Purpose
This guide helps you in configuring your SmartZone / SmartCell Gateway network for Cloud4Wi.
Please note that the images contained in this article may contain outdated configuration data. Anyway, the data are certainly up to date.
Prerequisites
This guide applies to the version 5.0.0 or later of the Controller. Anyway, we found this integration to properly work starting from the version 3.2.0.
The following products are supported:
- SCG
- vSCG
- SZ
- vSZ
- vSZ-D
In order to use this integration, it is necessary that:
- the controller and the access points must be connected to the Internet
- the access points must be configured to correctly point to the controller
- the controller must be reachable at the following URL: https://northboundIP:9443/portalintf, where northboundIP is the Northbound Interface public IP
You can request this activation by opening a ticket in our Support Center. Please provide us with the following information:
- The Northbound Interface public IP
- The username and password for the Northbound interface
- The name or the code of the organization instance where you're adding the devices
If you already set the Northbound Interface data but you don’t know where this section is, please find the dedicated paragraph below.
Version number
You can get the firmware version of your controller by going to System → General Settings and then checking the About tab.
Configuring RADIUS services
Go to Services & profiles → Authentication and open the Proxy (SZ Authenticator) tab. You can create a new service by clicking the Create button, or edit an existing service by clicking on its name.
On the configuration page, enter the following data:
- Portal Name: (any name you wish)
- Service Protocol: RADIUS
Primary Server
- IP Address: 54.247.117.188
- Port: 1812
- Shared Secret: (this value is privately communicated by Cloud4Wi)
- Confirm Secret: (this value is privately communicated by Cloud4Wi)
Secondary Server
- Backup RADIUS: → Enable Secondary Server: ON
- IP Address: 79.125.111.180
- Port: 1812
- Shared Secret: (this value is privately communicated by Cloud4Wi)
- Confirm Secret: (this value is privately communicated by Cloud4Wi)
Then go to Services & profiles → Accounting and open the Proxy tab. You can create a new service by clicking the Create button, or edit an existing service by clicking on its name.
On the configuration page, enter the following data:
- Portal Name: (any name you wish)
- Service Protocol: RADIUS Accounting
Primary Server
- IP Address: 54.247.117.188
- Port: 1813
- Shared Secret: (this value is privately communicated by Cloud4Wi)
- Confirm Secret: (this value is privately communicated by Cloud4Wi)
Secondary Server
- Backup RADIUS: → Enable Secondary Server: ON
- IP Address: 79.125.111.180
- Port: 1813
- Shared Secret: (this value is privately communicated by Cloud4Wi)
- Confirm Secret: (this value is privately communicated by Cloud4Wi)
Configuring WISPr/Hotspot settings
Go to Services & profiles → Hotspots & Portals and open the Hotspot (WISPr) tab. You can create a new service by clicking the Create button, or edit an existing service by selecting it and clicking on the Configure button.
On the configuration page, enter the following data:
General Options
- Portal Name: (any name you wish)
Redirection
- Smart Client Support: None
- Logon URL: External
- Redirecting unauthenticated user: → Primary: https://splashportal.cloud4wi.com
- Redirecting unauthenticated user: → Secondary: (leave it empty)
- Redirected MAC Format: AA:BB:CC:DD:EE:FF
- Start Page: → After the user is authenticated: → Redirect to the following URL: → https://splashportal.cloud4wi.com
- HTTPS Redirect: ON
- Walled garden: (enter *.cloud4wi.com as the first line – this action also enables the CDN)
For some specific use cases, you may be interested in the following articles:
Configuring WLAN settings
You need to enable the support for the Northbound Portal interface. To do this, go to System → General Settings and open the WISPr Northbound Interface tab.
On the configuration page, enter the following data:
- Enable Northbound Portal Interface Support: ON
- Username / Password: (fill with proper values)
Disabling the encryption of MAC address
By using the default configuration, the device sends to Cloud4Wi not the real MAC address of the client, but an encrypted value.
For example:
it sends: ENC7792d246d8f5f3ec0bbb430193d
instead of: 11:22:33:44:55:66
If you are going to use particular Cloud4Wi features that use the MAC address of the client (e.g. Smart Authentication), then you will need an extra configuration step to get the platform to correctly work.
In particular, to disable the encryption, you have to use the following CLI command:
ruckus(config)# [no] encrypt-mac-ip
Configuring the Cloud4Wi Admin Panel
As the final step, you need to add the Access Point into the Cloud4Wi inventory. To get further information on how to do that, please read How to add an access point.
In this specific case, you need to enter the following information:
- Hardware manufacturer: "Ruckus Wireless (SCG)"
- MAC address: your MAC address
- Identifier: same as the "MAC address", with octects separated by ":" (colon) – e.g. "C4:10:8A:FF:FF:FF"