Ericsson Enterprise Wireless Solutions - Passpoint

Technical Guide: Passpoint Configuration with Ericsson Devices (NetCloud by Cradlepoint) and Cloud4Wi

This guide illustrates the configuration of Passpoint on Ericsson Enterprise Wireless Solutions routers managed via NetCloud by Cradlepoint, in preparation for integration with the Cloud4Wi solution.

Prerequisites:

• Firmware: Version 7.25.21 (2025-03-03 FR2) or newer.
• NetCloud Manager Access: Credentials to access the NetCloud Manager portal.
• Basic Knowledge: Familiarity with NetCloud Manager interfaces and wireless networking concepts.

Overview of Passpoint Configuration in NetCloud Manager

Passpoint configuration on NetCloud by Cradlepoint is divided into two main areas, which will then be associated with existing or newly created WLANs:

1. Passpoint Profile Configuration: Creating and setting up the Passpoint (Hotspot 2.0) profile, which will then be linked to the WLANs.

1. WLAN Configuration: Defining the Wi-Fi networks (WLANs) associated with RADIUS and encryption settings.

We will start with the creation and configuration of the Passpoint Profile.

Phase 1: Passpoint Profile Configuration

This section describes how to create and configure the Passpoint (Hotspot 2.0) profile, which will define the basic parameters for Passpoint authentication.

1. Navigate to the Passpoint Configuration Panel:

   • Log in to your NetCloud Manager account.
   • From the main dashboard, select the specific router or the group of routers where you intend to apply the configuration.
   • Click on the "Configuration" tab in the top bar.
   • From the list of options on the left, under the "IDENTITIES" section, click on "Passpoint Profiles"
     
     
     
      

2. Create and Configure the Profile:

   • Click on "Add" to create a new Passpoint profile.
   • In the profile configuration window, enter the following parameters:

   General:

   • Profile Name: Cloud4Wi
   • Access Network Type: Free public network
     

    

3. Domain Names: 

   • Click on "Add".
   • Enter the Domain Name adopted on the Cloud4Wi platform, for example: yourdomain.securewifi.io
     
     

    

4. NAI Realms:

   • Click on "Add".
   • Enter the NAI Realm adopted on the Cloud4Wi platform, for example: yourdomain.securewifi.io

   • Ensure that Encoding is set to IETF RFC 4282 Encoding.
      

     

   EAP Methods: (configure the supported authentication methods)

   EAP-TTLS:

   • Ensure it is enabled.
   • Verify or configure the following Auth Parameters (Inner Methods):
     • Non-EAP Inner: MSCHAPV2
     • Non-EAP Inner: Certificate
     • Non-EAP Inner: MSCHAP
   • Ensure Credential is set to: MSCHAPV2
     
     
5. EAP-TLS:
   • Ensure it is enabled.
   • Verify or configure the following Auth Parameters (Inner Methods):
     • Non-EAP Inner: MSCHAPV2
     • Non-EAP Inner: MSCHAP
       
       
        

6.  

   Operator Names:

   • Click on "Add".

   • Add the operator name in the format: eng:CLOUD4WI (where eng indicates the English language).

   • Once the Passpoint profile configuration is complete, click on "Save".
     
     

Phase 2: SSID (WLAN) Configuration for Passpoint

This section describes how to configure the SSID (WLAN) and associate it with the newly created Passpoint profile, as well as set up the RADIUS parameters for authentication and accounting.

1. Navigate to WLAN Configuration:

   • In the left-hand navigation menu of NetCloud Manager, under the "NETWORKING" section, click on "Local Networks".
   • Here you will find configurations for the Wi-Fi interfaces (usually WiFi Radio #1 for 2.4 GHz and WiFi Radio #2 for 5 GHz). The configuration must be identical for both bands.
   • Click on "Edit" for the WLAN you intend to configure (or create a new WLAN if necessary).

2. Basic SSID Configuration:

   • WiFi Name (SSID): Enter your desired SSID name
   • Security Mode: Select WPA3 Enterprise.

3. Association to Passpoint Profile:

   • Within the WLAN configuration, locate the "Passpoint Profile" section.
   • From the drop-down menu, select the Passpoint profile you created previously, i.e., Cloud4Wi.

4. RADIUS Configuration (Authentication and Accounting):

   • In the authentication section, ensure you select "RADIUS Server" as the authentication method.

   • For Authentication (Authentication Server):

     • Primary IP: 52.48.102.108
     • Secondary IP: 34.252.97.217
     • Port: Custom Port (Check Dashboard)
     • Shared Key: Custom Secret (Check Dashboard)
        

   • For Accounting (Accounting Server):

     • Primary IP: 52.48.102.108
     • Secondary IP: 34.252.97.217
     • Port: Custom Port (Check Dashboard)
     • Shared Key: Custom Secret (Check Dashboard)
     •  

   • Save all changes to the WLAN configuration.
     
     
     
     
      

     
     

Next Steps:

After saving the configuration, NetCloud Manager will apply the changes to the selected router or router group. Monitor the deployment status to ensure that the configuration has been applied successfully. 

Parameters for the Solution

The parameters to use to integrate the device with the Solution are described in the following document:

Intro to WiFi network configuration