Cloud RADIUS and Guest WiFi for Juniper Mist
Add 802.1X authentication and guest splash pages to your Mist WLANs without running a RADIUS server. IronWiFi hosts the RADIUS and the external captive portal in the cloud, and you point the WLAN template at us from the Mist dashboard. No appliance, no VM, no on-prem infrastructure.
What You Can Do with Mist and IronWiFi
One cloud service behind every WLAN in your Mist organization
802.1X and WPA2-Enterprise WLANs
Set a Mist WLAN to WPA2-Enterprise and point it at IronWiFi as its RADIUS server. We handle the 802.1X exchange with EAP-TLS, PEAP, and EAP-TTLS, so staff join with their existing credentials or a certificate instead of a shared passphrase.
Guest WiFi with an External Portal
Enable the external captive portal on a guest WLAN and point it at an IronWiFi splash page. Email, SMS, social, voucher, and self-registration flows are built in, and every session is logged for reporting.
Your Existing Identity Provider
Mist forwards the RADIUS request to IronWiFi, and IronWiFi checks it against Microsoft Entra ID, Google Workspace, Okta, OneLogin, JumpCloud, or any LDAP and Active Directory you connect. No separate WiFi password list to maintain.
Configured per WLAN Template
Mist is cloud managed, so the RADIUS server, shared secret, and splash page URL live on the WLAN template under Organization → WLANs. Set it once and the same authentication rolls out to every site using that template.
Four Steps in the Mist Dashboard
Everything is configuration — there is nothing to install on your network
Create your network in IronWiFi
Create a network in the IronWiFi console and note the RADIUS server address, the authentication port, the accounting port, and the shared secret. For guest WiFi, also create a captive portal and copy its splash page URL.
Add IronWiFi as the RADIUS server
In the Mist dashboard open Organization → WLANs and edit the WLAN template. Set the WLAN security to WPA2-Enterprise, then enter the IronWiFi server address, the authentication and accounting ports, and the shared secret exactly as they appear in your IronWiFi network settings.
Turn on the guest portal
For guest WiFi, enable the external captive portal on the WLAN and set the splash page URL from IronWiFi. Then add the IronWiFi address to the walled garden so unauthenticated clients can load the portal, along with the domains for any social login providers you turned on.
Test it
Save the WLAN and test with a known user. Then confirm the authentication appears under Reports → Authentications in the IronWiFi console.
Check your AP firmware first: Mist access points need firmware 0.12 or later for full RADIUS support.
Have Questions? Get Answers
- Start a free trial and connect a Mist WLAN today
- Follow the step-by-step Mist setup guide in the help center
- Ask us anything by email — we answer setup questions directly
Prefer a deep dive? Read the Juniper Mist RADIUS setup guide, browse all compatible hardware, or subscribe through AWS Marketplace and pay on your AWS bill.