Configure OpenRoaming

Before you begin

Before proceeding with configuring OpenRoaming for your wireless network, ensure that your network meets the prerequisites described in Prerequisites for OpenRoaming. To set up OpenRoaming in Cisco Spaces, click the OpenRoaming tile on the Cisco Spaces dashboard. The OpenRoaming dashboard is displayed.


Note

You can access OpenRoaming through these options:

In the Home Page, go to Visitor Onboarding & Experience and select OpenRoaming.

In the Feature Apps, select OpenRoaming, and click Open App.

Figure 1. Cisco Spaces Dashboard: OpenRoaming Tile

Note

If this is the first time setup, when the user navigates to Setup, the Terms and Conditions dialog appears. The user must click I Agree to open the OpenRoaming Setup window.


Note

If OpenRoaming was configured earlier, users see the OpenRoaming home or reports page, which displays the reports.


Note

If the user accepted the OpenRoaming Terms and Conditions but setup is incomplete, navigating to the OpenRoaming app displays the Get Started page, which shows the Setup and Sample Dashboard options.

To configure OpenRoaming, perform the following tasks:

Procedure

Step 1

Create an OpenRoaming profile.

Step 2

Create a hotspot-enabled connector.

Step 3

Configure the network controller.

Step 4

Test the OpenRoaming network.

This chapter contains the following sections:

Create an OpenRoaming Profile

An OpenRoaming profile contains information about the network SSID and specifies which user identities are allowed to access the guest network. You can also configure carrier offload in the OpenRoaming profile. To create an OpenRoaming profile, perform the following tasks:

Procedure

Step 1

Set Access Policy.

  1. In the OpenRoaming window, choose > Setup.

    The OpenRoaming Setup window is displayed.

  2. In the OpenRoaming Profiles section, click Create OpenRoaming Profile.

    The Create an OpenRoaming Profile configuration wizard is displayed.

  3. Click Proceed.

  4. Under Access Policy, specify who can access your OpenRoaming network.

    The options available are:

    • Accept all authenticated users: This is the default option.

    • Accept only users who provide their identity: An example of an accepted identity is a real identity, such as an email ID.

    • Accept users with specified identity types: Choose the desired identity types from the list that is displayed. Enable the Require real identity knob if you want users to enter their real identities.

      The identity types chosen here is displayed adjacent to their real or anonymous identity settings, in a table next to this list.

    • Accept only your users: If you choose this option, you will need to be added as an identity provider.

  5. Under Preferred Credentials, choose the desired option from those listed below by clicking the corresponding radio button:

    • I do not have preferred credentials

      Note

       

      If you have selected Accept only your users in the Access Policy section, this option will be disabled.

    • I have preferred credentials, which I want to use: If you choose this option, you must select a domain from the list of domains that are displayed or click Add a Custom Domain.

  6. Click Continue.

    The SSID Details window is displayed.

Step 2

Pick an SSID and provide configuration details.

  1. In the SSID Details section, enter the SSID name in the corresponding field. This is the SSID that will be broadcast for OpenRoaming.

    Note

     

    If the name that you enter is an existing SSID, ensure that the SSID name is an exact match of what is in the network.

  2. (Optional) In the Advanced section, you can choose among the following options by clicking the corresponding radio button:

    • Default Status: Choose between Enable or Disable by clicking the corresponding radio button. The default option is Enable.

    • Fast Transition (802.11r): Choose between Adaptive, Enable or Disable by clicking the corresponding radio button. The default option is Adaptive.

    The Create an OpenRoaming Profile configuration wizard is displayed.

  3. Click Continue.

    The Carrier Offload window is displayed.

Step 3

(Optional) Configure carrier offload.

You can leverage your Wi-Fi network to provide voice and data services to mobile carrier subscribers on your Wi-Fi network. This configuration is optional.

Before you configure carrier offload, ensure that the following prerequisites are in place:

  • You must have an existing relationship with a mobile carrier or service provider.

  • You must have configured the settlement provider with the mobile carrier or service provider.

