9.2.4.2. Anyfi

In this section, we cover the basic configuration of the Anyfi Gateway to create a hotspot ssid available on all access points.

This does not cover the configuration of other Anyfi network elements such as the Controller. Please, refer to Anyfi Networks’ website for relevant documentation.

In this configuration eth0 will be the management interface of the Anyfi Gateway and eth1 will be the interface that will bridge the tagged packets to your network.

Interfaces configuration

interfaces {
        bridge br0 {
                ...
        }
        ethernet eth0 {
                description "Management network"
                address 192.168.0.20/24
        }
        ethernet eth1 {
                description "Wi-Fi client traffic"
                bridge-group {
                        bridge br0
                }
        }
}

MAC authentication

This section will allow you to configure the Anyfi-Hotspot ssid that will use MAC authentication.

ssid configuration

service {
        anyfi {
                gateway anyfi-hotspot {
                        accounting {
                                radius-server 192.168.0.5 {
                                        port 1813
                                        secret Testing123
                                }
                        }
                        authorization {
                                radius-server 192.168.0.5 {
                                        port 1812
                                        secret Testing123
                                }
                        }
                        bridge br0
                        controller <Anyfi Controller's IP or FQDN>
                        isolation
                        nas {
                                identifier anyfi
                                port 3799
                        }
                        ssid Anyfi-Hotspot
                }
        }
}

802.1X

This section will allow you to configure the Anyfi-Secure ssid that will authenticate users using 802.1X.

ssid configuration

service {
        anyfi {
                gateway secure-gw {
                        accounting {
                                radius-server 192.168.0.5 {
                                        port 1813
                                        secret Testing123
                                }
                        }
                        authentication {
                                eap {
                                        radius-server 192.168.0.5 {
                                                port 1812
                                                secret Testing123
                                        }
                                }
                        }
                        bridge br0
                        controller <Anyfi Controller's IP or FQDN>
                        isolation
                        nas {
                                identifier anyfi
                                port 3799
                        }
                        ssid Anyfi-Secure
                        wpa2 {
                        }
                }
        }
}