Amit Zcomax VHG760 Quick setup guide

The router/AP devices AMIT VHG760 and AMITVHG87B allow internet connetion via Ethernet or 3G/4G networks. Devices were tested starting
with default settings and using the Ethrernet1 port as WAN. The default SSID (on both bands 2,5 GHz and 5GHz for VHG87B) was set for SOCIFI
services, the SSID was already set including the DHCP service.
The tested VHG760 firmware version was , tested VHG87B firmware version was00000W0.I21_e21.0000_02211700 0000Y90.I21_e22.0000_03
211200. Both devices are configured equally.
1.. RADIUS and External Captive Portal
1.1 RADIUS server
Tested firmware supports only one RADIUS server
We recommend to use this set of RADIUS servers:
<br/>
List of RADIUS according to your location:
For North America
AMIT VHG760 & VHG87B Socify Integration Guide
Zcomax Technologies Limited, [email protected] , [phone]

For South America
For Europe and Africa
For Asia-Pacific
Go to and add new item with following settings. In "Server Type" section set only " parameters."Object Definition / External Server" Primary"
Do not set "Secondary"
Server name <According to the RADIUS selection tool above> eg. rad-1-euw-1.socifi.com
Server Type RADIUS server
Shared Key socifi
Authentication Protokol CHAP
Session Timeout 1
Idle Timeout 1
Server IP/FQDN <According to the RADIUS selection tool> eg. rad-1-euw-1.socifi.com
Server Port 1812
Accounting Port 1813
Server enable
RADIUS Server 1
rad-1-use-1.socifi.com or IP address: ,52.7.148.174 Radius shared secret: socifi
RADIUS Server 2
rad-2-euw-1.socifi.com or IP address: ,52.50.155.202 Radius shared secret: socifi
RADIUS Server 1
rad-1-sae-1.socifi.com or IP address: ,52.67.151.35 Radius shared secret: socifi
RADIUS Server 2
rad-2-euw-1.socifi.com or IP address: ,52.50.155.202 Radius shared secret: socifi
RADIUS Server 1
rad-1-euw-1.socifi.com or IP address: ,52.209.184.212 Radius shared secret: socifi
RADIUS Server 2
rad-2-euw-1.socifi.com or IP address: ,52.50.155.202 Radius shared secret: socifi
RADIUS Server 1
rad-1-aps-1.socifi.com or IP address: ,52.220.93.217 Radius shared secret: socifi
RADIUS Server 2
rad-2-euw-1.socifi.com or IP address: ,52.50.155.202 Radius shared secret: socifi
In order to have the Radius communication working fine, the IP addresses (above) and the ports 1812 Auth and 1813 Acc must be
accessible.
Zcomax Technologies Limited, [email protected] , [phone]

1.2 External Captive Portal
Go to and set folowing item's parameters"Object Definition / External Server"
Server Name SOCIFI CaptivePortal
Server Type UAM Server
Login URL http://connect.socifi.com
Shared Secret <empty>
NAS/Gateway ID AMIT_<mac_addres_of_WAN_port_see_below>
Location ID <empty>
Location Name <empty>
Server IP/FQDN connect.socifi.com
Server Port 80
Server enable
2.. Authentication and External SOCIFI Captive Portal
Set Walled Garden with following domain list

