Setup a PSK SSO SSID

configure a service area overview service areas are locations where you need nile connectivity as a service configuring a new service area log in to the nile portal in the left navigation, select network setup > service areas click the ' + ' sign to start adding a site name define the site location where you need the nile service find my address enter the exact shipping address where nile will deliver its network elements click the newly created service area and start adding all buildings within that service area enter the information for each building where you need the nile service and save note if some buildings do not have unique addresses, you can drop a pin on the map for reference click the newly defined building and add all floors in that building attach the floor plan to each floor optional after adding floor plans, you can define wi‑fi zones on the floors if applicable wi‑fi zones are custom ssid zones used to serve a specific set of clients configure dhcp overview a dhcp server automatically assigns ip addresses, default gateways, and other network parameters to client devices nile offers cloud dhcp as a service you can use immediately, or you can use your own dhcp server (e g , windows server, infoblox) if you are using your own dhcp server, configure the dhcp relay agent in the nile portal option 1 nile cloud dhcp server log in to the nile portal in the left navigation, select network setup > dhcp click on nile dhcp click on the ' + ' icon and enter the following details pool name enter a name for the dhcp user subnet network enter the subnet default gateway this is auto populated once you enter the network subnet please keep it as is lease time select the lease time default is 1 day dns server please input the ip addresses of your dns server for example 8 8 8 8,8 8 4 4 ip range click on the ' + ' icon to add an ip range specify the start and end ip addresses the fields are pre populated; modify them as required the basic setup is now complete; this covers the most common configuration advanced dhcp reservation enter the device hostname, mac address, and the ip address to reserve for each device options this section is used to configure advanced settings such as ntp server, tftp server, dns server, etc option 2 bring your own dhcp server prerequisites ensure you have the ip addresses of all the dhcp servers you plan to use in your enterprise the nile service block (nsb) acts as a dhcp relay and sends dhcp requests from the first ip address of each subnet (for example, for the employee subnet 192 168 1 0/24, it sends from 192 168 1 1) ensure your dhcp server supports layer‑3 dhcp standalone servers such as windows server and infoblox support this; many routers and firewalls do not verify support before configuring the nile portal ensure bidirectional routing between the dhcp server and your core router/firewall that connects to the nile service gateway configuring dhcp log in to the nile portal in the left navigation, select network setup > dhcp click on the ' + ' icon and enter the following details name specify the name you would like to use for the dhcp server host you can specify all the dhcp server ip addresses here if you have multiple dhcp servers, please specify the other ip/fqdn in the subsequent hosts geo scope select the sites where this dhcp server will be used to assign ip addresses subnet click on the ' + ' sign to add a subnet add all applicable subnets (for example, employee, corporate, and iot) router enter the default gateway ip address for the subnet this address is used by the nile relay agent when obtaining an ip lease from the dhcp server ensure this ip is configured on your dhcp server as the router/default gateway dhcp option (commonly option 3) this is typically the first usable ip in the subnet click save to complete configuration configure segments overview segments function as user defined profiles grouping specific sets of users within an enterprise (e g , corporate, guest) each segment operates similarly to a vlan in traditional networking and encompasses both wired and wireless devices a single segment can extend across multiple locations or be applied enterprise wide configuring segments log in to the nile portal in the left navigation, select network setup > segments click on the ' + ' sign to create a new segment configure the following general info enter a name for the segment service areas select one or multiple sites, buildings, or zones for example, a corporate segment can span all corporate sites, with each site using its own authentication method and subnet authentication for each site, select a custom radius server or the default nile radius from the dropdown note custom radius servers appear only after you configure them under authentication dhcp select the dhcp server to use for each site subnets for each site, select the subnets configured on the selected dhcp server from the dropdown typically, one subnet per segment advanced wired self register allows wired users to self‑register their devices without administrator intervention walled garden define the list of urls accessible before authentication (e g , help pages, login portals) click save to complete configuration setup sso please refer to the saml integration guides of https //shared archbee space/doc/73l6wcaknitvhqocnpzpw/iglgk5otyzuepd5fguppz or https //shared archbee space/doc/x1fvylqjib4umdct8j4dc/3soqm4iwqoqe9vee5mhgi for sso integration setup wireless psk sso ssid the nile access service supports the integration of single sign on (sso) to streamline user authentication and authorization across multiple applications and resources by implementing sso, organizations can leverage their existing identity providers (idps) to centrally manage user credentials and enforce consistent access policies learn more about docid 3qldjh3ggdemuizg1ma2p login to the nile portal and click on the network setup button from the left side navigation pane click on wireless → + sign → select "personal" name please name the ssid name you would like to create security please select the wpa2 or wpa3 personal option passkey please enter the passkey for the ssid please enable the "enable sso" option segments please select the appropriate segment for the above ssid and save changes