OpenRoaming

Equipment that supports OpenRoaming

A guest signs in once with an e-mail address, and from then on the phone reconnects by itself at every one of your venues, with no login page. That works only on hardware that speaks Passpoint.

Below is the equipment oneCDP OpenRoaming runs on. If yours is not listed, it is usually still possible.

See the list

34 vendors · 27 WBA certified · updated October 2026

Equipment that supports OpenRoaming

Requirements

What the hardware has to do

The access point or the controller must support Passpoint, also called Hotspot 2.0, which is the IEEE 802.11u standard. Without it OpenRoaming cannot work at all.

Passpoint / Hotspot 2.0 (IEEE 802.11u)

Passpoint alone is not enough. A working OpenRoaming setup also needs:

RCOI and ANQP configured on the access points

a connection to AAA and to the OpenRoaming federation over RADIUS or RadSec, which is the part oneCDP takes on

depending on the architecture, a controller or an external OpenRoaming connector acting as a proxy

How to read the list

Three statuses, and they mean different things

Running with oneCDP

Equipment already carrying OpenRoaming for our clients. Configuration is known and takes no research.

WBA certified

Models and controllers the Wireless Broadband Alliance has put through its certification programme: an end to end OpenRoaming test together with Android, iOS and Windows devices.

Passpoint

The hardware supports Passpoint and OpenRoaming can be built on it, but it has not been through the full WBA certification. We check the configuration for your project separately.

The equipment list

Updated October 2026

Showing 34 of 34

Actiontec
WF-186H, WF-188N
NetExperience Cloud 3.2.2; Service Provider Portal 3.0
WBA certified
AirPro
AIR-AP 605C X1
AP WLC 7028
WBA certified
Allied Telesis
AT-TQ7403-R, AT-TQ6702 GEN2-R, AT-TQ7613-R
Firmware 5.5.5-1.3, 5.5.5-2.1, 5.5.5-2.2
WBA certified
Alta Labs
AP6-Pro-Outdoor, AP6-Pro
Alta Labs WLC 1.0e, firmware 2.0q
WBA certified
Arista
C-230, C-460, O-435
Firmware 21.0.0-72.1, 21.0.0-88.9
WBA certified
Cambium Networks
X7-35X, X7-53X, X7-55X, XV2-2, XV2-22H; also the cnPilot and XMS lines
cnMaestro 5.x
WBA certified
Cisco
Catalyst 9120, Catalyst 9166; Cisco WLC and Catalyst 9800 controllers
Cisco Spaces Connector / Catalyst 9800
WBA certified
Cisco Meraki
MR36, MR46
Cisco Spaces Connector / MR 29.5.1
WBA certified
Edgecore
EAP101, EAP102, EAP105, EAP112, EAP115, OAP101-6E, OAP106
External cloud ANP/IdP proxy
WBA certified
Eltex
WEP series access points
TAU 4.0+
Passpoint
EnGenius
ECW230S, ECW510, ECW526, ECW536
EnGenius Cloud
WBA certified
Extreme Networks (Aerohive)
AP3000, AP4000, AP-4020, AP-4060, AP5010, AP5020, AP5050
ExtremeCloud IQ Controller
WBA certified
Fortinet
FortiAP-241K, FortiAP-231G
FortiGate-90G, FortiGate-61F
WBA certified
GL.iNet
AX3000, GL-AXT1800 (Uplink solution)
OpenWrt B3000; GL.iNet WLC 4.5.18
WBA certified
Heights Telecom
HT-252AXE
Heights Web GUI
WBA certified
Helium Mobile
HMHS / ATI6USOB
OpenWiFi Controller 2.10
WBA certified
HFCL
ION4XI, ION4XI_WP, ION12XI-H2
HFCL iCon 4.3.3.2
WBA certified
HPE Aruba / HPE Mist
Aruba AP515, AP725 RW, AP735, AP755; Mist AP47; also Aruba IAP and Mobility Controllers
Aruba AOS / Mist
WBA certified
Indio Networks
UM-325AX
TIP OpenWiFi 3.2.1
WBA certified
Juniper Mist
AP45
Juniper Mist Cloud (Mist AI)
WBA certified
Metablox
Baker MAX30, Rainier MAX60
Metablox OpenWISP 1.0.3
WBA certified
Microsense
Mi-Fi AXI 605 STD
Mi-Fi WLC 7028
WBA certified
MikroTik
RouterOS devices
RouterOS
Running with oneCDPPasspoint
NetExperience
ActionTec T3270
NetExperience Cloud 3.0.2
WBA certified
OpenWiFi (Telecom Infra Project)
OpenWiFi access points
OpenWiFi Controller
Passpoint
OpenWrt
OpenWrt-based access points
OpenWrt
Running with oneCDP
Plume
PP203X SuperPod
OpenSync 6.4
WBA certified
Quantum Networks
QN-H-240, QN-H-245, QN-I-270, QN-I-470
Firmware 7.0.1.B1
WBA certified
Ruckus / CommScope
R550, R560, R760, R770, H550; also standalone access points
SmartZone High-Scale; configurations with radsecproxy 1.9.1
WBA certified
Teltonika
Industrial routers
RutOS
Passpoint
TP-Link
Omada SDN
Omada Controller
Running with oneCDPPasspoint
Ubiquiti UniFi
UniFi access points
UniFi Network
Running with oneCDPPasspoint
Wayru
Prometheus WiFi 6, Apocalypse WiFi 6
WayruOS 23.3.1
WBA certified
Westermo
Ibex-1510-T2G2.5 EU, Ibex-3510-T2G2.5 EU
IbexOS 6.12
WBA certified

