Integration Guide GuestAir Revised: 15 April 2016

Integration Guide GuestAir Revised:  15 April 2016
Integration Guide
Revised: 15 April 2016
About This Guide
Guide Type
Documented Integration — WatchGuard or a Technology Partner has provided documentation demonstrating
Guide Details
WatchGuard provides integration instructions to help our customers configure WatchGuard products to work
with products created by other organizations. If you need more information or technical support about how to
configure a third-party product, see the documentation and support resources for that product.
GuestAir Integration Guide
GuestAir Integration Overview
WatchGuard Fireware OS integrates with GuestAir to turn your Wi-Fi hotspot into a secure and highlycustomizable captive portal. This integration enables additional authentication methods to capture guest
information. In this case, when a client tries to get access to a web page, the Firebox redirects the request to
the GuestAir authentication system.
Platform and Software
The hardware and software used to complete the steps outlined in this document include:
Firebox or WatchGuard XTM device installed with Fireware v11.10.5
GuestAir Guest Authentication System
Set Up a GuestAir Zone
1. Log in to the GuestAir admin UI.
2. Navigate to Zones and select New. Add the name of your zone.
GuestAir Integration Guide
3. On the Connectivity tab, type a Shared Secret, and a Post Authentication URL. Specify a
Management IP Override address only if the Firebox is behind another firewall or NAT device that will
NAT its IP address before its packets reach GuestAir.
GuestAir Integration Guide
GuestAir Integration Guide
4. On the Auth Settings tab, change the Auth Method setting to the method you want to use.
5. On the Customize Pages tab you can create a hotspot template for the Zone. To create a Zone Landing
Page, select Click here to create or modify template.
GuestAir Integration Guide
6. To load a new template, select the Load New Template icon
from the menu bar.
7. From the File Browser list, double-click one of the pre-loaded templates available to you to select and
load it.
GuestAir Integration Guide
8. Click the Apply Changes icon
9. Save the changes to the Zone page.
10. Click Save and close. The Zone is created and you can see the ID in this example is set to 280.
GuestAir Integration Guide
Set Up Firebox External Guest Authentication
1. Connect to your Firebox with WatchGuard System Manager and open Policy Manager. You can also
use Fireware Web UI to complete this procedure.
2. Select Setup > Authentication > Hotspot.
3. Click Enable hotspot on an interface and select the interface you want to use from the drop-down list.
In this example, we use Optional-2.
4. From the Hotspot Type drop-down list, select External Guest Authentication.
5. Type and confirm a Shared Secret. This must be same shared secret you used on the GuestAir Zone
Connectivity tab
6. In the Authentication URL text box, type the URL of the authentication page on the external GuestAir
web server.
7. In the Authentication Failure URL text box, type the URL of the authentication failure page on the
external GuestAir web server. In the screenshot below, x.x.x.x represents the GuestAir server the user
has access to, for example: in Germany.
GuestAir Integration Guide
8. Save the configuration to your Firebox.
Test Hotspot External Guest Authentication
To verify external guest authentication is working through GuestAir, open a web browser and connect to a web
page. The GuestAir authentication page will appear in the hotspot user’s browser. Users will not see this
authentication page unless a template has been loaded as described in Steps 6-8 above.
GuestAir Integration Guide
GuestAir Integration Guide
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF