Log in to your Ruckus Unleashed interface.
Click the arrow beside the Admin & Services header and then choose Services > AAA Servers from the left menu. Under Authentication Servers click the Create New link. Configure with the following:
- Name: guestwifi
- Type: RADIUS
- Auth Method: PAP
- Backup RADIUS: Enabled
- First Server:
IP Address: *insert radius_server_ip here*
Port: 1812
Shared Secret: *insert radius_secret here*
Confirm Secret: as above - Second Server:
IP Address: *insert radius_server2_ip here*
Port: 1812
Shared Secret: *insert radius_secret here*
Confirm Secret: as above
- Name: guestwifi
- Login Page: *insert access_url here*
- Start Page: redirect to the following URL: *insert redirect_url here*
- Session Timeout: 1440 minutes
- Grace Period: 30 minutes
- Intrusion Prevention: Disabled
- Authentication Server: guestwifi
- Isolate wireless client trafic from other clients on the same AP: Enabled
If you wish to support social network logins, you also need to add the following domains for each network you plan to support
*.facebook.com *.fbcdn.net *.akamaihd.net connect.facebook.net |
|
*.twitter.com *.twimg.com |
|
*.linkedin.com *.licdn.com |
|
*.instagram.com | |
*.weibo.com *.sina.com.cn |
|
VKontakte | *.vk.me *.vk.com |
Click OK to Save. Next, click the arrow beside the WiFi Networks header and then click the Create button. Configure with the following:
- Name: Guest WiFi (or whatever you wish)
- Usage Type: Hotspot Service
- Hotspot Services: guestwifi
- Inactivity Timeout: 30 minutes
Click OK to Save.
To complete the set up you will need to SSH in to the Unleashed (Master AP) and type the commands below, one line at a time.
enable
config
wlan "Guest Wi-Fi"
called-station-id-type ap-mac
end
This will set the correct parameter we require for the MAC of the AP to be sent in the RADIUS request.