...
- Under the 'Settings' (the gear icon), go to the 'WiFi' menu. Click 'Create New' to create a new network.
- Provide your SSID. Ignore the 'Password' option. Select the right 'Network' option to provide your VLAN you'll use.
- Select 'Manual' in the 'Advanced' option. Select 'Passpoint' in the 'Hotspot 2.0' option, there'll be new options available.
- The 'Venue Name', 'Venue Type', 'Network Type' and 'IP Address Type Availability' options are yours to select.
- Under 'NAI Realm', click 'Add' and fill in the 'Name' (the actual realm) and 'EAP Method' options. Under 'Sub-Methods', add the appropriate inner methods you can use. Click 'Save' to save the NAI realm.
Important: You will not have PEAP as an authentication type in 'EAP Method'. - In the 'Roaming Consortium List' option, add your appropriate RCOIs
- For example, use 'Settlement Free' (or something similar) as 'Name' and '5A03BA0000' in the 'Organization ID' field for the baseline 'Any identity' RCOI - In the '3GPP Cellular Network' options, you can add mobile networks that will be able to use OpenRoaming on your network.
- Under 'Country Name', enter the appropriate country and mobile network description, e.g. 'AT&T United States'.
- Under 'Country Code', enter the international dialcode (although this is not necessary).
- Under MCC and MNC, provide the necessary values for the network specified.
Important: Please note that currently, only a very limited number of mobile carriers on the planet support this option. AT&T for example has two pairs, '310 280' and '310 410', while T-Mobile USA has one: '310 260'. The values can usually be derived from the '@wlan.mncXXX.mccYYY.3gppnetwork.org' username you see on a network, any 0 prefix can be dropped. To date we are aware that AT&T and T-Mobile configure their SIMs to use OpenRoaming if their MCC/MNC pair is advertised, but we're also aware that Swisscom should support read the mobile network wireless offload topic for more information on this. - In the 'Domain List', add your realm name, click 'Add' to add it.
- In the 'Operator Friendly Name', provide your company name. This setting is not your Operator-Name attribute value. There is no ability to set this for the network.
- Set all the other various options for the network.
- Under 'Security Protocol', choose the appropriate WPA Enterprise level (it should preselect 'WPA2 Enterprise').
- In the 'RADIUS Profile', select your RADIUS server you set up at the top.
- Choose the right value for the NAS ID.
- Click 'Add WiFi Network' to create the network.
...