Beyonic (Skyfii) Integration with Wi-Fi Cloud

Deployment Overview

WatchGuard Wi-Fi Cloud integrates with Beonic (formerly known as Skyfii) to provide captive portal services to end users. With Wi-Fi Cloud, you can configure an SSID to direct users to the Beonic captive portal. This enables you to utilize your marketing campaigns configured in Beonic for your Wi-Fi Cloud users and send analytics data to Beonic servers.

Contents

• Beyonic (Skyfii) Integration with Wi-Fi Cloud
• • Deployment Overview
  • Contents
  • Platform and Software
  • Test Topology
  • Configure WatchGuard Wi-Fi Cloud for Beonic Integration
  • • Add a RADIUS Server
    • Add an SSID
    • Get the WatchGuard AP Details for Beonic (Skyfii) Integration
    • Configure Wi-Fi Cloud to Forward Analytics Data
  • Configure Beonic (Skyfii) for WatchGuard Wi-Fi Cloud
  • • Create a Venue
    • Create an Access Point
    • Create a Guest WiFi Portal
  • Test the Beonic Integration

Test Topology

For more information about network port configuration for communications between your APs, Wi-Fi Cloud, and Beonic (Skyfii), go to the Beonic (Skyfii) documentation and the WatchGuard Wi-Fi Cloud documentation.

Configure WatchGuard Wi-Fi Cloud for Beonic Integration

These sections describe how to configure Wi-Fi Cloud to integrate with Beonic.

For detailed information on WatchGuard Wi-Fi Cloud AP deployment, go to the Wi-Fi Cloud Getting Started Guide.

Add a RADIUS Server

Before you begin, verify the RADIUS server settings with your Beonic (Skyfii) support documentation. These settings are subject to change.

• IP Address for primary RADIUS servers
  • Asia
  • Australia and New Zealand
  • Europe and Africa
  • North America
  • South America
• Authentication Port: 1812
• Accounting Port: 1813
• Shared Secret: radsec

To configure a RADIUS server in Wi-Fi Cloud:

1. Log in to WatchGuard Wi-Fi Cloud.
2. Open Discover.
3. Select the location where to apply the settings.
4. Select Configure > Network Profiles > RADIUS.
5. Click Add RADIUS Server.
6. Type the RADIUS Server Name, IP Address, Authentication Port, Accounting Port, and Shared Secret of the Beonic RADIUS server.
7. Click Save.
8. Repeat steps 4-7 to create a secondary RADIUS server.

9. Click Save.

Add an SSID

To specify the parameters for wireless access, you must create and assign SSIDs to your APs. The SSID settings are automatically inherited from parent locations. Verify the correct top-level location folder when you create the SSID.

To add an SSID:

1. Open Discover.
2. Select the location where you want to apply the settings.
3. Select Configure > WiFi, then select the SSID tab.
   
4. Click Add SSID.
5. Type an SSID Name and Profile Name.
6. In the Select SSID Type section, select Guest.

7. Select the Security tab.
8. From the Select Security Level for Associations drop-down list, select Open.

9. Select the Captive Portal tab.
10. Select the Captive Portal check box.
11. From the Cloud Hosted drop-down list, select Third-Party Hosted.
12. Select the With RADIUS Authentication check box.
13. In the Splash Page URL text box, type the appropriate captive portal domain.

Use the format: <captive-portal-domain>/welcome/watchguard/cloud.

For example: https://guestwifi-us.beonic.io/welcome/watchguard/cloud

Verify the regional captive portal domain name in the Beonic (Skyfii) support documentation:

• Asia
• Australia and New Zealand
• Europe and Africa
• North America
• South America

14. In the Shared Secret text box, type the shared secret for Beonic. Currently, this is secret. Verify this shared secret with the current Beonic support documentation before you proceed.
15. In the Websites that users can access before login section (Walled Garden), make sure you add the Beonic portal URL and any other supporting sites that are used by the portal. For more information, view the Beonic support documentation for the required servers in your region.

You must add each IP address listed in your regional server documentation:

• Asia
• Australia and New Zealand
• Europe and Africa
• North America
• South America

You must also add these addresses:

• skyfii.com
• All values in the appropriate ACL lists for your region.
• To enable social media authentication in the portal, add the addresses listed in Social Login ACLs & Global Domain / IP Whitelist.

16. Leave the other options at their default settings.

17. Click the RADIUS Settings link.
18. From the Primary and Additional Authentication Server and Accounting Server drop-down lists, select the RADIUS server configuration you created for Beonic.
19. Set the Accounting Interval to 1 minute.
20. Leave the other options at their default settings.

21. Click Save to save the RADIUS settings.
22. Click Save to save the SSID settings.

The SSID is applied to APs in the selected location. Make sure you configure radio and device settings for your APs if you have not already configured these settings.

Get the WatchGuard AP Details for Beonic (Skyfii) Integration

You must record the name and MAC address of each WatchGuard AP you want to use in your Beonic integration.