  1. Use the Allow Carrier Offload knob to enable the Carrier Offload settings.

    A table listing the various carriers, along with their corresponding details such as the Carrier, Offloading Partner, Realms, and MNC/MCC settings, is displayed.

  2. Based on your existing relationships with various carriers, you can select from the carriers that are available in the table.

  3. Click Continue.

    The Review Your Configuration window is displayed.

Step 4

Review and confirm the OpenRoaming profile configuration.

After you have configured the access policy, SSID, and the optional carrier offload, you can review your OpenRoaming profile configuration and modify it if required before saving these settings.

  1. In the Review Your Configuration window, verify the settings and do one of the following:

    Note

     

    By default, the OpenRoaming profile name is the same as the SSID name. You can choose to retain the OpenRoaming profile name as the SSID name or modify the profile name.

    • If you are satisfied with the configuration, proceed with 4.b.

    • If you have to make changes, click the Edit link next to the section whose configuration has to be modified and make changes. Continue to click Continue until you arrive at the Review Your Configuration window. On successful modification of the OpenRoaming Profile configuration, proceed with 4.b.

  2. Click Done to complete the creation of the OpenRoaming profile.

    A success message appears briefly, and a confirmation window is displayed.

  3. Click Continue OR Setup or close the configuration wizard.

Step 5

(Optional) Partner app activation support in open roaming.

Partner app activation support applies when a carrier has published a partner app. If an OpenRoaming profile is enabled with such a carrier and the partner app is not activated, a notification is shown to activate the partner app. Until the partner app is activated, the controller cannot be configured to the profile.

Note

 

If you have not enabled carrier offload Step 3, this support is not required.

  1. Warning mesaage diplayed on screen.

  2. Click on click here to activate link.

  3. Click Activate.

Edit an OpenRoaming Profile

Procedure

Step 1

On the OpenRoaming window, choose > Setup.

The OpenRoaming Setup window is displayed.

Step 2

In the OpenRoaming Profiles section, in the Action column, click the three-dot icon corresponding to the profile that you want to update.

Note

 

To view the existing configuration for a profile, click the profile name. A window displaying the configuration details for the selected OpenRoaming profile is displayed.

Step 3

Click Edit Profile.

The Create an OpenRoaming Profile configuration wizard is displayed.

Step 4

Click Edit link next to the section whose configuration has to be modified and make changes.

Step 5

Click Continue until you arrive at the Review Your Configuration window.

A summary of the OpenRoaming profile modifications you made is displayed.

Step 6

Click Done.

A success message is displayed briefly followed by a confirmation window.

Step 7

Click Continue OR Setup or close the configuration wizard.

Delete an OpenRoaming Profile

Procedure

Step 1

On the OpenRoaming window, choose > Setup.

The OpenRoaming Setup window is displayed.

Step 2

In the OpenRoaming Profiles section, in the Action column, click the three-dot icon corresponding to the profile you want to delete.

Step 3

Click Delete Profile.

The warning message is displayed.

Step 4

Click Delete.

A message confirms that the operation was successful.

Enable a Hotspot on the Cisco Spaces Connector

When you add a hotspot on the Cisco Spaces Connector, it leads to the installation of a new docker. You can enable a hotspot on the Cisco Spaces Connector either during the initial configuration of the connector or later using the procedure outlined here. For information on configuring a connector, go to the Cisco Spaces Connector Configuration Guide.

If you have already configured a connector, you can see it listed in the Hotspot-enabled Connectors section on the OpenRoaming Setup window.
Figure 2. Hotspot-enabled Connectors

Depending on your deployment (Cisco AireOS or Catalyst or Cisco Meraki), follow the appropriate steps to enable the hotspot on the Cisco Spaces Connector after it has been created.

Enable a Hotspot on the Cisco Spaces Connector (Cisco AireOS or Cisco Catalyst Network)

Before you begin

  • Deploy and activate Cisco Spaces Connector 3.x.

  • Ensure that Hotspot Service is added to the connector.

Procedure

Step 1

In Cisco Spaces, go to Setup > Wireless Networks.

