Ruckus Wireless (Controller mode)

Follow

Purpose

This guide shows how to configure a Ruckus Wireless device in the "Controller - AP" architecture for Volare.

Please note that the images contained in this article may contain outdated configuration data. Therefore, please check the data contained in the article "Parameters for the Solution" at the bottom of the page, as they are certainly up to date.

Prerequisites

This guide applies to the Solution for the version 4.2.1.3 or later.

The following device models are supported:

  • ZD1000
  • ZD3000
  • ZD5000

In order to use a Ruckus Wireless device as an access point, you must connect the controller and the access points to the Internet. The access points must be configured to correctly point to the controller.

Accessing the controller

You can access the controller through the web UI.

The controller must be configured to correctly communicate with the RADIUS Server and the Welcome Portal. The configuration of the access points is the final step of this process.

First step is to configure the access to the RADIUS server. After that, it is necessary to configure the hotspot service and, finally, the WLAN and the WLAN group for the hotspot service. Once done, this WLAN group must be assigned to those access points which will act as access points. This procedure will be discussed step by step.

RADIUS server configuration

Through AAA Servers section in the Configure tab it is possible to view all RADIUS servers that have been entered, and eventually to create a new one for the authorization or accounting phase. In this case a new one will be created, by clicking Create New.

 
Each RADIUS server must have a name. The selected Type must be RADIUS if related to the authorization phase, or RADIUS Accounting if related to the accounting phase.

The first step is to enter the RADIUS server for the authorization phase (Type = "RADIUS"). It's also possible to set a secondary RADIUS server.

Then it is required to create the RADIUS server for the accounting phase (Type = "RADIUS Accounting"). It's also possible to set a secondary RADIUS server.

The two entries will be displayed.

 

Hotspot Service configuration

Through the Hotspot Service section in the Configure tab it is possible to view all Hotspot Services entries. It is possible add a new one by clicking the Create New link.

Here you must set the Welcome Portal URL and the RADIUS server previously configured. The correct value for the Welcome Portal URL is indicated on this page in the paragraph called Parameters for the Solution.

Whether no valid SSL certificates have been uploaded to the controller (via the web interface), it is possible to encounter some issues during authentications of end-users and logout requests for some devices.
For firmware version 9.3 or higher, it is possible to fix this by appending the query parameter ?protocol=http& to Login Page URL. In this way, authentication and logout requests are handled by using HTTP protocol, and not HTTPS. This is not mandatory and it is up to the administrator to decide how to manage this configuration.


Example:
If the Welcome Portal URL is:
https://splashportal.cloud4wi.com/

it is possible to handle authentication and logout requests by using HTTP protocol by setting as Login Page the following URL:
https://splashportal.cloud4wi.com/?protocol=http&


In addition, it is also possible to set a list of web sites than can be visited even by end-users who have not performed any authentication against the Welcome Portal. To configure this, it is necessary to add a list of IP addresses or host names into the Walled Garden section.

In order to configure the walled garden, please check the following articles:

Please note that, with the version 9.8 or later of the firmware, it is possible to enter wildcard domains in the walled garden, making configuration easier.
If you need to configure the walled garden, we strongly recommend you to update to the version 9.8 or later.

WLAN configuration

The Hotspot service previously created uses the Welcome Portal and RADIUS server configurations previously set. Now you must assign these configurations to a WLAN.
Through the WLANs section in the Configure tab it is possible to view all the WLANs entered. By clicking Create New link in the WLANs sub-section it is possible to create a new WLAN.


It is necessary to specify the name and the ESSID for the WLAN. No encryption should be set to access the WLAN, since the authentication for the end-user is managed from the RADIUS server. As Hotspot Services, it is necessary to specify the Hotspot service previously created ("Hotspot" in our case).



As the last step for this section, it is required to create a new WLAN Group. To do this, click the Create New link in the WLAN Groups sub-section.


A WLAN Group can include one or more WLANs, in this case it is just necessary to include the WLAN just created (that we called "WLAN1").


The configuration of the controller is now complete. The next step is applying this configuration to one or more access points managed by the controller. Through the Access Points section in the Monitor tab, you can view all the devices connected to the controller. Between the Actions, by clicking the Configure button we can apply any configuration to a connected device.


In the page opened it is necessary to apply the WLAN Group previously created.



The configuration is now complete.

Entering the device to the Admin Panel

In order to integrate the device with the Solution, it is necessary to enter its details into the Admin Panel.

For Ruckus Wireless access points in the "Controller - AP" architecture, the Admin Panel requires only the MAC address and the Identifier field is not required.
You can find the MAC address in the bottom part of the device, as shown in the next picture. Please note that this string may be entered indifferently uppercase or lowercase.


It's possible to retrieve the MAC address through the web interface by accessing the Access Points section in the Monitor tab. You can see the MAC address in the picture below. Please note that this string may be entered indifferently uppercase or lowercase and with no separators.


Example:
If the MAC address is C4:10:8A:1B:59:20 (see picture above), the Identifier will be: C4108A1B5920 .
If the MAC address is 58:93:96:00:00:00 (see picture below), the Identifier will be: 589396000000 .

 
 
In order to add a new access point to the system, please see How to add an access point.
 

Allowing free access to the CDN

As explained in the article Enabling the CDN, it is necessary to add some IP addresses to the walled garden in order to support the access to the CDN.
The IP addresses to add for this purpose are:

  • 50.18.178.180
  • 54.248.102.194
  • 54.246.86.254
  • 46.137.206.166
  • 54.232.119.5
  • 54.253.118.101

Parameters for the Solution

The parameters to integrate the device with the Solution are the following:

Login Page: https://splashportal.cloud4wi.com/
Start Page: https://splashportal.cloud4wi.com/
Primary RADIUS Server: 54.247.117.188
Secondary RADIUS Server: 79.125.111.180
Authentication port: 1812
Accounting port: 1813
Shared Secret: (it will be communicated by Cloud4Wi)

Please note that it is necessary to enter the Welcome Portal URL exactly as it is written above.
If you enter the Welcome Portal URL in different formats (e.g. https://splashportal.cloud4wi.com/c4wportal/mysplashportal), then the redirection to the Welcome Portal will fail.
 
If these parameters change in the future, we will promptly inform you about new values.
Have more questions? Submit a request

Comments