This guide shows how to configure a Ruckus Wireless device in the "Controller - AP" architecture, in order to use each Access Point as a HotSpot.
Please note that the images contained in this article may contain outdated configuration data. Therefore, please check the data contained in the article "Parameters for the Solution" at the bottom of the page, as they are certainly up to date.
This guide applies to the Solution for the version 184.108.40.206 or later.
The following device models are supported:
In order to use a Ruckus Wireless device as a HotSpot, you must connect the controller and the Access Points to the Internet. The Access Points must be configured to correctly point to the controller.
Accessing the controller
You can access the controller through the web UI.
The controller must be configured to correctly communicate with the RADIUS Server and the Splash Portal. The configuration of the Access Points is the final step of this process.
First step is to configure the access to the RADIUS server. After that, it is necessary to configure the hotspot service and, finally, the WLAN and the WLAN group for the hotspot service. Once done, this WLAN group must be assigned to those Access Points which will act as Hotspots. This procedure will be discussed step by step.
RADIUS server configuration
Through AAA Servers section in the Configure tab it is possible to view all RADIUS servers that have been entered, and eventually to create a new one for the authorization or accounting phase. In this case a new one will be created, by clicking Create New.
Each RADIUS server must have a name. The selected Type must be RADIUS if related to the authorization phase, or RADIUS Accounting if related to the accounting phase.
The first step is to enter the RADIUS server for the authorization phase (Type = "RADIUS"). It's also possible to set a secondary RADIUS server.
Then it is required to create the RADIUS server for the accounting phase (Type = "RADIUS Accounting"). It's also possible to set a secondary RADIUS server.
The two entries will be displayed.
HotSpot Service configuration
Through the HotSpot Service section in the Configure tab it is possible to view all HotSpot Services entries. It is possible add a new one by clicking the Create New link.
Here you must set the Splash Portal URL and the RADIUS server previously configured. The correct value for the Splash Portal URL is indicated on this page in the paragraph called Parameters for the Solution.
Whether no valid SSL certificates have been uploaded to the controller (via the web interface), it is possible to encounter some issues during authentications of end-users and logout requests for some devices.
For firmware version 9.3 or higher, it is possible to fix this by appending the query parameter ?protocol=http& to Login Page URL. In this way, authentication and logout requests are handled by using HTTP protocol, and not HTTPS. This is not mandatory and it is up to the administrator to decide how to manage this configuration.
If the Splash Portal URL is:
it is possible to handle authentication and logout requests by using HTTP protocol by setting as Login Page the following URL:
In addition, it is also possible to set a list of web sites than can be visited even by end-users who have not performed any authentication against the Splash Portal. To configure this, it is necessary to add a list of IP addresses or host names into the Walled Garden section.
In order to configure the Walled Garden, please check the following articles:
- Walled Garden for the Social Login (web sites/domains to open)
- Walled Garden for PayPal feature (web sites/domains to open)
Please note that, with the version 9.8 or later of the firmware, it is possible to enter wildcard domains in the walled garden, making configuration easier.
If you need to configure the walled garden, we strongly recommend you to update to the version 9.8 or later.
WLAN configurationThe HotSpot service previously created uses the Splash Portal and RADIUS server configurations previously set. Now you must assign these configurations to a WLAN.
Through the WLANs section in the Configure tab it is possible to view all the WLANs entered. By clicking Create New link in the WLANs sub-section it is possible to create a new WLAN.
It is necessary to specify the name and the ESSID for the WLAN. No encryption should be set to access the WLAN, since the authentication for the end-user is managed from the RADIUS server. As Hotspot Services, it is necessary to specify the Hotspot service previously created ("Hotspot" in our case).
As the last step for this section, it is required to create a new WLAN Group. To do this, click the Create New link in the WLAN Groups sub-section.
A WLAN Group can include one or more WLANs, in this case it is just necessary to include the WLAN just created (that we called "WLAN1").
The configuration of the controller is now complete. The next step is applying this configuration to one or more Access Points managed by the controller. Through the Access Points section in the Monitor tab, you can view all the devices connected to the controller. Between the Actions, by clicking the Configure button we can apply any configuration to a connected device.
In the page opened it is necessary to apply the WLAN Group previously created.
The configuration is now complete.
Entering the device to the Control Panel
In order to integrate the device with the Solution, it is necessary to enter its details into the Control Panel.For Ruckus Wireless Access Points in the "Controller - AP" architecture, the Control Panel requires only the MAC address and the Identifier field is not required.
You can find the MAC address in the bottom part of the device, as shown in the next picture. Please note that this string may be entered indifferently uppercase or lowercase.
It's possible to retrieve the MAC address through the web interface by accessing the Access Points section in the Monitor tab. You can see the MAC address in the picture below. Please note that this string may be entered indifferently uppercase or lowercase and with no separators.
If the MAC address is C4:10:8A:1B:59:20 (see picture above), the Identifier will be: C4108A1B5920 .
If the MAC address is 58:93:96:00:00:00 (see picture below), the Identifier will be: 589396000000 .
Allowing free access to the CDN
As explained in the article Improving the performance of Control Panel and Splash Portal by enabling the CDN, it is necessary to add some IP addresses to the Walled Garden in order to support the access to the CDN.
The IP addresses to add for this purpose are:
Parameters for the SolutionThe parameters to integrate the device with the Solution are the following:
Primary RADIUS Server: 220.127.116.11
Authentication port: 1812
Accounting port: 1813
Shared Secret: (it will be communicated by Cloud4Wi)
If you enter the Splash Portal URL in different formats (e.g. https://splashportal.cloud4wi.com/c4wportal/mysplashportal), then the redirection to the Splash Portal will fail and the end-user will not be able to see the Splash Portal.