Cloud4Wi cloud platform connects with your existing WiFi infrastructure taking control of the guest WiFi experience.
Cloud4Wi is integrated with most of the WiFi vendors in the market and requires the minimum intervention and configuration of the WiFi infrastructure. To see the list of the support WiFi vendors and access to the step-by-step configuration guides visit this article "List of Supported access points and vendors"
Splash Page configuration
Cloud4Wi support a single URL for all customers, to simply the network configuration and maintenance
- Unified Splash Page URL: https://splashportal.cloud4wi.com/
- Unified Redirect Page URL: https://splashportal.cloud4wi.com/
In order to support advanced capabilities such as Fallback experience and Access Point Mapping, we strongly suggest to use your custom Splash Page URL that you can find in the Cloud4Wi dashboard in General Settings > WiFi.
Note: The custom Splash Page URL is being rolled out gradually. If you haven't seen it appear in your dashboard yet, that's why! Check back later, or contact our support team to request a notification as soon as it's enabled for your account.
Walled Garden
In order to function properly, certain Cloud4Wi capabilities require the configuration of the Walled Garden options. In particular, you need to add specific domains or IP addresses to the Walled Garden list to enable
- CDNs (mandatory)
- Social Login (optional if you are using social login or external IdPs)
RADIUS Servers
To successfully utilize Cloud4Wi services for your WiFi network, you must configure your network's Access Points to communicate with the Cloud4Wi RADIUS servers.
⚠️ Action Required: Migration to New RADIUS Servers
Cloud4Wi is committed to enhancing the security, stability, and feature set of your WiFi services. We are implementing an updated RADIUS infrastructure for both Guest WiFi and Passpoint/MultiPKS services.
The new infrastructure provides enhanced capabilities and is required for many of our advanced features, including:
User Groups functionality for granular access control.
Fallback experience to connect users even on APs not currently in your inventory.
Missing AP mapping improvements for better network management.
The migration to the new RADIUS servers for both Guest WiFi and Passpoint/MultiPKS requires the use of custom UDP Ports and a unique Shared Secret specific to your account.
Migration Deadline: All customers using Legacy Guest WiFi servers must complete this migration before May 30, 2026.
How to Find Your Settings: Your custom UDP Ports and Shared Secret are available on your Cloud4Wi Dashboard under General Settings on the WiFi tab, provided the new service has been enabled for your account.
Phased Rollout: The new RADIUS with custom ports has been rolled out gradually.
Action for Disabled Customers: If you do not see your custom ports and secret on the General Settings page, please contact our support team to request a speedier migration and activation.
RADIUS Server Configuration Details
Cloud4Wi uses two main types of RADIUS servers, each serving a different purpose.
1. Guest WiFi (Captive Portal) Servers
These servers are used for networks utilizing a Captive Portal for user authentication.
Please configure both the Primary and Secondary servers for redundancy.
| Parameter | New Guest WiFi | Legacy Guest WiFi |
|---|---|---|
| Primary IP Address | 54.216.93.188 | 54.247.117.188 |
| Secondary IP Address | 34.249.131.154 | 79.125.111.180 |
| Auth Port (UDP) | Custom Port (Check Dashboard) | 1812 |
| Acct Port (UDP) | Custom Port (Check Dashboard) | 1813 |
| Shared Secret | Custom Secret (Check Dashboard) | Provided during Onboarding |
Note: For the New Guest WiFi server, you must check your Cloud4Wi Dashboard in the General Settings > WiFi Tab for your unique, custom Ports and Shared Secret. The ports are no longer the default 1812/1813. We are rolling out the new custom UDP Ports gradually. If you don't see it in your dashboard yet, please check back soon!
2. Passpoint/MultiPKS Servers
These servers are used for Passpoint (Hotspot 2.0) and MultiPKS (Private Pre-shared Key) authentication. While the IP addresses remain the same, the connection method is changing to use UDP with custom ports.
| Parameter | New | Legacy |
|---|---|---|
| Primary IP Address | 52.48.102.108 | 52.48.102.108 |
| Secondary IP Address | 34.252.97.217 | 34.252.97.217 |
| Auth Port (UDP) | Custom Port (Check Dashboard) | 1812 |
| Acct Port (UDP) | Custom Port (Check Dashboard) | 1813 |
| Shared Secret | Custom Secret (Check Dashboard) | Provided during Onboarding |
Important: The Passpoint/MultiPKS service is transitioning to use a dedicated, custom UDP port and Shared Secret for each customer. Please find your specific ports and secret in the General Settings > WiFi Tab of your Cloud4Wi Dashboard.
Firewall rules
It is necessary to enable traffic toward and from the Cloud4Wi servers. In particular, the traffic must be allowed for all the RADIUS Servers ID Addresses and Ports. If you are using the RADIUS server with custom ports, make sure to allow on the firewall your custom ports on the RADIUS IP addresses.
| IP address | Ports |
| 54.247.117.188 | TCP: 80, 443 |
| 79.125.111.180 | TCP: 80, 443 |
Network Inventory
Architecture
Cloud4Wi, a cloud-based platform, interacts with WiFi networks using standard protocols like RADIUS.
WiFi networks can take various forms, from simple standalone access points to cloud-based managed systems (like Cisco Meraki) and solutions requiring on-premise or remote controllers (like Cisco WLC). The way Cloud4Wi interacts with these networks depends on the WiFi vendor’s interfaces and is documented in the step-by-step user guides provided.
Here’s a simplified workflow demonstrating how the Cloud4Wi system communicates with the WiFi infrastructure to provide guest WiFi access based on Captive Portals.
In the case of a cloud-managed network, the workflow above may differ slightly in certain steps, particularly those involving the use of server-to-server APIs.