Skip to main content
Firmware V2R7C20 or above is required. RADIUS server addresses and portal URLs are region-specific — obtain them from Wiacom before starting.

​
Step 1 — Add the Device to Wiacom

  1. Go to Inventory → Routers → Add New Router
  2. Select Huawei / WLAN Controller from the vendor dropdown
  3. Enter the required details and assign a location
  4. Click Save

​
Step 2 — Create a Guest VLAN

Log in to the Huawei WLAN Controller web interface → Configuration:
  1. AC Config → VLAN → Add: set a VLAN ID (e.g. 500), enable Create VLANIF
    • Description: guestwifi, IP Address format: IPv4
    • IPv4 Address/Mask: gateway IP for the guest subnet
  2. IP → DHCP: ensure DHCP is enabled, click Create
    • Address pool type: Interface address pool, Select interface: VLAN<ID>
    • Advanced → Primary/Secondary DNS: your preferred DNS servers

​
Step 3 — Configure Walled Garden (Domain ACL)

Go to Security → ACL → Domain Name Configuration. Add each domain with an incrementing Domain Name ID: Under User ACL Settings → Create:
  • ACL name: guestwifi, ACL number: 6030
  • For each domain: Add Rule → Action: Permit, Protocol: IP, Dest domain: select domain

​
Step 4 — Configure External Portal Server

Security → AAA → External Portal Server tab:
  • HTTP protocol: Enabled, HTTP interoperation mode: HTTP-based
  • Port for listening to HTTP packets: 8000
Portal Authentication Server List → Create: URL Option Settings: Parameter Parsing Configuration:
  • Protocol type: HTTP
  • Login success response: Redirect to <PORTAL_URL>?res=success

​
Step 5 — Configure RADIUS

Security → AAA → RADIUS → RADIUS Server Profile → Create:
  • Profile name: guestwifi
  • Key / Confirm key: <RADIUS_SHARED_SECRET>
Authentication/Accounting Server — Create twice:

​
Step 6 — Configure Authentication Profile

  1. Authentication Profile → Create → name guestwifi
  2. Expand profile → Portal Profile → Add → name guestwifi
    • Portal authentication: External portal server, Active server: guestwifi, Authentication mode: Layer 3
  3. RADIUS Server Profile → select guestwifi
  4. Authentication Scheme → Add → name guestwifi, First authentication: RADIUS
  5. Accounting Scheme → Add → name guestwifi, Real-time accounting: On, Interval: 3
  6. Authentication-free Rule Profile → Add → name guestwifi, Control mode: ACL, ACL number: 6030
  7. Advanced tab: HTTPS Redirection Status: Off, Portal URL encoding: Off

​
Step 7 — Configure VAP and SSID Profiles

  1. AP Config → Profile → VAP Profile → Create → name guestwifi
    • Status: On, VAP type: Service VAP, Forwarding mode: Tunnel
    • Service VLAN ID: your guest VLAN, Home agent: AP, Layer 3 roaming: On, IP learning: On
  2. SSID Profile → Create → name guestwifi, SSID: your guest WiFi name
  3. AP Group → [group] → VAP Configuration → Add → VAP profile: guestwifi, WLAN ID: available ID
  4. Under guestwifi profile: SSID Profile → guestwifi
  5. Security Profile → Create → name guestwifi, Security Policy: Open
  6. Authentication Profile → select guestwifi
  7. Click Save at the top to persist all settings

​
Troubleshooting

Confirm HTTPS Redirection is Off and Portal URL encoding is Off in the Advanced tab.
Verify the RADIUS IP and shared secret match values provided by Wiacom. Confirm UDP 1812 and 1813 are reachable from the controller.
The Login URL uses the controller’s own IP and port 8000 — not the Wiacom cloud URL.