RADIUS AAA Servers
Log in to your Ruckus Unleashed interface. Click the arrow beside the Admin & Services header and choose Services > AAA Servers from the left menu. Under the Authentication Servers section, click the Create New link and configure with the following:
| Name | guestwifi |
| Type | RADIUS |
| Auth Method | PAP |
| Backup RADIUS | Enabled |
| First Server (Primary) | IP Address: *insert radius_server_ip here*Port: 1812Shared Secret: *insert radius_secret here*
|
| Second Server (Backup) | IP Address: *insert radius_server2_ip here*Port: 1812Shared Secret: *insert radius_secret here*
|
Click OK to Save.
Hotspot Services
Next, click on Hotspot Services on the left menu. Under the Hotspot Servers tab, click the Create New link and configure the properties across the tabs:
General & Authentication Tabs
| Name | guestwifi |
| Login Page | *insert access_url here* |
| Start Page Redirect URL | *insert redirect_url here* |
| Session Timeout | 1440 minutes |
| Grace Period | 30 minutes |
| Intrusion Prevention | Disabled |
| Authentication Server | guestwifi |
| Client Isolation | Enabled (Isolate wireless client traffic from other clients on the same AP) |
Walled Garden Tab
On the Walled Garden tab, you need to add multiple whitelist entries. For each required domain, click Create New and input the domain into the Destination Address field. Please refer to this list.
Click OK to Save.
WiFi Networks
Click the arrow beside the WiFi Networks header on the navigation menu and click the Create button. Configure with the following settings:
| Name | Guest WiFi (or whatever you wish) |
| Usage Type | Hotspot Service |
| Hotspot Services | guestwifi |
| Inactivity Timeout | 30 minutes (accessible via Show advanced configuration > Others tab) |
Click OK to Save.
CLI Terminal Alignment
To finalize the setup adjustments, you must establish an SSH session directly into the Unleashed Master AP and commit the tracking parameter commands below, entering them one line at a time:
| SSH CLI Commands | enable config wlan "Guest WiFi" called-station-id-type ap-mac end |
This terminal flag alignment ensures the AP's physical MAC address is passed flawlessly inside the standard called-station-id field attribute of your upstream RADIUS payload requests. The configuration is now complete.