Setup 802.1x SSID

configure a service area overview service areas are locations where you need nile connectivity as a service configuring a new service area login to the nile portal and click on the network setup button from the left side navigation pane click on service areas navigate to dhcp and click on the '+' sign to start adding a site name this is where you will define the site location where you need the nile service find my address this is where nile will ship its network elements it is important to input the exact address here for shipping click on the newly created service area and start adding all the buildings under that service area please input information for each of the buildings where you need the nile service and save it note sometimes all the buildings won't have a different address, so you can simply drop the pin on the map for reference click on the newly defined building and start adding all the floors in that building attach the floor plans to each of the floors optional once the floor plan has been added, you can also define wi fi zones on the floors if applicable wi fi zones are custom ssid zones used to service a particular set of clients configure dhcp overview a dhcp server is a network server that automatically provides and assigns ip addresses, default gateways, and other network parameters to client devices nile provides cloud dhcp as a service which can be used by the customer right away or the customer can choose to use their own dhcp server like windows, infoblox etc in case, you are using your own dhcp server, you can configure a dhcp relay agent on the nile portal option 1 nile cloud dhcp server login to the nile portal and click on the network setup button from the left side navigation pane click on dhcp click on nile dhcp click on the '+' icon and enter the following details pool name specify the name you would like to use for the dhcp user subnet network specify the subnet default gateway this gets auto populated once you fill in the network subnet please keep is as it is lease time select the lease time default is 1 day dns server please input the ip addresses of your dns server for example 8 8 8 8,8 8 4 4 ip range please specify the start and the end date it is auto populated please change as needed you are now done with the basic setup which is the most common advanced dhcp reservation please input the host name, mac address and p address for the devices you want to reserve and ip address for options this is used for advanced option like ntp server, tftp server etc option 2 bring your own dhcp server prerequisites ensure that you have the ip address of all the dhcp servers you want to use in your enterprise ensure that there is a bi directional route from the dhcp server to your core router/firewall which is going to connect to the nile service gateway configuring dhcp login to the nile portal and click on the network setup button from the left side navigation pane click on dhcp click on the '+' icon and enter the following details name specify the name you would like to use for the dhcp server host you can specify all the dhcp server ip addresses here if you have multiple dhcp servers, please specify the other ip/fqdn in the subsequent hosts geo scope select the sites where this dhcp server will be used to assign ip addresses subnet click on the " sign add all the subnets for employees, corporate, iot etc router this ip will be consumed by the nile relay agent when requesting an ip from the dhcp server ensure that you have configured this ip address as a dhcp option on your dhcp server this is typically the first ip of the subnet click 'save' to complete the configuration configure authentication overview nile supports radius for authentication radius (remote authentication dial in user service) is a client server protocol and software that enables remote access servers to communicate with a central server to authenticate dial in users and authorize their access to the requested system or service prerequisites ensure that you have the ip address of all the radius servers you want to use in your enterprise ensure that there is a route from the radius server to your core router/firewall which is going to connect to the nile service gateway identify the shared secret which will be configured on the nile portal configuring authentication login to the nile portal and click on the network setup button from the left side navigation pane click on authentication click on the "+" sign under the authentication section to configure the radius server name specify the name you would like to use for the radius server port specify the port used by the radius server geo scope select the locations which will use this radius server to authenticate the clients host specify the ip address of the primary radius server under host 1 host2 and later are used as secondary radius servers for failover shared secret enter the secret key here wired mac auth (optional) if the radius server is also going to authenticate (mac auth bypass) the wired devices, you can check this box guest portal url (optional) this is the static url you can input for a radius server if you don't input the url here, nile will use the dynamic url received from the radius server click 'save' to complete configuration configure segments overview segments are like profiles in which you can define each set of users (e g , corporate, guest, etc ) in your enterprise consider one segment as one vlan in the traditional networking terms, and it includes all your wired and wireless devices one segment can span across multiple or all of your locations configuring segments login to the nile portal and click on the network setup button from the left side navigation pane click on segments click on the "+" sign general info please name the segment you would like to create service areas this is where you can select one site or multiple sites, buildings or zone for example a corporate segment will span across all the corporate sites with each having their own authentication method and subnet authentication please select the appropriate options here radius server, click through, or sponsored email click through and sponsored email options will be shown only after you configure the "guest portal" under the authentication section dhcp please select the dhcp server that you want to use for each of the locations subnets when you click on the drop down menu, all the subnets configured in the dhcp server will be displayed select all the subnets that will be used in this segment in normal cases, it is one subnet per segment click on save advanced wired self register this feature is a part of our unique psk feature where users can onboard their own devices with a unique psk this requires sso setup as a pre requisite setup wireless 802 1x ssid the nile access service supports industry standard 802 1x authentication for both wired and wireless clients by integrating with your existing radius infrastructure, such as active directory, the nile platform ensures only authorized devices and users can access network resources learn more about 802 1x wired & wireless docid\ la50uqubaltrcinfc5ygx authentication in the nile access service login to the nile portal and click on the "settings" tab from the left side navigation pane click on wireless → + sign → select "enterprise" name please name the ssid name you would like to create security please select the wpa2 enterprise or wpa3 enterprise option from the list below segments if you had configured radius authentication for a particular segment, that segment will be displayed under the drop down menu please select the appropriate segment for the above ssid and save changes