Step 2

In the Connect your wireless network window, click Connect via Spaces Connector.

Step 3

Click View Connectors.

Step 4

Click the connector name you want to configure.

Step 5

Click Generate Token.

Step 6

In the Token window, copy the token.

Step 7

Click Add Controller.

  1. Hotspot Service: https://www.cisco.com/c/en/us/td/docs/wireless/spaces/connector/config/b_connector_30/m_hotspot-services.html#configure-hotspot-service.

  2. AireOS Controller: https://www.cisco.com/c/en/us/td/docs/wireless/spaces/connector/config/b_connector_30/m_controller.html.

  3. Catalyst 9800 Controller: https://www.cisco.com/c/en/us/td/docs/wireless/spaces/connector/config/b_connector_30/m_ewlc_9800.html.

View Connector Details (Cisco AireOS or Catalyst Network)

Procedure

Step 1

In the OpenRoaming window, choose > Setup.

The OpenRoaming Setup window is displayed.

A list of all Cisco Spaces Connectors with their status is displayed in the Hotspot-enabled Connectors section.

Step 2

Under the AireOS/Catalyst tab, click a Connector name.

The Connector Details window with details of the Connector's configuration is displayed.

Step 3

Close the window and return to the OpenRoaming Setup window.

View Hotspot Token for a Cisco Spaces Connector (Cisco AireOS or Catalyst network)

Procedure

Step 1

In the OpenRoaming window, choose > Setup.

The OpenRoaming Setup window is displayed.

A list of all Connectors, along with their status, is displayed in the Hotspot-enabled Connectors section.

Step 2

Under the AireOS/Catalyst tab, click the three-dot icon in the Action column corresponding to the connector you want to update.

Step 3

Click View Token.

The OpenRoaming – View Token window is displayed.

Step 4

Click Copy to use the token for a Connector setup.

Step 5

In the Cisco Spaces Connector GUI, paste this token in the Configure Token window.

Note

 

After the token is saved, the hotspot information is downloaded to the Connector. After you refresh the window, you will find a Hotspot tab next to the Connector tab. In the Hotspot tab, verify the status of the hotspot-enabled Connector. If the status is Running, it indicates that the OpenRoaming hotspot has been successfully enabled for the Cisco Spaces Connector.

Note

 

The token can be configured on two connectors only when they are part of an HA pair.

If you configure the same token on a third connector, Hotspot as a Service does not work.

Step 6

Click Close to return to the OpenRoaming Setup window.

Manage Connector (Cisco AireOS or Cisco Catalyst Network)

Procedure

Step 1

In the OpenRoaming window, choose > Setup.

The OpenRoaming Setup windows is displayed. A list of all Connectors, along with their status, is displayed in the Hotspot-enabled Connectors section.

Step 2

Under the AireOS/Catalyst tab, click the three-dot icon in the Action column corresponding to the connector you want to update.

Step 3

Click Manage Connector.

The Manage Connector window is displayed.

Step 4

Under Services, choose the required action from the available service sections:

  • Enable Debug Mode

  • Disable Debug Mode

  • Upload Logs to Cloud

Step 5

Close the window and return to the OpenRoaming Setup window.

View and Manage all Connectors

Procedure

Step 1

In the OpenRoaming window, choose > Setup.

Step 2

In the Hotspot-enabled Connectors section, click View & Manage All Connectors.

The Cisco Wireless Connectors window appears and shows a list of connectors.

Step 3

In the Action column, click the three-dot icon to view the token, manage the connector, and configure hotspot settings.

What to do next

In the OpenRoaming Setup, perform these actions to filter the connectors.

  • Search: Enter the connector name.

  • Status: Select Active or InActive from the drop-down list.

Enable a Hotspot on the Cisco Spaces Connector (Cisco Meraki network)

Before you begin

Ensure that the Cisco Meraki setup is configured as required in Cisco Spaces.

Ensure that the OpenRoaming profile intended for Meraki networks exists.

Activate the required partner app. If the partner app is not activated, SSID configuration is blocked in the Meraki OpenRoaming configuration flow.

