Getting started

SpherAAA is a cloud RADIUS and Diameter server. Your access points, switches, VPN gateways and other network devices send it their login requests, and SpherAAA decides who gets onto the network. That decision is made by PolicyLogic, a script you control, so your access rules can be as simple or as specific as you need.

Your first setup

1. Add your network device as a NAS. Register the device's public IP address and a shared secret on the NAS page, then point the device at the SpherAAA address and ports shown there.
2. Add your users. Create a collection named users, with a User-Name and User-Password for each user. See Collections.
3. Test the policy. The default PolicyLogic script already handles username and password logins. Open it and click Validate to send a test request before you try a real device. See PolicyLogic.
4. Connect a real device, and look for its request under Analytics > RADIUS Logs. If it doesn't show up, see Troubleshooting.

Where to go next

• Certificate-based Wi-Fi (EAP-TLS), your own CA, and automatic enrollment with SCEP or EST: 802.1X, PKI and RADSEC
• Guest Wi-Fi with a Meraki splash page: Meraki guest Wi-Fi
• Custom rules such as VLAN assignment, device limits, account lockout, or Microsoft Entra ID logins: PolicyLogic Examples
• Mobile and SIM authentication against a carrier's HSS: Diameter
• Automation from your own systems: API
• Everything SpherAAA can do: Features