AP11, AP22, AP25, Instant On cloudManaged APDirect
Hotspot-Box with HPE Aruba Instant On
HPE Aruba Instant On AP11, AP22 and AP25 access points work with Hotspot-Box directly. In the Instant On cloud app you attach the guest SSID as a bridged network to the box's LAN side or to the guest VLAN; the login screen, SMS verification and Law 5651 records stay on the box. Do not use Instant On's own guest portal. Menu names change with app versions, so we describe each setting by its function.
The one setting that changes on the AP
Attach the guest SSID as a bridged network to the VLAN that exits to the box's LAN and turn off the Instant On guest portal on that SSID.
Step by step
- 1
In the Instant On app create a new network; choose the bridged (employee/standard) type, not Instant On's 'guest' type, because that type brings its own portal and NAT.
- 2
Give the network the VLAN ID that reaches the box's LAN; the switch ports the APs hang off must carry that VLAN tagged.
- 3
Keep Instant On's welcome page / guest portal feature off for this network.
- 4
Turn on client isolation so guest devices cannot reach each other.
- 5
Keep AP-side address handling (DHCP/NAT) off for this network; the box hands out the addresses.
- 6
Test: join the guest SSID, the box's screen should open, and the SMS code should get you online.
Common traps
Instant On's 'guest network' type enables its own portal and AP-side NAT; guest traffic never reaches the box. Use the bridged network type.
If the welcome page stays on you get two login screens and the record on the box is incomplete.
For VLAN tagging on the desktop AP11, the AP must hang off a managed switch port; an unmanaged switch does not carry VLANs.
Band steering and smart mesh do not affect the box; a remote meshed AP must use the same bridged network.
The AP25 needs PoE+; on 802.3af power the radios are throttled.
Frequently asked
Instant On has its own guest portal. Why the box?
The Instant On portal alone does not provide the time-stamped, chained record structure and the SMS verification Law 5651 expects. The box takes that over; Instant On only manages the Wi-Fi.
Can Instant On connect to the box over RADIUS?
Instant On supports RADIUS authentication on some network types; the box can work as the NAS integration. Bridge mode is enough for most businesses.
Does guest login stop if the cloud connection drops?
No. The SSID keeps broadcasting from the AP; guest login and records happen on the box.
Menu names and locations change with firmware versions; this page describes each setting by its function. Screenshots are available from your installer or from us.