To obtain the details for each WatchGuard AP:

1. Open Discover.
2. Select Monitor > WiFi, then select Access Points.
   Your managed APs appear.
3. Record the Name and MAC Address of each AP you want to use with Beonic.

Configure Wi-Fi Cloud to Forward Analytics Data

This section is optional, if you don't want Beonic to collect your AP information, you can skip this section.

To configure Wi-Fi Cloud to forward presence analytics data to Beonic servers:

1. Open Discover.
2. Select the location where you want to apply the settings.
3. Select Configure > Device > Access Points, then select the General tab.
4. In the Device Password section, type and confirm the password for your device.
   

5. Set the Client RSSI Update Interval to 10 seconds.
6. Select Integrations.
7. Select the Push Visibility Analytics to Third-Party Server check box.
8. Select JSON as the Visibility Analytics Format.
9. In the Server URL text box, type the URL of the Beonic analytics server.

Use the format: <ingest-domain>/watchguard/cloud/

For example: https://ingest-us.beonic.io/watchguard/cloud

Use the appropriate server for your region:

• Asia
• Australia and New Zealand
• Europe and Africa
• North America
• South America

10. Set the Send Interval to 10 seconds.
11. In the Authorization section, select Key, then type the Beonic authorization key. For example: FHWqVX2FAFqo4wrXnLa87JmF4
    Confirm this authorization key with your Beonic support documentation.

12. Click Save.

Configure Beonic (Skyfii) for WatchGuard Wi-Fi Cloud

Before you begin, verify these directions with the Beonic support documentation (https://support.skyfii.com). These settings might change.

Create a Venue

1. Log in to your Beonic Cloud region.
2. Click in the upper-right corner of the Beonic interface.
3. Select Venues.
4. Click Add New.
5. Type a Name for the venue. In this example, type WatchGuard Test Venue.
6. From the Region drop-down list, select your region.
7. From the Timezone drop-down list, select your timezone.
8. From the Category drop-down list, select an appropriate category.
9. From the Registration Group drop-down list, select your registration group.
10. Select the Enabled check box.
11. From the Campaign Marketing List drop-down list, select a marketing list or select Create new Marketing List.

12. From the Country drop-down list, select a country.
13. (Optional) Type an Address, Suburb, Postcode, State, Latitude, and Longitude.

12. Click Create.
13. From the navigation pane, select Venues.
14. Select the venue you created. In this example, select WatchGuard Test Venue.
15. Select the Engage Settings tab.

16. (Optional) Configure the Minimum minutes between contact, Marketing Email From Address, and Market Email From Name values.
17. Click Save Changes.

Create an Access Point

To create an Access Point in Beonic:

1. Click in the upper-right corner of the Beonic interface.
2. Select Access Points.
3. Click Add New.
   The Create Access Point page appears.
4. From the Venue drop-down list, select the venue you created.
5. From the Floor drop-down list, select Default Floor.
   If you have created a floor, you can select the floor you created. In this example, select WatchGuard Test Floor.
6. Type the Name and MAC Address of the WatchGuard AP.
7. (Optional) Click Add One or Add Range to add the MAC address of the access point.

8. Click Create.

Create a Guest WiFi Portal

To create a Guest WiFi portal in Beonic:

1. In the top navigation bar, click WiFi.
2. Select Portals > Add New.
3. On the Setup page, type a Portal Name. In this example, type WatchGuard Test Portal.
4. From the Languages drop-down list, select one or more languages.
5. From the Default Languages drop-down list, select one language.
6. From the Assign a Venue drop-down list, select the venue you created. In this example, select WatchGuard Test Venue.
   If you have created a user access group, select the group assigned to your venue.
7. Make sure the Enable Interstitial Page check box is not selected. For information about the Interstitial Page, go to Create a Captive Portal Survey.

8. Click Next.
9. On the Template page, select a template. In this example, select Coco.

10. Click Next.
11. On the New User page, customize your new user page.
    You can drag to add widgets or delete existing widgets.

12. Click Next.
13. Customize the Return User page.
    You can drag to add widgets or delete existing widgets.

8. Click Next.
   Note: If you select the Enable Interstitial Page check box on the Setup page, you will access the Interstitial Page instead of the Landing page.
9. On the Landing Page, customize your landing page.
   You can drag to add widgets or delete existing widgets.
   You can also use a specified external page as the landing page.

9. Click Next.
10. Review your settings.

11. Click Publish, then click Publish again.

Test the Beonic Integration

To test your integration with Beonic:

1. Use a wireless client to connect to the SSID you created in Wi-Fi Cloud.
2. Open a web browser.
   The Beonic splash page appears.
3. Complete the requested information on the splash page.
   The configured landing page or specified external page appears.
4. After you have authenticated, access the Internet through the captive portal.
   

For more detailed wireless client information, select Engage > Registrations. When you click the client status icon, you can view the MAC address and visits activity.