Aerohive (HiveManager)

Access Point Instructions for Aerohive (HiveManager)

This page explains the Captive Portal configuration for HiveManager and authentication with IronWiFi.

IronWiFi Console Configuration

  1. Log into the IronWiFi console or register for free
  2. Create a new network
  3. After that, create a new captive portal, with vendor Aerohive

Access Point Configuration

Please note: You need to be running HiveManager 6.4r1 or above in order to continue. Earlier versions are not supported.

Log in to your HiveManager web interface

Click on Configuration at the top and then on Guided Configuration on the left.

Under Choose Network Policy click New and configure with:

  • Name - GuestWiFi
  • Wireless Access - Enabled
  • Switching - Disabled
  • Branch Routing - Disabled
  • Bonjour Gateway - Disabled

Click on Create to continue

Next to SSIDs click Choose. Click on New and configure with:

  • Profile Name - guestwifi
  • SSID - Guest WiFi (or whatever you want)
  • Enabled Captive Web Portal - Enabled

All other settings can be left at their defaults.

Click Save and then OK

Next, click on and choose New. Configure with:

  • Name - guestwifi
  • Registration Type - External Authentication

Under Captive Web Portal Login Page Settings:

  • Login URL - 
  • Password Encryption - No encryption
  • Authentication Method - PAP

Under Captive Web Portal Success Page Settings:

  • Show the success page... - Disabled
  • After a successful login - Redirect to an external page
  • Use a simple URL address - 

Under Optional Advanced Configuration:

  • Use network default - Enabled
  • Use HTTP 302 a the redirection method - Enabled
  • Enabled HTTPS - No

Under Walled Garden:

107.178.250.42

If you need to load resources from external servers (SAML, social login), you will need to add other entries as well, instructions to configure the walled garden list in this case are available here.

Click Save

Next, click on and choose New. Configure with:

  • RADIUS Name - guest

Under Add a New RADIUS Server configure with:

  • IP Address / Domain Name - 
  • Server Type - Auth/Acct
  • Shared Secret - 
  • Confirm Secret - 
  • Server Role - Primary

Click Apply to add, and then click on New to add another:

  • IP Address / Domain Name - 
  • Server Type - Auth/Acct
  • Shared Secret - 
  • Confirm Secret - 
  • Server Role - Backup1

Click Apply again, and then click on Save

Under User Profile click on Add/Remove.

Select default-profile and click Save

Further down the page, beside Advanced Settings click Edit

Click on Service Settings and beside ALG Services click the Plus (+) icon Configure with:

  • Name - guestwifi
  • DNS - Enabled
  • HTTP - Enabled

Click on Save and then Save again at the top right.

Finally, click on Continue at the top right.

You are now asked which of your access points you wish to push the new settings to (typically all your access points). Select all that apply, and click Update > Update Devices

Click Update.

! You must also install a valid SSL certificate on your controller/AP, in order to avoid authentication issues !