Creating a WeChat Portal

WeChat is a mobile app from Tenecent that enables its users to call and send text messages to one another. If you have WeChat users on the network and you want your WLANs to support WeChat services, you can create a WeChat portal that WeChat users can use.
A WeChat portal defines the third party authentication server, also known as the equipment service provider (ESP) server, to which the controller will forward all WeChat authentication requests from wireless devices that are associated with controller-managed APs. In turn, the third party authentication server will forward these authentication requests to the WeChat server.
  1. On the menu, click Services > Hotspots & Portals > WeChat to display the WeChat window.
  2. WeChat

  3. In the Organization tab, select the zone for which you want to create the WeChat portal.
  4. Click Create to create the WeChat Portal.

    Creating a WeChat Portal

  5. Complete the following fields:
    • General Options

      Create WeChat Portal - General Options

      • Name: Type a name for the portal that you are creating.
      • Description: Type a short description of the portal.
    • Portal Settings

      Create WeChat Portal - Portal Settings

      • Authentication URL: Enter the authentication interface URL on the third party authentication server. When a managed AP receives a WeChat logon request from a client device, it will send the request to this authentication URL and get the authorization result.
      • DNAT Destination: Enter the DNAT destination server address to which the controller will forward HTTP requests from unauthenticated client devices. The DNAT destination server and the authentication server (above) may or may not be the same server.
      • Grace Period: Enter the number of minutes during which disconnected users who were recently connected will be allowed to reconnect to the portal without needing to re-authenticate. The default grace period is 60 minutes (range is between 1 and 14399 minutes).
      • Blacklist: Enter the network destinations that the controller will automatically block associated wireless clients from accessing. Use a comma to separate multiple entries.
    • Whitelist

      Create WeChat Portal - Whitelist

      • Walled Garden Entry: Enter the network destinations that the controller will automatically allow associated wireless clients to access. You can add a single entry or multiple entries.

        To add a single entry, enter the entry in Wall Garden Entry field, and then click Add. The entry you added appears in the table below. To add multiple entries, in a comma-separated value (CSV) file, type all the network destinations that you want to add to the whitelist, and then save the CSV file. In the Whitelist section, click Import CSV, and then select the CSV file you created. Click Open. The entries in the CSV file are added to the whitelist.

    • DNAT Port Mapping

      Create WeChat Portal - DNAT Port Mapping

      Specify at least one pair of source-to-destination port mapping. To add a port mapping, enter the source and destination ports in the fields Source Port and Dest Port, and then click Add. The AP will use this information to drop or forward HTTP requests from associated clients to specified ports on the DNAT server. For example, if an HTTP request from a wireless client does not originate from the specified source (from) port, the AP will discard the HTTP request. By default, a port mapping of 80-80 (source-destination) exists.

  6. Click OK.
Note: You can also edit, clone and delete a WeChat service portal by selecting the options Configure, Clone and Delete respectively, from the WeChat window.