Procedure

Step 1

In the OpenRoaming window, choose > Setup.

Note

 

If you have completed the OpenRoaming profile configuration, click Continue OR Setup in the configuration wizard to proceed.

The OpenRoaming Setup window is displayed.

A list of all the Cisco Spaces Connectors, along with their status is displayed in the Hotspot-enabled Connectors section.

Step 2

Under the Meraki API tab, click the Set Up link.

For information on configuring your Cisco Meraki setup, refer to the Cisco Spaces Configuration Guide.

Step 3

After you configure the Cisco Meraki setup.

Step 4

Under the Meraki API tab, the succsesful window is diplayed.

Figure 3. Meraki API

Step 5

For more information refer to Configure Cisco Meraki Network.

Configure Network Controller

Depending on your wireless network, follow the corresponding procedure to associate an OpenRoaming profile with the controller and configure the network:


Note

In the OpenRoaming Setup > Hotspot-enabled Connector, click View & Manage All Connectors to open the connector management screen.

Configure Cisco AireOS or Cisco Catalyst Network

Before you begin

Before you configure the Cisco AireOS or Cisco Catalyst wireless network, you must configure the SSID and AAA policy.

Ensure Connector 3.x Hotspot-as-a-Service is enabled.

Confirm that the AireOS or Catalyst 9800 controller is configured using the Connector 3.x flow.

Make sure the controller appears in OpenRoaming Setup.

Procedure

Step 1

In the OpenRoaming window, choose > Setup.

The OpenRoaming Setup page is displayed.

Note

 

If you have completed the OpenRoaming Profile configuration, click Continue OR Setup in the configuration wizard to proceed.

In the Network configuration section, under the Cisco Wireless Controllers tab, a list of all the Cisco AireOS and Cisco Catalyst series controllers appears with details such as the Controller status and associated Connectors.

Step 2

In the Action column, click the three-dot icon corresponding to the controller you want to configure.

Step 3

Click Configure Controller.

The Configure Controller window is displayed.

Step 4

Under Generate Configuration, select the OpenRoaming profile from the drop-down list.

If a non-default policy profile or policy tag is used, you must copy only the Access Network Query Protocol (ANQP) server settings and apply it to the wireless policy profile. Ensure that the policy tag uses the WLAN configured for OpenRoaming, and is mapped to the configured wireless policy profile.

Note

 

When an OpenRoaming profile with carrier offload is enabled and a published partner app exists, the system displays a notification prompting activation of the partner app. Until the partner app is activated, the controller cannot be configured to the profile.

Step 5

Click Continue.

The Configure Controller window is displayed.

Step 6

Choose the controller type between AireOS Controller and Catalyst 9800 Wireless Controller.

Step 7

In the WLAN ID field, enter a WLAN ID if your existing network is based on a Cisco AireOS Controller. Specify the WLAN name if it is based on a Cisco Catalyst Controller.

Step 8

In the Connector IP Address field, enter the connector IP address.

Step 9

Click Show Confirguration.

Step 10

Click Close.

The OpenRoaming Setup window is displayed.

Configure Cisco Meraki Network

Before you begin

To use OpenRoaming on your Cisco Meraki network through Cisco Spaces, your network must meet the following prerequisites:

  • All access points in the Cisco Meraki network need to be on R28.5 or later versions of the Cisco Meraki firmware.

  • There needs to be at least one unconfigured SSID and it should be disabled.

  • Contact the Cisco Meraki support team to activate OpenRoaming on your network.


Note

  • If you do not meet one or more of the above prerequisites, you can manually activate OpenRoaming on your Meraki network by installing a Cisco Spaces Connector. For more information, refer to the Cisco Spaces Setup Guide for OpenRoaming.

  • Configuration of Cisco Meraki networks that use templates is not supported.

Procedure

Step 1

In the OpenRoaming window, choose > Setup.

The OpenRoaming Setup window is displayed.

Step 2

In the Network configuration section, click Configure meraki network(s) for openroaming profile.

Step 3

Choose an organization from the drop-down list.

