Access Point Instructions for Ruckus ZoneDirector
This page explains the Captive Portal configuration for managed ZoneDirector and authentication with IronWiFi RADIUS servers.
IronWiFi Console Configuration
- Log into the IronWiFi console or register for free
- Create a new network
- After that, create a new captive portal, with vendor Ruckus Wireless
Access Point Configuration
NOTE: This guide is for the Ruckus ZoneDirector release 9.8 or above. Earlier versions are not supported.
Start by logging into your Ruckus ZoneDirector web interface.
AAA Servers
- Click Configure at the top and then AAA Servers on the left. Click Create New and configure with:
- Name - Guest WiFi
- Type - RADIUS
- Auth Method - PAP
- Backup RADIUS Support - Enabled
- First Server IP Address - get this value from the IronWiFi console
- Port - get this value from the IronWiFi console
- Shared Secret - get this value from the IronWiFi console
- Confirm Secret - get this value from the IronWiFi console
- Second Server IP Address - get this value from the IronWiFi console
- Port - get this value from the IronWiFi console
- Shared Secret - get this value from the IronWiFi console
- Confirm Secret - get this value from the IronWiFi console
Click OK to save. Next, click Create New again and configure with:
- Name - Guest WiFi Acct
- Type - RADIUS Accounting
- Backup RADIUS Support - Enabled
- First Server IP Address - get this value from the IronWiFi console
- Port - get this value from the IronWiFi console
- Shared Secret - get this value from the IronWiFi console
- Confirm Secret - get this value from the IronWiFi console
- Second Server IP Address - get this value from the IronWiFi console
- Port - get this value from the IronWiFi console
- Shared Secret - get this value from the IronWiFi console
- Confirm Secret - get this value from the IronWiFi console
Click OK to save.
Hotspot
- Click Hotspot Services on the left and then Create New. Configure with:
- Name - Guest WiFi
- WISPr Smart Client Support - None
- Login Page - get this value from the IronWiFi console
- Redirect to the following URL - Insert URL you want to redirect the user to
- Authentication Server - Guest WiFi
- Accounting Server - Guest WiFi Acct
- Wireless Client Isolation - Full
- Walled Garden - 107.178.250.42
Click OK to save.
WLAN
- Next, click WLANs on the left then Create New. Configure with:
- Name - Guest WiFi
- ESSID - Guest WiFi (or whatever you wish)
- Type - Hotspot Service (WISPr)
- Authentication Method - Open
- Encryption Method - Open
- Hotspot Service - Guest WiFi
- Priority - High
- Inactivity Timeout - 120
Click OK to save. To complete the set up you will need to SSH in to the ZoneDirector and type the commands below, one line at a time.
enable
config
no hotspot_redirect_https
wlan "Guest Wi-Fi"
called-station-id-type ap-mac
end
The configuration is now complete.
! You must also install a valid SSL certificate on your controller/AP, in order to avoid authentication issues !