Log in to your Ruckus Unleashed interface.
Click the arrow beside the Admin & Services header and then choose Services > AAA Servers from the left menu. Under Authentication Servers click the Create New link. Configure with the following:
-
Name: guestwifi
-
Type: RADIUS
-
Auth Method: PAP
-
Backup RADIUS: Enabled
-
First Server:
IP Address: *insert radius_server_ip here*
Port: 1812
Shared Secret: *insert radius_secret here*
Confirm Secret: as above
-
Second Server:
IP Address: *insert radius_server2_ip here*
Port: 1812
Shared Secret: *insert radius_secret here*
Confirm Secret: as above
-
Name: guestwifi
-
Login Page: *insert access_url here*
-
Start Page: redirect to the following URL: *insert redirect_url here*
-
Session Timeout: 1440 minutes
-
Grace Period: 30 minutes
-
Intrusion Prevention: Disabled
-
Authentication Server: guestwifi
-
Isolate wireless client trafic from other clients on the same AP: Enabled
If you wish to support social network logins, you also need to add the following domains for each network you plan to support
*.facebook.com *.fbcdn.net *.akamaihd.net connect.facebook.net |
|
*.twitter.com *.twimg.com |
|
*.linkedin.com *.licdn.com |
|
*.instagram.com |
|
*.weibo.com *.sina.com.cn |
|
VKontakte | *.vk.me *.vk.com |
Click OK to Save. Next, click the arrow beside the WiFi Networks header and then click the Create button. Configure with the following:
-
Name: Guest WiFi (or whatever you wish)
-
Usage Type: Hotspot Service
-
Hotspot Services: guestwifi
-
Inactivity Timeout: 30 minutes
Click OK to Save.
To complete the set up you will need to SSH in to the Unleashed (Master AP) and type the commands below, one line at a time.
enable
config
wlan "Guest Wi-Fi"
called-station-id-type ap-mac
end
This will set the correct parameter we require for the MAC of the AP to be sent in the RADIUS request.