Onboarding

RADIUS details and portal URL are region-specific — obtain from Wiacom before starting. Collect the Base Radio MAC address of each AP and send to the Wiacom team before proceeding.

Step 1 — Add the Device to Wiacom

Inventory → Routers → Add New Router
Select Cisco WLC, fill in details (including AP Base Radio MACs), assign a location, click Save

Step 2 — Configure RADIUS for Authentication

SECURITY → AAA → RADIUS → Authentication → New Setup RADIUS Attributes Format:

Field	Value
Auth Called Station ID Type	AP MAC Address
MAC Delimiter	Hyphen

Create authentication server:

Field	Value
Server Address	`<RADIUS_SERVER_1>`
Port Number	`1812`
Shared Secret Format	ASCII
Shared Secret	`<RADIUS_SHARED_SECRET>`

Step 3 — Configure RADIUS for Accounting

SECURITY → AAA → RADIUS → Accounting → New Same format settings as above. Create accounting server:

Field	Value
Server Address	`<RADIUS_SERVER_1>`
Port Number	`1813`
Shared Secret	`<RADIUS_SHARED_SECRET>`

Step 4 — Configure Access Control Lists (Walled Garden)

Create ACLs to permit unauthenticated clients to reach the Wiacom portal and social login providers. For Access Points NOT in FlexConnect mode — use DNS-based ACLs with the following domains:

Wiacom portal:    *.wiacom.ai
Facebook:         *.facebook.com, *.fbcdn.net, *.akamaihd.net, connect.facebook.net
Instagram:        *.instagram.com
Twitter/X:        *.twitter.com, *.twimg.com
LinkedIn:         *.linkedin.com, *.licdn.net, *.licdn.com
Google:           *.google.com, *.googleapis.com, *.gstatic.com
CDN:              *.akamaitechnologies.com, *.akamaiedge.net, *.akamaized.net, *.amazonaws.com, *.fastly.net

For Access Points in FlexConnect mode — only IP-based ACLs are supported. Use the IP list provided by Wiacom for your region. SECURITY → Web Auth → Web Login page:

Redirect URL after login: leave blank

Controller → Interfaces: check the virtual interface IP (adjust to a non-public IP if needed) Management → HTTP-HTTPS:

WebAuthSecureWeb: Disabled
HTTPS Redirection: Disabled (Reboot may be required)

From CLI (cannot be done via web interface, reboot may be required):

config custom-web logout-popup disable
config network web-auth captive-bypass

WLANs → Create New → Go:

Section	Field	Value
General	SSID	Your guest WiFi name
Security > Layer 2	Layer 2 Security	None
Security > Layer 3	Layer 3 Security	Web Policy
	Authentication	Enabled
	Pre-authentication ACL	Your ACL name
	Override Global Config	Enabled
	Web Auth type	External (Re-direct to external server)
	Redirect URL	`<PORTAL_URL>`
Security > AAA	Authentication Servers	Enabled, `<RADIUS_SERVER_1>` port 1812
	Accounting Servers	`<RADIUS_SERVER_1>` port 1813
	Interim Update	Enabled, Interval: 600
	Authentication priority	RADIUS
Advanced	Allow AAA Override	Enabled
	Enable Session Timeout	Enabled, 1800 secs

Troubleshooting

Captive portal redirect not triggering

Confirm WebAuthSecureWeb and HTTPS Redirection are both disabled. The CLI commands (captive-bypass and logout-popup disable) may require a reboot to take effect.

RADIUS authentication fails

Verify server address and shared secret match Wiacom values. Confirm the controller can reach the RADIUS server on UDP 1812 and 1813.

FlexConnect ACLs not working

FlexConnect mode only supports IP-based ACLs. Contact Wiacom for the current IP list for your region.

Getting Started

Access Features

Onboarding Channels

Integrations & Data

WiFi Vendors

Admin Reference

Client Reference

Step 1 — Add the Device to Wiacom

Step 2 — Configure RADIUS for Authentication

Step 3 — Configure RADIUS for Accounting

Step 4 — Configure Access Control Lists (Walled Garden)

Troubleshooting

​Step 1 — Add the Device to Wiacom

​Step 2 — Configure RADIUS for Authentication

​Step 3 — Configure RADIUS for Accounting

​Step 4 — Configure Access Control Lists (Walled Garden)

​Step 5 — Configure Portal Login and WLAN

​Troubleshooting

Step 1 — Add the Device to Wiacom

Step 2 — Configure RADIUS for Authentication

Step 3 — Configure RADIUS for Accounting

Step 4 — Configure Access Control Lists (Walled Garden)

Step 5 — Configure Portal Login and WLAN

Troubleshooting