> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wiacom.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Onboarding

> Configure TP-Link Omada EAP for Wiacom Portal

<Warning>
  RADIUS details and portal URL are region-specific — obtain from Wiacom before starting.
</Warning>

## Step 1 — Add the Device to Wiacom

1. **Inventory → Routers → Add New Router**
2. Select **TP-Link / Omada**, fill in details, assign a location, click **Save**

## Step 2 — Create the SSID

Log in to your Omada controller. **Wireless Settings → Add**:

| Field         | Value                |
| ------------- | -------------------- |
| SSID          | Your guest WiFi name |
| Band          | 2.4 GHz and 5 GHz    |
| Guest Network | Enabled              |
| Security Mode | None                 |

Click **Apply**.

## Step 3 — Configure the Guest Portal

**Wireless Control → Portal → Add a New Portal**:

| Field                      | Value                       |
| -------------------------- | --------------------------- |
| Portal Name                | `guestwifi`                 |
| SSID                       | Select the SSID you created |
| Authentication Type        | External RADIUS Server      |
| Authentication Timeout     | 8 Hour                      |
| RADIUS Server IP           | `<RADIUS_SERVER_1>`         |
| RADIUS Port                | `1812`                      |
| RADIUS Password            | `<RADIUS_SHARED_SECRET>`    |
| Authentication Mode        | PAP                         |
| NAS ID                     | `guestwifi`                 |
| RADIUS Accounting          | Enable                      |
| Accounting Server IP       | `<RADIUS_SERVER_1>`         |
| Accounting Server Port     | `1813`                      |
| Accounting Server Password | `<RADIUS_SHARED_SECRET>`    |
| Interim Update             | Enable, `120`               |
| Portal Customization       | External Web Portal         |
| External Web Portal URL    | `<PORTAL_URL>`              |
| HTTPS Redirect             | Disable                     |
| Landing Page               | Promotional URL             |
| Promotional URL            | `<PORTAL_URL>?res=success`  |

Click **Apply**.

## Step 4 — Configure Walled Garden

**Access Control → Pre-authentication Access → Enable**

Under Pre-Authentication Access List, add each domain:

```
*.wiacom.ai
*.akamaitechnologies.com
*.akamaiedge.net
*.akamaized.net
*.akamai.net
*.amazonaws.com
*.fastly.net
*.facebook.com
*.fbcdn.net
*.akamaihd.net
connect.facebook.net
*.instagram.com
*.twitter.com
*.twimg.com
*.linkedin.com
*.licdn.net
*.licdn.com
*.google.com
*.googleapis.com
*.gstatic.com
```

Click **Apply**.

## Troubleshooting

<AccordionGroup>
  <Accordion title="Guests not redirected to portal">
    Confirm HTTPS Redirect is Disabled — only HTTP traffic triggers the redirect. Try `http://neverssl.com` for testing.
  </Accordion>

  <Accordion title="RADIUS authentication fails">
    Verify server IP and password match Wiacom values. UDP 1812 and 1813 must be reachable.
  </Accordion>
</AccordionGroup>