Ruckus Wireless (SmartCell Gateway)

Follow

Purpose

This guide shows how to integrate a SmartCell Gateway device with Volare. Please note that the images contained in this article may contain outdated configuration data. Therefore, please check the data contained in the article "Parameters for the Solution" at the bottom of the page, as they are up to date.

Prerequisites

This guide applies to the version 3.2.0 or later and following models:

  • SmartCell Gateway 200
  • Virtual SmartCell Gateway

In order to use a Ruckus Wireless device as an access point, it is necessary that the gateway and the access points are connected to the Internet. The access points must be configured to correctly point to the controller.

Important:
By default the SCG support for our Welcome Portal is disabled! This means that if you are going to use the SCG device with Volare, you have to first notify the Cloud4Wi Support Team, so it can be enable for your Tenant.

Dashboard

After logging in to the device, the dashboard will appear. On the top-left corner of the window, you can see the firmware version of the device.

Monitoring your zone and access points

By clicking the Monitor menu link, you can check all the zones set in the gateway. Then click the Access Points menu link, under Monitor, and see all the access points that are associated to the gateway.

Configuring RADIUS services

By clicking the Configuration menu link and then the Proxy AAA link on the left sidebar, under the AAA Servers section, you are redirected to the page where you can configure RADIUS services.
It is necessary to create two RADIUS services: one for authorization and one for accounting. You can create a new service by clicking the Create New button over the list of available services.
By clicking an existing service, you can edit the configuration.

Next, you must configure the service for the authorization phase, as displayed below.

Then you have to configure the service for the accounting phase, as displayed below.

Configuring WISPr/Hotspot settings

By clicking the Configuration menu link and then clicking the Hotspot (WISPr) link in the left sidebar, you can create a Hotspot service for your access point. These settings affect the behavior of your access point when a guest opens the browser to surf the Internet.

In the Hotspot service, the required data is:

  • General Options > Type : Registered Users
  • Redirection > Smart Client Support : None
  • Redirection > Logon URL : External
  • Redirection > Logon URL > Redirect unauthenticated user to the URL for authentication : http://splashportal.cloud4wi.com
  • Redirection > Start Page > Redirect to the following URL : http://splashportal.cloud4wi.com
  • Walled Garden : Please check the Walled garden paragraph

Configuring WLAN settings

By clicking the Configuration menu link and then clicking the WLAN link in the left sidebar, you are redirected to the page where you can configure WLAN settings for your access points. Select your access point and then click on it, in order to display or modify data.

The picture below is an example of the configuration of a WLAN, as settings may change according to the topology and the configuration of your network.

It is required to set:

  • WLAN Usage > Authentication Type : Hotspot service (WISPr)
  • Authentication Options > Method : Open
  • Encryption Options > Method : None
  • Hotspot Service > Hotspot (WISPr) Service : (the hotspot service created in the previous step
  • Authentication & Accounting Service > Authentication Service : (the RADIUS service for the authorization phase)
  • Authentication & Accounting Service > Accounting Service : (the RADIUS service for the authorization phase)
  • RADIUS Options > RADIUS NAS ID : "AP MAC"

Disabling the encryption of MAC address

By using the default configuration, the device sends to Volare not the real MAC address of the client, but an encrypted value.

For example:
it sends: ENC7792d246d8f5f3ec0bbb430193dfe817e47904f0bb49f2d6
instead of: 11:22:33:44:55:66

If you are going to use particular Volare features that use the MAC address of the client (e.g. Smart Authentication), then you will need an extra configuration step to get the platform to correctly work.

In particular, to disable the encryption, you have to use the following CLI command:

ruckus(config)# [no] encrypt-mac-ip


Walled garden

As mentioned above, you can configure the walled garden in the Hotspot service by clicking Configuration menu link and then clicking the WISPr (Hotspot) link in the left sidebar, under the AP Zones section.

To get more information on this, please check the following articles:

IMPORTANT:
It is mandatory to add the following entry into this list, necessary to redirect end-users to the Welcome Portal. This enables also the CDN (see the following article: Enabling the CDN).

  • *.cloud4wi.com

Retrieving the identifier for the Admin Panel

In order to use the device in the Solution, you must enter the details into the Admin Panel.

To get more information on how to do this, please see How to add an access point. The Admin Panel, a field called Identifier will be required by the web interface.

For Ruckus Wireless products under a SmartCell Gateway, the identifier to enter into the Admin Panel is the MAC address including colons (for example: if the MAC address is C4:10:8A:1B:59:20, the Identifier will be: C4:10:8A:1B:59:20).

Parameters for the Solution

The parameters to integrate the device with the Solution are the following:

  • RADIUS services (Authorization)
    • Primary Server > IP Address : 54.247.117.188
    • Primary Server > Port : 1812
    • Primary Server > Shared Secret : (it will be communicated by Cloud4Wi)
    • Primary Server > Confirm Secret : (it will be communicated by Cloud4Wi)
    • Secondary Server > IP Address : 79.125.111.180
    • Secondary Server > Port : 1812
    • Secondary Server > Shared Secret : (it will be communicated by Cloud4Wi)
    • Secondary Server > Confirm Secret : (it will be communicated by Cloud4Wi)
  • RADIUS services (Accounting)
    • Primary Server > IP Address : 54.247.117.188
    • Primary Server > Port : 1813
    • Primary Server > Shared Secret : (it will be communicated by Cloud4Wi)
    • Primary Server > Confirm Secret : (it will be communicated by Cloud4Wi)
    • Secondary Server > IP Address : 79.125.111.180
    • Secondary Server > Port : 1813
    • Secondary Server > Shared Secret : (it will be communicated by Cloud4Wi)
    • Secondary Server > Confirm Secret : (it will be communicated by Cloud4Wi)
  • Hotspot services
    • Redirection > Logon URL > Redirect unauthenticated user to the URL for authentication : http://splashportal.cloud4wi.com
    • Redirection > Start Page > Redirect to the following URL : http://splashportal.cloud4wi.com
Please note that it is necessary to enter the Welcome Portal URL exactly as it is written above.
If you enter the Welcome Portal URL in different formats (e.g. https://splashportal.cloud4wi.com/c4wportal/mysplashportal), then the redirection will fail and the end-user will not be able to see the Welcome Portal.

If these parameters change in the future, we will promptly inform you about new values
Have more questions? Submit a request

Comments