Ruckus ZoneDirector

Access Point Instructions for Ruckus ZoneDirector

This page explains the Captive Portal configuration for managed ZoneDirector and authentication with IronWiFi RADIUS servers.

IronWiFi Console Configuration

  1. Log into the IronWiFi console or register for free
  2. Create a new network
  3. After that, create a new captive portal, with vendor Ruckus Wireless

Access Point Configuration

NOTE: This guide is for the Ruckus ZoneDirector release 9.8 or above. Earlier versions are not supported.

Start by logging into your Ruckus ZoneDirector web interface.

AAA Servers

  1. Click Configure at the top and then AAA Servers on the left. Click Create New and configure with:
  • Name - Guest WiFi
  • Type - RADIUS
  • Auth Method - PAP
  • Backup RADIUS Support - Enabled
  • First Server IP Address - get this value from the IronWiFi console
  • Port - get this value from the IronWiFi console
  • Shared Secret - get this value from the IronWiFi console
  • Confirm Secret - get this value from the IronWiFi console
  • Second Server IP Address - get this value from the IronWiFi console
  • Port - get this value from the IronWiFi console
  • Shared Secret - get this value from the IronWiFi console
  • Confirm Secret - get this value from the IronWiFi console

Click OK to save. Next, click Create New again and configure with:

  • Name - Guest WiFi Acct
  • Type - RADIUS Accounting
  • Backup RADIUS Support - Enabled
  • First Server IP Address - get this value from the IronWiFi console
  • Port - get this value from the IronWiFi console
  • Shared Secret - get this value from the IronWiFi console
  • Confirm Secret - get this value from the IronWiFi console
  • Second Server IP Address - get this value from the IronWiFi console
  • Port - get this value from the IronWiFi console
  • Shared Secret - get this value from the IronWiFi console
  • Confirm Secret - get this value from the IronWiFi console

Click OK to save.

Hotspot

  1. Click Hotspot Services on the left and then Create New. Configure with:
  • Name - Guest WiFi
  • WISPr Smart Client Support - None
  • Login Page - get this value from the IronWiFi console
  • Redirect to the following URL - Insert URL you want to redirect the user to
  • Authentication Server - Guest WiFi
  • Accounting Server - Guest WiFi Acct
  • Wireless Client Isolation - Full
  • Walled Garden - 107.178.250.42

Click OK to save.

WLAN

  1. Next, click WLANs on the left then Create New. Configure with:
  • Name - Guest WiFi
  • ESSID - Guest WiFi (or whatever you wish)
  • Type - Hotspot Service (WISPr)
  • Authentication Method - Open
  • Encryption Method - Open
  • Hotspot Service - Guest WiFi
  • Priority - High
  • Inactivity Timeout - 120

Click OK to save. To complete the set up you will need to SSH in to the ZoneDirector and type the commands below, one line at a time.

enable
config
no hotspot_redirect_https
wlan "Guest Wi-Fi"
called-station-id-type ap-mac
end

The configuration is now complete.

! You must also install a valid SSL certificate on your controller/AP, in order to avoid authentication issues !