For certified models the controller column gives the versions WBA ran the tests on. OpenRoaming will most likely work on other versions too, but that is the combination that was verified.

Certification data comes from the WBA OpenRoaming Compliance programme; the list was shared with us by the Wireless Broadband Alliance in October 2026. WBA OpenRoaming certified partners · Wi-Fi Alliance Product Finder

Client devices

What has been tested on the guest side

Besides phones and laptops on Android, iOS and Windows, the WBA programme also tested the Zebra TC78 data capture terminal with every identity provider.

Your equipment is not on the list?

Send us the model of your access points and controller. We will check compatibility and tell you what has to be configured for OpenRoaming.

Why it is worth it

What OpenRoaming gives the venue

No new routers

OpenRoaming is switched on over the access points you already have, provided they support Passpoint. Sometimes a controller firmware update is all it takes.

Visits keep being recorded

Guest data keeps arriving with their consent, so analytics, segments and campaigns carry on working without a login page in the way.

Guests come back more often

The phone connects by itself. Nobody is asked for anything a second time, and the friction that loses returning guests disappears.

Questions about compatibility

My equipment is not on the list. Can I still use OpenRoaming?

Most likely yes, if the hardware supports Passpoint. You can check that in the Wi-Fi Alliance Product Finder with the Wi-Fi CERTIFIED Passpoint filter. MikroTik and Ubiquiti, for example, never took part in WBA certification, yet OpenRoaming has been running on both for a long time.

How is WBA certification different from a Passpoint certificate?

A Wi-Fi Alliance Passpoint certificate confirms that an access point can do Hotspot 2.0, which is the base function. WBA OpenRoaming certification checks the whole chain: the access point, the controller or cloud, the connection to the federation and the behaviour with real phones and laptops.

Do I have to buy new equipment?

As a rule, no. OpenRoaming is enabled on existing access points when they support Passpoint. Often it is enough to update the controller firmware to a version that includes Hotspot 2.0.

Where is the guest data stored?

In the EU. Authentication runs through the OpenRoaming federation, while the guest profile, the consent and the visit history stay on EU infrastructure under GDPR, the same as for a regular Wi-Fi login.

Not sure your hardware is ready?
Send the models, and we will come back with what works as it is and what needs a firmware update.