Figure 4. Meraki Network

Step 4

Choose the Cisco Meraki networks for which you want to enable OpenRoaming.

Note

 

You can select multiple networks from the list.

Step 5

Click Next.

Step 6

From the drop-down list, select the OpenRoaming profile that needs to be applied on the Cisco Meraki network.

Step 7

Click Next.

The Configure OpenRoaming for Meraki window is displayed.

Step 8

Review the Configuration Summary.

If you would like to make any changes, click Back to navigate to the previous windows.

Step 9

Click Configure to complete configuration of the OpenRoaming profile on the chosen Cisco Meraki networks.

The OpenRoaming Setup page appears with a success message. Under the Meraki Networks tab, a confirmation message is displayed along with the count of Cisco Meraki networks configured with OpenRoaming profiles.

Edit Cisco Meraki Network

Procedure

Step 1

In the OpenRoaming window, click Set Up OpenRoaming or choose > Setup.

The OpenRoaming Setup window is displayed.

Note

 

Click OpenRoaming Activation Status to view the status of the configured Cisco Meraki networks.

Step 2

In the Network configuration section, click the Meraki Networks tab.

Step 3

Click the SSID corresponding to the Cisco Meraki network that you would like to update.

The Edit Configuration window is displayed.

Step 4

Click Update after making the needed updates.

The OpenRoaming Setup window is displayed with a success message.

View and manage all controllers

Procedure

Step 1

In the OpenRoaming window, choose > Setup.

Step 2

In the Hotspot-enabled Connectors section, click View & Manage All Controllers.

The Cisco Wireless Controller window appears and shows a list of controllers.

Step 3

In the Action column, click the three-dot icon to configure controller.

What to do next

In the Cisco Wireless Controller tab, perform these actions to filter the controllers.

  • Search: Enter the controller name.

  • Controller Status: Select Active or InActive from the drop-down list.

  • Openroaming Profile Status: Select Configured or Not configured from the drop-down list.

Test Your OpenRoaming Network

You can test your OpenRoaming network configuration through the following methods:

Procedure

  • Cloud/Social: To use this method, download the OpenRoaming mobile app from the iOS App Store or Google Play Store to your mobile device.

  • Device Manufacturer: Use this method to test your OpenRoaming network natively on a Samsung or Google mobile device.

  • Other Methods: In addition to the above two methods, you can also test your OpenRoaming network using the following two options:

    • Carrier Offload: If you have set up a Carrier Offload solution, a mobile phone from the supported carrier will automatically get attached to your OpenRoaming network.

    • Cisco Spaces SDK: If you have integrated your brand’s mobile app with Cisco Spaces SDK, a mobile phone with your mobile app will automatically get attached to your OpenRoaming network.

    For more information about Cisco Spaces SDK, see https://developer.cisco.com/docs/dna-spaces-sdk/. Log in using your Cisco credentials, if prompted.

View OpenRoaming Reports

Procedure

To view your OpenRoaming reports, click > Home.

The following reports are available in the OpenRoaming dashboard:

  • Unique Devices

  • Devices by IDP

  • Devices by Manufacturer

  • Data Usage

  • Average Visit Duration

  • Data Consumed per User

  • Connections per Day

  • Connections per Hour

Communications, services, and additional information

  • To receive timely, relevant information from Cisco, sign up at Cisco Profile Manager.

  • To get the business impact you’re looking for with the technologies that matter, visit Cisco Services.

  • To submit a service request, visit Cisco Support.

  • To discover and browse secure, validated enterprise-class apps, products, solutions, and services, visit Cisco DevNet.

  • To obtain general networking, training, and certification titles, visit Cisco Press.

  • To find warranty information for a specific product or product family, access Cisco Warranty Finder.

Cisco Bug Search Tool

Cisco Bug Search Tool (BST) is a gateway to the Cisco bug-tracking system, which maintains a comprehensive list of defects and vulnerabilities in Cisco products and software. The BST provides you with detailed defect information about your products and software.

Documentation feedback

To provide feedback about Cisco technical documentation, use the feedback form available in the right pane of every online document.