Introduction

This guide covers the configuration of TP-Link APs using the Omada Cloud system to interface with Encapto Wi-Fi.

The integration will enable the use of TP-Link Omada Cloud to manage a WLAN and the application of Encapto smart features. The guide focuses on the configuration of Captive Portals and RADIUS authentication on the TP-Link Omada Cloud platform and assumes the reader is familiar with the configuration of a TP-Link Wireless network, which is outside the scope of this document.

Note: Only the STANDARD (Licensed) Omada Organisation supports the captive portal feature; the free/essentials organisation does not.

Firewall Configuration

The first step in the integration process is configuring any firewalls. You will need to open the following ports in any firewall between the TP-Link APs (network) and the Encapto Core. Rules shown are from the perspective of the TP-Link site gateway IP address to the Encapto Core for both the TP-Link APs and WLAN clients.

Tip: The Encapto Core has IP addresses specific to each region serviced which can be used in your firewall rules to further restrict access from your TP-Link AP devices. You can view the IP address specific to your Encapto region when you create the TP-Link as a Site in Encapto, described in later Sections. of this guide.

Configure Encapto for TP-Link Omada

This section explains how to set up the TP-Link device as a Site in Encapto. Encapto uses the Site as a container for your TP-Link configuration settings. Some of the configuration options discussed here are covered in later sections of this guide, so you might need to refer back to this part later.

Create a new TP-Link Omada Site in Encapto.

To configure a TP-Link Omada device as a Site in Encapto:

1. Log in to your Encapto Wi-Fi Cloud Deck account.
2. Click Sites.
3. Click the +New button.
4. Select TP-Link Omada from the drop-down menu.
5. Give the Site a name - something that identifies the site.
6. Enter the serial number of one of the APs that will be included in the site.
7. Create.

Configure Site Details

The Details tab of an Encapto Site allows you to set parameters that will enable you to locate the Site later on. Here you can:

1. Click Edit details to;
   1. Edit the name entered when the Site was created.
   2. Search and select an existing tag or press enter to create a new tag for the Site to help search for and group the Site in the future (optional).
   3. Enter Notes (optional).
   4. Save.
2. Click Edit in the SITE LOCATION section to enter Site information, including Location, Contact Name, and Contact details (optional)
3. Click Edit in the SITE INFORMATION section to enter Site information, including Location, Contact name, and Contact details (optional).

Tip: Tags, Notes and Site Information are not required, but can be used for admin purposes and will help identify the Site in the future.

Configure Hardware Settings

The Hardware settings tab is where you will find various parameters required to enable communication between the TP-Link Omada and Encapto. To configure or view Hardware settings:

1. Click on the Hardware Settings tab.
2. Click the Copy button to copy the AAA IP to the clipboard. This cannot be changed and will be used later when configuring AAA RADIUS in Omada Cloud.
3. Click the Copy button to copy the AAA secret, as it is needed for configuring AAA in TP-Link Omada Cloud. The AAA secret field contains an automatically generated secret used when setting up AAA RADIUS in TP-Link Omada. You can modify this secret by clicking Edit if necessary.

Tip: You can return to this Site’s configuration at any time to update or view information which is configured in later sections of this guide.

Create a Hotspot in Encapto

Encapto and TP-Link Omada can be configured to deliver custom Hotspots to individual or groups of APs managed via the Omada Cloud. This enables you to set specific Hotspot options—such as branded portals, authentication methods, and other Encapto user engagement features—on a per-SSID basis for one or multiple APs. Hotspot functionality is created and managed in Encapto, then integrated into Omada Cloud by specifying a custom Splash URL (Captive Portal) for selected WLANs (SSIDs).

Find AP MAC Addresses in TP-Link Omada Cloud

To set up a Hotspot in Encapto, you will need to add the MAC address of each AP to be used. To find these MAC addresses, log in to Omada Cloud, select the organisation, locate the network from the Omada Network view, and click on the device. Then, click on each AP to reveal its MAC address.

Take note of each AP MAC address so they can be pasted into Encapto Cloud Deck.

Create a Hotspot in Encapto

Here, you will set up a new Hotspot in Encapto to generate a Captive Portal URL for input into the TP-Link Omada Splash Page settings.

Note: Configuration of Encapto hotspot functionality – Portal, Authentication Methods, and Campaigns – is comprehensively covered in the Configuring Hotspots User Guide.

