TP-Link Omada - Passpoint Configuration

This article explains how to configure a TP-Link Omada controller to support Cloud4Wi Passpoint (Hotspot 2.0) services. The configuration involves creating a RADIUS profile, setting up the Wireless Network, and enabling specific Passpoint parameters.

1. Configure the RADIUS Profile

First, you need to define the Cloud4Wi RADIUS servers within the Omada controller.

1. Log in to the Omada Controller.

2. Navigate to Network Config > Profiles > RADIUS Profiles.

3. Click on + Create New RADIUS Profile.

4. Enter a Name for the profile (e.g., Cloud4Wi_Radius).

5. Configure the Authentication Server settings:

   • IP Address: Enter the Primary and Secondary RADIUS IP provided in your Cloud4Wi dashboard.

   • Port: 1812

   • Password: Enter the Shared Secret provided by Cloud4Wi.

6. Enable Radius Accounting

7. Enable Interim update

8. Set 120 as Interim update interval

9. Configure the Accounting Server settings:

   • IP Address: Enter the same IPs used for Authentication.

   • Port: 1813

   • Password: Enter the same Shared Secret.

10. Click Save.

2. Configure the Wireless Network (SSID)

Next, create the SSID that will broadcast the Passpoint signal.

1. Navigate to Network Config > Network Settings > WLAN.

2. Click on + Create New Wireless Network.

3. Enter the Network Name (SSID) (e.g., Cloud4Wi_Passpoint).

4. Ensure Guest Network is disabled.

5. Set Security to WPA-Enterprise.

6. In the RADIUS Profile dropdown, select the profile created in the previous step (Cloud4Wi_Radius).

7. Set NAS ID as Default.

3. Configure Hotspot 2.0 (Passpoint) Settings

In this section, you will enable Hotspot 2.0 and configure the parameters required for devices to discover the Cloud4Wi service.

1. On the Wireless Network configuration page, click on Advanced Settings to expand the options.

2. Set WPA Mode to WPA3 Enterprise / Transition mode.

3. Scroll down to the Hotspot 2.0 (Passpoint) section and check the box to expand the options.

4. Enable Hotspot 2.0.

5. Internet Access: Check this box.

6. Scroll down to the NAI Realm List.

7. Click on Add New Realm.

   • In the Realm Name field, enter the realm domain provided by in the Cloud4Wi dashboard(e.g. "<mycomany>.securewifi.io").

   • Select Realm Encoding RFC4282

   • Under EAP Method select EAP-TTLS.

   • Under Authentication param select None-EAP Inner Authentication Type / MSCHAPv2

8. Click Confirm to save the NAI Realm.

Configure Roaming Consortium

If you have a subscription that allows your network to federate with OpenRoaming, you can enable it by adding the Roaming Consortium List (RCOIs)

In the Roaming Consortium List enter the OpenRoaming Organization Identifier (OI) that you want to enable (e.g. 5A-03-BA-00-00 for the settlement-free RCOI).

4. Apply Configuration

1. Review all settings to ensure they match the values in your Cloud4Wi dashboard.

2. Click Apply at the bottom of the page to save the configuration.

The SSID is now configured for Passpoint and ready to accept connections.