Ruckus ZoneDirector

Introduction

The following guide was created using a Ruckus wireless network with the following components:

• Controller: Ruckus ZoneDirector 1100 (ZD1106)
• AP: Ruckus ZoneFlex 7300 Series (zf7372)
• Firmware: 9.8.3.0 build 14

Note that this guide supports only firmware version 9.8+.

Configuring the RADIUS server

Configure the CoffeeBean RADIUS server by creating a new AAA Server.

Go to "Configure > AAA Servers".

RADIUS Authentication

Click in the "Create New" link and fill the name, such as "AAA-SOCIAL-ID":

Then fill the following info:

• Type: RADIUS
• Auth Method: PAP
• Backup RADIUS: check "Enable backup RADIUS support"
• First Server
  • IP Address: the primary RADIUS server IP according to your environment/region
  • Port: 1812
  • Shared Secret: the provided RADIUS client secret
  • Confirm Secret: the provided RADIUS client secret
• Second Server
  • IP Address: the secondary RADIUS server IP according to your environment/region
  • Port: 1812
  • Shared Secret: the provided RADIUS client secret
  • Confirm Secret: the provided RADIUS client secret

RADIUS Accounting

Create a new RADIUS server for Account. Click in the "Create New" link and fill the name, such as "AAA-SOCIAL-ID-ACCT":

Then fill the following info:

• Type: RADIUS Accounting
• Backup RADIUS: check "Enable backup RADIUS Accounting support"
• First Server
  • IP Address: the primary RADIUS server IP according to your environment/region
  • Port: 1813
  • Shared Secret: the provided RADIUS client secret
  • Confirm Secret: the provided RADIUS client secret
• Second Server
  • IP Address: the secondary RADIUS server IP according to your environment/region
  • Port: 1813
  • Shared Secret: the provided RADIUS client secret
  • Confirm Secret: the provided RADIUS client secret

Configuring the Hotspot service

Go to "Configure > Hotspot Services", click in the "Create New" link and fill the Name, such as "CP-SOCIAL-ID":

Then fill the following info:

• Login Page: the provided captive portal login URL
• Start Page: select "redirect to the following URL:" and fill the provided captive portal start URL
• Authentication Server: the previously RADIUS Authentication Server created (e.g.: "AAA-SOCIAL-ID")
• Accounting Server: the previously RADIUS Accounting Server created (e.g.: "AAA-SOCIAL-ID-ACCT")

Walled Garden

Allow CoffeeBean Platform URLs and social network URLs by configuring the Hotspot Walled Garden destinations.

Add the entries according to Walled Garden for the Social Login URLs:

Configuring the WLAN

Now you need to create a Wireless LAN with the Hotspot Service previously created.

Go to "Configure > WLANs", click in the "Create New" link and fill the Name, such as "WLAN-SOCIAL-ID":

Then fill the following info:

• WLAN Usages > Type: Hotspot Service (WISPr)
• Authentication Options > Method: Open
• Encryption Options > Method: None
• Options > Hotspot Services: the previously Hotspot Service created (e.g.: "CP-SOCIAL-ID")

WLAN Group

You need to associate the previously WLAN with a WLAN Group.

Probably you already have a "Default" one, but you can also create a new one and associate the previously WLAN as a "Member":

Configuring the Access Points

Access Point Group

You need to associate the WLAN Group previously created/configured to your Access Points.

Go to "Configure > Access Points" and check "Access Point Groups" section.

Probably you already have a "System Default" one, but you can also create a new one and assign the previously WLAN Group by overriding the configuration:

Access Point

At the last step you need to check if the APs you want to provide the Hotspot Service are assigned to the Access Point Group previously created/configured:

Customer Parameters 

Here is a summary of the customer-specific parameters:

Basic Settings

• Logon URL: Captive portal login URL.
• Start Page: Captive portal welcome URL.
• Walled Garden: Refer to our documentation for a list of hostnames allowed for unauthenticated users.
• RADIUS Authentication:
  • IP Address: RADIUS server IP based on your environment/region.
  • Shared Secret: The provided RADIUS client secret.
  • Port: RADIUS server authentication port according to your environment/region.
• RADIUS Accounting:
  • IP Address: RADIUS server IP based on your environment/region.
  • Shared Secret: The provided RADIUS client secret.
  • Port: RADIUS server accounting port according to your environment/region.