Configuring Ruckus Unleashed Access Point

This chapter describes how to configure Ruckus Unleashed Access Point.
Before proceeding further with the configuration, you need to have your %DEVICE% configured with a domain and a gateway as described in Adding a New Gateway.

Prerequisites

The prerequisites required for configuration are:

Ruckus Access Point compatible with Unleashed
Web access on port 80 HTTP and 443 HTTPS to Ruckus AP
Ruckus Access Point with installed the Unleashed software version 200.7.10.202.118
%DEVICE% gateway configured with Ruckus Unleashed Access Point hardware type
- Now inside %DEVICE%, select your Gateway, click the dropdown menu, choose Edit.
- Expand the General Data session.
- In the Hardware Type field, choose Ruckus Access Point.

Configuring the Gateway Mode

Step 1

Access to Ruckus Unleashed AP web interface through its IP address.

Step 2

The first step is to configure an IP address to your Ruckus AP according to your local network. From the left sidebar, click on Admin & Services tab, select System > IP Settings > IP Settings; flag Gateway Mode, then choose the AP’s port to use as WAN port and choose if you want to set a manual IP Address based on your local network configuration, or if you want to use DHCP or PPPoE.

WAN Port is the port to use to connect AP to your local network: in this case on WAN IP Address section you can choose Manual to set an IP address of your local network or DHCP to obtain an IP address from a local DHCP server.

Step 3

Now define the network IP to use on hotspot network (LAN&WLAN IP Address) and the DHCP pool to use for guests (LAN&WLAN Client IP Addresses).

NOT USE the same subnet used for WAN Port.

Configuring the Radius Accounting and Authentication

Step 1

Access to Ruckus Unleashed AP web interface through the new Ip address set before

Step 2

Click on Admin & Services tab, select Services > AAA Servers > Authentication Servers and then click Create New

Step 3

Configure the Accounting with:

Name–Edit the name
Type–Tick RADIUS Accounting
IP Address–Enter your %DEVICE% public IP
Port–Enter 1813
Shared Secret–Enter your %DEVICE% Radius Secret and confirm it

In order to add the Secret you need to get it from your %DEVICE% as described in the Radius Secret paragraph.

Step 4

Once completed, click the OK button

Step 5

Click again Create New button for the Authentication configuration

Step 6

Configure the Authentication with:

Name–Edit the name
Type–Tick RADIUS
Auth Method–Enable CHAP
IP Address–Enter your %DEVICE% public IP
Port-Enter 1812
Shared Secret–Enter your %DEVICE% Radius Secret and confirm it

In the IP Address fields enter the public IP used to reach your %DEVICE% and the Radius Secret preset in your %DEVICE%.

In order to add the Secret you need to get it from your %DEVICE% as described in the Radius Secret paragraph.

Step 7

Once completed, click the OK button on the bottom right corner.

Configuring the Hotspot Services

Step 1

Click on Admin & Services tab, select Services, then select Hotspot Services section and click Create New.

Step 2

In the General tab configure with:

Name–Edit the name
WISPr Smart Client Support–Tick None
Login Page– Enter the URL of the Welcome Portal page (login page) where the guests will be redirected to.
Start Page–Enable “Redirect to the URL that the user intends to visit”
Intrusion Prevention–Enable Temporarily block Hotspot clients with repeated authentication attempts.

The URL of the Hotspot must be in this format: http:// %DEVICE% _IP_OR_DOMAIN/portal?gateway=RackusAP

Step 3

Once completed, click the OK button on the bottom right corner.

Authentication and Accounting Radius Server

Step 1

Click on Admin & Services tab, select Services, then Hotspot Services, and select the Authentication tab.

Step 2

In the Authentication/Accounting Servers header configure with:

Authentication Server–Enter the AAA Radius Server
Accounting Server–Enter the AAA Radius Accounting Server

You need to add the Authentication and Accounting Servers previously created in the Configuring the Radius Accounting and Authentication

Step 3

Once completed, click the OK button to save the entry.

Configuring the WLAN

Step 1

In the main page of your Ruckus interface, select WiFi Networks menu on the upper left corner of the management interface, click on Create to create a new WLAN. Configure with:

Name–Choose a name
Usage Type–Tick Hotspot Service kwown as WISPr
Authentication Method–Tick Open
Encryption Method–Tick None
Hotspot Services–Choose the hotspot service you created before in the Configuring the Hotspot Service paragraph

Step 2

Once completed, click the OK button to save.