can change these fields at a later time.

• Name: the name of the Internet Plan.
• Description: a short description of the Plan.
• Status: indicates whether the Plan can be used or not. A Plan that has been disabled is not available.
• Type: indicates the type of Plan, which can be a Recurring Profile (with automatic renewal) or a One-time Profile (valid for a limited time).
• Self-provisioning: if you set No, then you are creating a free-of-charge Internet plan, not based on Access codes and not listed on the Splash Page as an available plan for the end-user.
  If you set Yes, then you can set also Access code, Publish on the Splash Page, Service model options.

If Self-provisioning is Yes, then you can set the options below:

• Access code: if you enable this option, authenticated end-users are required to enter an activation code in the special input field before accessing the service.
  This option is disabled by default when you set Self-provisioning: No
  For more information about access code Internet Plans, check the article Internet Plan based on access codes.
• Self-Provisioning: if you enable this option, the Internet Plan appears in the list of those available that end-users can select from the Splash Page.
  This option is disabled by default when you set Self-provisioning: No
  For more information, see Assigning Internet Plan to end-users.
• Service model: indicates whether the service is Free-of-charge or Paid.
  This option is set as Free-of-charge when you set Self-provisioning: No
• Price: indicates the purchase price if a paid plan.

Service parameters

Parameters regarding navigation time and validity time need to be configured. These parameters may differ depending on the type of Internet Plan - Recurring or One-time.

For Recurring plans, the following information is required:

• Allocate time: this indicates how long the end-user can use the service. After this allocated time, the validity of the profile is expired until renewed.
• Renewal frequency: indicates how often the validity of the profile is renewed.
• Validate: this indicates a date interval where the Internet plan is valid. Outside this time interval, the Internet plan cannot be consumed.

For One-time plans, the following information is required:

• Allocate time: indicates how long the end-user can use the service. After this time the validity of the profile is expired.
• Expiration: if this is selected, the One-time plan is based on "expiration", otherwise on "consumption".Example: A 2 hours One-time Profile allows the end-user to navigate for two hours. After this time the navigation will be interrupted.
  • Consumption: in this case, the end-user can take advantage of the plan in different browsing sessions, also not contiguous. The system considers the time that has been consumed and allows the end-user to enjoy the remaining time in more subsequent sessions. A "consumption" One-time profile can be created by leaving unchecked the Expiration checkbox.
  • Expiration: in this case the end-user session inevitably expires after the expected duration of the plan, starting from the moment when the end-user makes the first access. An "expiration" One-time profile can be created by selecting the Expiration checkbox at the bottom of the creation form.
• Set validity: if you check this option, then you are able a time amount where the Internet plan is valid. The time amount starts when the Internet plan is assigned to the end-user.

Regardless of the Profile type, it is also possible to set the following options:

• Force time-out: it is possible to disconnect the sessions of end-users (to whom the plan is assigned), after a set amount of time. Please note that by selecting this option, you cannot increase the remaining time of your end user's session: so, if the remaining time of an end-user session is less than the value set here, then the duration of the session cannot be modified.

Advanced parameters

By clicking on the Advanced parameters link at the bottom (enabled upon request) of your Internet Plan page, you can configure additional parameters to limit the bandwidth for your end-users. In most cases, you do not need this configuration.

We don't recommend you to set these input fields unless you know what are you doing. For further information, please read the following article Setting QoS parameters on Internet plans.

When a new Location is created, the Organization Manager has administrator rights to create Splash Pages, Internet Plans and manage end-user sign-up processes. With the creation of a new Location, an account for a Location Manager is also created. This credential can be used to log in to the Admin Panel and depending on the Location profile assigned, the Location Manager will be able to customize and manage the Location or will have restricted access to view certain functionalities

Before creating a new Location, please make sure to have the following information:

1. An access point configured to use the Splash Page
2. The "identifier" of this access point
3. The MAC address of the access point (optional for some vendors)

You can create a new Location by clicking Manage → Locations from the quick access toolbar on the left and then clicking Add. Follow the wizard and fill in all the information as described below, the data entered in this step can be subsequently modified.

Step 1 - General

The first step to creating a new Location is to provide inventory information such as:

Location details

• Name: the unique name for the Location. This field is mandatory.
• Business name: the name of the business which the Location belongs to. This field is optional.
• Description: a short description of your Location.
• Category: the merchant category which represents the Location. It is strongly recommended to set this value since some applications need this value set in order to correctly work. This field is optional.
• Country: the country of the Location. This field is mandatory.
• Address: the address of the Location. This field is mandatory.
• City: the city of the Location. This field is mandatory.
• State/province/region: further geoLocation data of the Location. This field is mandatory.
• ZIP/postal code: the ZIP or the postal code of the Location. This field is mandatory.
• Time zone: defines the timezone for the Location. Recurring Internet Plans automatically reset at 00:00 AM of each day and in order to ensure that end-user is able to utilize corresponding internet plans, it is necessary to set the correct timezone. This field is mandatory

Location administration

• Location Profile: indicates access rights assigned to Location Managers.  This field is mandatory

Admin

• First name: the first name of the Location Manager. This field is mandatory.
• Last name: the last name of the Location Manager. This field is mandatory.
• Email: the email address of the Location Manager. This field is mandatory.
• Phone number: the phone number of the system user. This field is mandatory.
• Send activation details by email: if the box is checked, Admin Panel username and password are emailed to the specified address.
• Send activation details by text message: if the box is checked, login credentials to access the Admin Panel can be sent by SMS if service is active.

Step 2 - Services

The second step requires the configuration of basic options for the service management:

• Devices: indicates the device types the Location will be supporting (Access Point, FogSense, Sensor, etc.).
• Service status: indicates if the Location is currently active (Enabled) or not (Disabled).
• Identity domain: indicates if end-users are provided with Internet only for the current Location (Locations) or for all the Locations under the main Organization (Organization).
• Login Profile: indicates the sign-up and social login options assigned to the Location.  This field is mandatory.
• Splash Page: identifies the Splash Page assigned to the Location. This field is mandatory.

Internet access policies

• Internet Plans Domain: indicates if the Location inherits the Internet plans from the main Organization (Organization), or has its own standalone set of Internet plans (Location). If you are choosing Location, then you can select between a set of Internet plans. Anyway, the Location Managers will be able to create or edit Internet plans, according to the Location profiles settings.
• Default Internet Plan: Indicates which internet plan is assigned to the Location. This field is optional.

Step 3 - Device

The third step of this guide shows how to activate the first access point in the Location. It is mandatory to add at least one access point during the creation of a Location. If you don't have the necessary access point information, choose Chillispot/Coovachilli as the hardware manufacturer, since this allows fake data to be entered for the MACService status address and the identifier field.

• Name: the unique name for the access point. This field is mandatory.
• Type: through this field, it is possible to select the type of device. This field is mandatory.
• Description: an optional short description of the access point.
• Hardware manufacturer: this field identifies the vendor or one of supported firmware. This field is mandatory.
• MAC address: the MAC address belonging to the access point. This field is mandatory.
• Identifier: the Identifier used by the platform to identify the access point, depending on the access point vendor, this field is optional.
• Country: the country of the access point. This field is mandatory.
• Address: the address of the access point. This field is mandatory.
• City: the city of the access point. This field is mandatory.
• State/province/region: further geoLocation data of the access point. This field is mandatory.
• ZIP/postal code: the ZIP or the postal code of the access point. This field is mandatory.

The ‘Same as Location address’ checkbox lets you use the same Location data provided during the first step