To configure Hotspot settings, first select the Site created for the TP-Link Omada site in the above Section, click the Hotspot settings tab and then:

1. Click the +Add button.
2. Give the hotspot a meaningful name.
3. Click the +Add button in the Access Point MAC Address and SSID panel.
4. Add the MAC address for each AP to be included in the hotspot to the MAC Address field (AP MAC can be found at the back of the AP or TP-Link Omada, as shown above).

5. Add the SSID for each AP to be included in the hotspot to the SSID field (this should be configured in TP-Link Omada Cloud).
   
   Tip: SSIDs are case sensitive and must exactly match in Encapto and the Omada Cloud. If you update an SSID in Omada Cloud, you must do the same in Encapto.

6. Repeat steps 3 to 5 for each AP to be included in the hotspot.
7. Delete any AP MAC address.
8. Save.

Copy the Portal URL

You will now see your newly created Hotspot network in the Hotspots table (LIST OF HOTSPOTS). Click on the Hotspot in the table and;

1. Click on the Hotspot details tab.
2. Click the Copy button to copy the Portal URL from the Hotspot Details panel. This will be used in a later Section to configure the Portal in Omada Cloud.

Configure TP-Link Omada Cloud Managed APs

This section discusses configuring the Encapto AAA and Walled Garden settings (necessary for Captive Portal and Authentication methods) in TP-Link Omada Cloud.

This guide assumes the reader is familiar with TP-Link Omada Cloud setup and navigation, and that at least one WLAN/SSID has already been configured. For details on configuring WLAN/APs in Omada Cloud, please consult the TP-Link Omada Cloud documentation.

Encapto’s AAA and Hotspot settings must first be configured in the Omada Cloud Network and subsequently applied to the AP(s).

Configure Encapto’s AAA server in the TP-Link Omada Network

To create a new AAA Server for a WLAN, under the selected network:

1. Click Settings.
2. Click Radius Profile under Network Profile.
3. Click +Create New RADIUS Profile.
   
   
    
4. Enter a name, i.e Encapto Radius.
5. Enter the Encapto RADIUS IP found in the above Section as the Authentication Server IP/URL.
   1. Leave the Authentication Port as 1812.
6. Enter the Encapto AAA Secret also found in the above Section as the Authentication Password.
7. Check Enable RADIUS Accounting
8. Check Enable Accounting Interim update.
9. Enter the Encapto RADIUS IP found in the above Section as the Accounting Server IP/URL.
   1. Leave the Accounting Port as 1813.
10. Enter the Encapto AAA Secret also found in the above Section as the Accounting Password.
11. Check Enable RADIUS CoA
12. Enter the Encapto AAA Secret also found in the above Section as the CoA Password.
13. Click Save.

Configure the Portal page in the TP-Link Omada Network.

To configure the Portal Page in Omada,  under the selected network:

1. Click Settings.
2. Click Portal under Authentication.
   1. On the Portal tab
3. Click +Create New Portal.
   
   
    
4. Enter a name for the portal, i.e Cafe Portal
5. Turn on the toggle to enable the portal.
6. Select the WLAN/SSID/Network to convert as the hotspot network.
7. Set the Authentication type to the Radius Server.
8. Set the Authentication Timeout to 1 Day.
9. Select the previously created AAA/Radius server.
10. Enter the site name as the NAS ID.
11. Select PAP as the Authentication Mode.
12. Select External Web Portal
    1. Select https:// from the dropdown
    2. Paste the previously copied Portal URL from the Encapto Clouddeck hotspot setting page.
13. Check to enable HTTPS Redirection.
14. Select The Original URL as the Landing page option.
15. Click Apply.
    
    
     
16. Navigate to the Access Control tab
17. Check to Enable Pre-Authentication Access
18. Click +Add to add walled-garden entries
    
    
19. In the pop-up window, add 3 entries
20. On the first entry
    1. Select IP Range
    2. Enter the Encapto Radius IP
    3. Enter 32
21. On the second entry
    1. Select URL
    2. Enter encapto.com
22. On the third entry
    1. Select URL
    2. Enter encap.to

23. Add new entries for any other URLs required for Social and Payment Gateway authentication.

    Tip: The above action will add URLs to a “Walled Garden” – a set of resources available to the end user before authentication. These are required to enable access to Encapto itself and, where social media and payment gateway authentication methods are used, to relevant third-party resources. See Walled Garden URLs guide for list of URLs.

24. Click Save.
    
    
     

The APs managed by TP-Link Omada Network are now ready to receive Hotspot settings, including a Captive Portal, Authentication methods, Campaigns, and other user engagement features from Encapto.

These are all configured through Encapto’s Cloud Deck. Please refer to the latest Configuring Hotspots User Guide for instructions on setting up these features.