Cisco Wireless LAN Controllers (WLC) provide centralized management for enterprise wireless networks. Integrating Spotipo's external web authentication with your Cisco WLC adds email capture, social login, and paid WiFi access capabilities while maintaining Cisco's enterprise-grade security and performance standards.
This guide walks you through configuring your Cisco WLC to use Spotipo as an external captive portal. The setup involves creating a site in Spotipo, configuring RADIUS authentication and accounting servers, setting up pre-authentication ACLs, and enabling external web auth on your WLAN.
What you'll accomplish:
Create a Cisco WLC site in Spotipo and generate RADIUS credentials
Configure RADIUS authentication and accounting servers on Cisco WLC
Set up pre-authentication ACL for portal and social login access
Enable external web authentication on your guest WLAN
What you'll need:
Cisco Wireless LAN Controller with admin access
Active Spotipo account (start free trial)
Knowledge of your WLAN configuration and security settings
Add a Site
Add a new site by clicking on the Add New Site button in the drop down menu on top right.
Select site type as Cisco WLC, enter a name to identify and Save.
Add WLC controller to your site
Under the WLC tab on your account, press the add WLC button and give a name for your WLC controller.
Provide a name to identify your controller and press Save.
Spotipo will create a set of credentials for your controller, please note them down for future reference.
Configure Spotipo Radius Authentication servers for your Cisco WLC
Go to Security -> RADIUS -> Authentication, add new RADIUS Authentication Servers and enter IP Address, Port and Shared Secret.
IP Address: 34.77.150.10
Port: 1812
Shared Secret: Generated in the previous Step.
Optionally, you can add a backup Radius server as well. Please use settings below.
IP Address: 35.205.248.64
Port: 1812
Shared Secret: Generated in the previous Step.
Configure Spotipo Radius Accounting servers for your Cisco WLC
Go to Security -> RADIUS -> Accounting, add new RADIUS Accounting Servers and enter IP Address, Port and Shared Secret.
IP Address: 34.77.150.10
Port: 1813
Shared Secret: Generated in the previous Step.
Optionally add a backup server with settings,
IP Address: 35.205.248.64
Port: 1813
Shared Secret: Generated in the previous Step.
Configure pre-authentication ACL for Spotipo in your CISCO WLC
Go to Access Control Lists and add a new IPv4 Access Control List (or a new FlexConnect ACL if you’re using FlexConnect) and name it guest_preauth.
Hover your mouse’s pointer on the blue arrow and select Add-Remove URL.
Now add below URLs.
logme2wifi.com facebook.com fbcdn.net akamaihd.net facebook.net
Configure WebAuth to use Spotipo as External Portal
Go to Web Auth and select Web Login Page. Select External as the Web Authentication Type. Use below details to fill in.
Select the Web Authentication type as External
Use as the redirect URL after login
https://logme2wifi.com/ciscowlc/postauth/
Use the Splash page URL generated in your spotipo account as External Web Auth URL
Configure WLAN settings on your Cisco WLC for spotipo
Go to WLANs and open your WLAN profile for which Hotspot needs to be enabled. .
Go to Security -> L3 Security and select Web Policy in “Layer 3 Security”.
In Preauthentication ACL” select guest_preauth.
Check “Override Global Config”, select External as “Web Auth Type” and enter the Splash page URL generated in your spotipo account
Go to AAA Servers tab and enable Authentication and Accounting Servers you have created before.
Remember to set the order of AAA servers.
In the advanced tab, ensure to check allow AAA override option.
Test and be in awe ;)
Now your WLAN should be enabled for hotspot with Spotipo.
Your Cisco WLC Hotspot with Spotipo Is Now Active
Once you've completed the RADIUS server configuration, pre-authentication ACL setup, and WLAN settings, your guest wireless network is enabled for hotspot with Spotipo. Guests connecting to your WLAN will be redirected to Spotipo's captive portal for authentication and you can start capturing guest data, running marketing campaigns, or offering paid WiFi access.
What to do next:
Test the captive portal by connecting a device to your configured WLAN
Customize your splash page design in Spotipo dashboard to match your branding
Set up email marketing integrations to automatically sync guest contacts
Cisco WLC configuration reminders:
Set AAA server order correctly (primary first, backup second)
Enable "AAA override" in advanced WLAN settings
Use IPv4 ACL or FlexConnect ACL depending on your deployment
Configure both authentication (port 1812) and accounting (port 1813) servers
Common Cisco WLC setup issues:
Portal not loading: Verify pre-authentication ACL includes logme2wifi.com and other required URLs
Authentication failures: Ensure RADIUS shared secret matches Spotipo credentials exactly (case-sensitive)
Social login not working: Add all social platform domains (facebook.com, fbcdn.net, etc.) to pre-auth ACL
AAA override not working: Check that "Allow AAA Override" is enabled in WLAN advanced settings
Still having trouble enabling Spotipo on Cisco WLC? Contact Spotipo support via live chat or email us at [email protected] we'll help troubleshoot your specific Cisco WLC configuration.