Automatic Access Point Provisioning Configuration

Owned by Anh Arsenault
Last updated: Aug 13, 2024
3 min read

This configuration supports a WiFi environment that duplicates the functionality of Powerhouse (PhD) physical SAP. It requires scripting/programming to allow existing network infrastructure to provide the same type of “Plug and Play” support that the SAP provides. Therefore, this environment is more suitable for enterprise customers who have invested in their sophisticated network/IT organization. The ‘Automatic’ term of this configuration means a new ConnectWare module can connect to Open Kitchen Cloud without requiring manual entering of network credentials like the Wifi direct connect mode.

The configuration consists of the following steps.

  1. Customer network duplicates two interfaces that are equivalent to a PhD’s SAP:

  • The first interface is referred to as the public interface identified by:
    SSID: <provided by PhD> and PSK: <provided by PhD>

The credential of this interface is known by all ConnectWare modules. The public interface only provides access to the provisioning endpoint (either one of the followings: provision.sitesage.net or sprovision.sitesage.net or sprovisiondev.sitesage.net or provisiondev.sitesage.net). This connection uses port 443. This interface should be configured as “hidden” network for security.

  • The second SSID is designated as the secure interface and the SSID and PSK are unique to each AP. This interface provides full internet access including traffic to spush.sitesage.net or spushdev.sitesage.net.
    This interface can be configured “hidden” or “broadcast”.

 

The SSID and its PSK of the secure interface must be shared with Open Kitchen through a secure API (to be provided by PhD) or through the Open Kitchen interface with appropriate user credentials (discussed in the text below)

Both interfaces should be isolated with firewall rules and allows only *.sitesage.net

Port 443 should be allowed by firewall

Access Point Wifi Frequency shoud be set to 2.4 GHz

 

  1. Customer provides additional information about connection to Open Kitchen

  • MAC address of the network gateway of the secure SSID that ConnectWare Modules and Equipment connect. All messages sent to Open Kitchen include a parameter labeled as gwmac carrying this MAC address. If there are multiple gateways at one location, all gwmac(s) should be provided to Open Kitchen

  • Open Kitchen maintains a mapping table of locations and gwmac(s) which will be used to automatically associate equipment to a specific location

 

  1. APIs to update Access Point (AP)

Coming soon

The APIs provide the Access Point (AP) information and the location which the AP is bound to. The APIs can be used to update Access Point SSID and PSK

 

  1. Bound Access Point (AP) to a Location in Open Kitchen Web Application

Log into Open Kitchen https://ok.sitesage.net

Navigate to the location where the Access Point is to be bound, and go to Connectivity tab. Use ‘+ Add AP’ button to open ‘Add AP’ diaglog box to configure Access Point

image-20240805-031652.png
image-20240805-023347.png

Click Save after information has been entered for Access Point

 

  1. Access Point (AP) can be updated in Open Kitchen Web Application

An existing Access Point (AP) can have its credential updated in Open Kitchen.

Log into Open Kitchen https://ok.sitesage.net

Navigate to the location where the Access Point is bound, and go to Connectivity tab.

Select the AP image in the Connectivity page

Automatic Access Point Configuration dialog box opens for update. MAC address of Default Gateway must not be changed, thus it is not editable.

Click Update after information has been entered for Access Point