1.
2.
3.
socifi.com facebook.com akamaihd.net akamai.net edgecastcdn.net
twitter.com twimg.com fastly.net licdn.net cloudfront.net fbcdn.net
instagram.com cdninstagram.com linkedin.com licdn.com
Want to Allow Google+ login ?
The new does not include the . The reason is that some Android based devices Allow login through social networks Google login are not
to the Captive Portal when the user gets connected to WiFi network. In case you'd like to add it you need to do following:redirected
Check if your hotspot allows DNS names in the Walled garden. Some hotspots can use IP addresses only. See: Why DNS-based
Walled Garden (and not IP-based)
Allow Google+ login: Settings > Brand > Authentication > Allow login through social networks > Set on Allow Google login
Add these walled garden domain into existing list:
Google+ Login DNS's
For Cisco Meraki, Ruckus, Xirrus
*.googleapis.com
*.googleusercontent.com
*.gstatic.com
*.accounts.youtube.com
*.apis.google.com
*.accounts.google.com
*.l.google.com
For Open Mesh
googleapis.com,googleusercontent.com,gstatic.com,accounts.youtube.c
om,apis.google.com,accounts.google.com,l.google.com
For Mikrotik
If you are customer with , please add your custom domain (for example White Label solution mycustomdomain.com) to the Walled
Garden list.
Please adopt same format your Walled garden is already using e.g. with or without the asterisk, separated by comma or
space etc.
The local domain must be added into the Walled Garden list. For example accounts.accounts.google.XX google.co.uk for
google.com.sgUnited Kingdom, accounts. for Singapore, accounts.google.de for Germany etc. Google domains list you can
find at https://ipfs.io/ipfs/QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco/wiki/List_of_Google_domains.html
The local domain must be added into the Walled Garden list. For example foraccounts.google.XX accounts.google.co.uk
United Kingdom, for Singapore, for Germany etc. Google domains list you canaccounts.google.com.sg accounts.google.de
find at https://ipfs.io/ipfs/QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco/wiki/List_of_Google_domains.html

/ip hotspot walled-garden
add dst-host=*.googleapis.com
add dst-host=*.googleusercontent.com
add dst-host=*.gstatic.com
add dst-host=*.accounts.youtube.com
add dst-host=*.apis.google.com
add dst-host=*.accounts.google.com
add dst-host=*.l.google.com
add dst-host=accounts.google.com
For DD-WRT
googleapis.com googleusercontent.com gstatic.com
accounts.youtube.com apis.google.com accounts.google.com
l.google.com
Related pages:
The Splash Page is not triggered when Android devices connect to WiFi
Set External Captive redirection in with following values."Security / Authentication"
Captive Portal enable
WAN Interface <relevant WAn interface> WAN-1 by default
LAN Subnet <LAN subnet according to the DHCP server>
Web Portal External
MAC Whitelist
Walled-Garden Hosts
Walled-Garden domain <see above>
Authentication Server <select RADIUS Server Name> eg.. rad-1-euw-1.socifi.com
UAM Server enable
Select from external Server List SOCIFI CaptivePortal
The local domain must be added into the Walled Garden list. For example foraccounts.google.XX accounts.google.co.uk
United Kingdom, for Singapore, for Germany etc. Google domains list you canaccounts.google.com.sg accounts.google.de
find at https://ipfs.io/ipfs/QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco/wiki/List_of_Google_domains.html
The local domain must be added into the Walled Garden list. For example foraccounts.google.XX accounts.google.co.uk
United Kingdom, for Singapore, for Germany etc. Google domains list you canaccounts.google.com.sg accounts.google.de
find at https://ipfs.io/ipfs/QmXoypizjW3WknFiJnKLwHCnL72vedxjQkDDP1mXWo6uco/wiki/List_of_Google_domains.html

3. ID for SOCIFI Dashboard and NAS/Gateway ID
Find the MAC address of WAN Interface, that provides the internet connection. Go to Find the field"Status / Basic Network / WAN&Uplink". "M
in the table and row on the bottom of the VHGAC Address" "WAN Interface and IPV4..." WAN-1. You can also find this MAC on the label
device
Use this MAc address also for setting the in External Captive Portal setup."NAS/Gateway ID"
Step 1: Login to SOCIFI Dashboard
Step 2: Click on the " " tab on the left sidebarHotspots

Step 3: Click on the “ ” button located on the top right corner on the screen (pictured below)Add a new hotspot
Note: A pop-up window will appear (below)

Step 4: Select the Wi-Fi hardware manufacturer from the drop down menu
Step 5: Enter the (depending on the specific equipment manual) of your equipment. serial number or MAC address You can add multiple
hotspots at once.

Step 6: Set your Network location (this step is essential for correct ad targeting)
Step 7: In the pop-up window type your location or just move the marker on the map and click on the save button to confirm the selection. This
address is used for ad GEO targeting.
Step 7: Click Save

Note: Newly added hotspot are marked as ( ). After the first user connects to the hotspot via SOCIFI, the status willHotspot pending
automatically change and appear as ( ) within an hour. to test if it works properly. Active Get your first connections