> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wiacom.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Onboarding

> Configure Teltonika RUTX for Wiacom Portal — legacy mode

<Warning>
  Portal URL, UAM secret, and RADIUS details are region-specific. Obtain them from Wiacom before starting.
</Warning>

## Step 1 — Create Guest WiFi SSIDs

1. Log in to the router web interface
2. Go to **Network → Wireless**
3. Add a new WiFi SSID (e.g. *Wiacom FreeWifi*) without a network assignment
4. Repeat for the second radio if available — use the same SSID name on both
5. **Save & Apply**

<Warning>
  Note the **BSSID** of each new WLAN interface and send them to the Wiacom team — they are required as the NAS-ID value for RADIUS. The BSSID is visible in the wireless interface list after saving.
</Warning>

## Step 2 — Add the Device to Wiacom

1. Go to **Inventory → Routers → Add New Router**
2. Select **Teltonika / RUTX** from the vendor dropdown
3. Enter the primary WLAN BSSID as the NAS-ID
4. Assign a location and click **Save**

## Step 3 — Configure the Hotspot

Go to **Services → Hotspot → General**, create a new hotspot on one of the new WLAN interfaces.

**General Settings:**

| Field                | Value          |
| -------------------- | -------------- |
| Enabled              | On             |
| Authentication mode  | RADIUS         |
| Landing page         | External       |
| Password encoding    | On             |
| Landing page address | `<PORTAL_URL>` |
| UAM Port             | `3990`         |
| UAM secret           | `<UAM_SECRET>` |
| Success page         | Success page   |

**Advanced Settings:**

* Additional interfaces: add the second WLAN interface if present

## Step 4 — Configure RADIUS

| Field               | Value                                                            |
| ------------------- | ---------------------------------------------------------------- |
| RADIUS server #1    | `<RADIUS_SERVER_1>`                                              |
| RADIUS server #2    | `<RADIUS_SERVER_2>`                                              |
| Authentication port | `1812`                                                           |
| Accounting port     | `1813`                                                           |
| NAS identifier      | BSSID of primary WLAN in hyphenated format (`XX-XX-XX-XX-XX-XX`) |
| RADIUS secret key   | `<RADIUS_SHARED_SECRET>`                                         |

<Warning>
  NAS identifier must use **hyphens** (`-`), not colons (`:`). Send this value to Wiacom.
</Warning>

## Step 5 — Configure the Walled Garden

Under the **Walled Garden** section:

| Category             | Domains                                                                                           |
| -------------------- | ------------------------------------------------------------------------------------------------- |
| **Required**         | `wiacom.ai`                                                                                       |
| Facebook / Instagram | `facebook.com`, `fbcdn.net`, `akamaihd.net`, `connect.facebook.net`                               |
| Google               | `google.com`, `googleapis.com`, `gstatic.com`                                                     |
| Twitter / X          | `twitter.com`, `twimg.com`                                                                        |
| LinkedIn             | `linkedin.com`, `licdn.net`, `licdn.com`                                                          |
| Video / CDN          | `fast.wistia.com`, `fastly.net`, `akamaiedge.net`, `akamaized.net`, `amazonaws.com`, `zencdn.net` |

**Save & Apply**.

## Troubleshooting

<AccordionGroup>
  <Accordion title="Guests not redirected to portal">
    Verify the NAS identifier matches the WLAN BSSID exactly, using hyphens. Confirm Authentication mode is RADIUS and Landing page is External.
  </Accordion>

  <Accordion title="RADIUS authentication fails">
    Verify RADIUS server addresses and shared secret. Confirm UDP 1812 and 1813 are reachable.
  </Accordion>
</AccordionGroup>