+ Post New Thread
Page 4 of 4 FirstFirst 1234
Results 46 to 47 of 47
Wireless Networks Thread, Ruckus and guest access in Technical; Originally Posted by FragglePete You need to get your head round that first, took me a while as well and ...
  1. #46

    Join Date
    May 2011
    Location
    Jus North of London, close but not too close
    Posts
    745
    Thank Post
    172
    Thanked 56 Times in 54 Posts
    Rep Power
    35
    Quote Originally Posted by FragglePete View Post
    You need to get your head round that first, took me a while as well and I believe a number of posts on here will point you in the right direction.

    But, in a nutshell - You'll need switches that are managed, you'll need to setup the VLANs on all your switches (obviously, only those that will have traffic flowing for each VLAN), 'tag' the trunks/uplinks to each Edge switch with the associate VLANS, setup DHCP helper on your Core Switch for the VLANs to point at your DHCP server, Setup a DHCP scope for the BYOD with the gateway set to the IP address of your Core Switch, 'tag' the port that has the AP plugged into for your guest VLAN (you'll need to tag it with the other VLANs as well if you have other SSIDs for on it and management so that ZoneDirector can still access it), setup the SSID on the ZoneDirector to be associated with a particular VLAN and, errr, that is about it. I think, working from memory. May have missed out a step but hopefully it'll help.

    Pete
    I've done vLans with UnManaged Switches (HP 1810's & HP 1800's) if you can do IP Routing on the core switch for DHCP relay this will be fine.

    We didn't have IP Routing on any switches at previous place so I just set the SonicWall appliance we had with sub sub interfaces for the vLans and used the built-in DHCP and basic filtering for the BOYD devices and it was good enough for us.

    We used the domain DHCP for college devices and the SonicWall for BOYD DHCP as getting the DHCP relay working on the SonicWall and talking to the Domain DHCP server was a bain.
    Last edited by Davit2005; 4th April 2014 at 03:41 PM.

  2. #47

    Join Date
    Oct 2011
    Location
    United Kingdom
    Posts
    1
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    There are couple of bits in this thread which I am responding to in 1 place:

    >>Just looking through the manual and I can see where some people here have been having problems particularly with iOS devices. As they always want to connect to the open SSID.
    Have you tried the on-boarding feature that is available in 9.6 onward? This removes the need to use a Hotspot WLAN for Zero-IT/D-PSK, just a single open WLAN for guest access and Zero-IT which is easier. I find that once the iOS device has its D-PSK and the user connects to the Secure WLAN then the device remembers it rather than jumping back to the open provisioning WLAN. In 9.8 (currently schedule for general availability May) you can also have 3 options for this on boarding portal - guest only, guest+Zero-IT, Zero-IT only. If its still an issue then you will have to get users do the "Forget WLAN" as unfortunately we can't force iOS devices to prioritise the WLAN connection order like you can on computers.

    >>Has anyone actually managed to get Ruckus (Guest access) and iPads working with a WPAD to provide Internet access through a proxy? I have everything working as it should except for the fact that browsing the Internet (Safari or Chrome) fails for any site outside of our network. Bizarrely, using other apps (like Facebook, Twitter, Skype, etc) all work correctly!?!
    >>P.S. Everything works fine if I manually enter the URL to the WPAD in the WiFi settings.
    In the good old days when I was a young lad (pre-iOS 4.2) WPAD worked perfectly - just enabled HTTP Proxy / Auto and it would find WPAD host/file via DNS. Apple in their infinite wisdom decided to change this in subsequent versions of iOS so you have to enable Auto AND put the full WPAD URL in as it no longer uses DNS lookup (so no longer really "Auto")!! This is the issue with using "consumer" devices in an "Enterprise" network i.e. they are designed for consumer use/features (don't think many people have a non-transparent proxy at home). Its then always the Enterprise network vendors fault when something doesn't work... Android doesn't natively support WPAD so yuo can't even have one type of provisioning configuration for all devices unless you overlay an MDM solution.

    I use Freeproxy for my WPAD testing with Chrome and it works Ok. When troubleshooting WPAD issues always start with ah very basic WPAD file and work up to a more complex one as you verify things work. I wrote a Ruckus WPAD deployment App Note which should be available through your Ruckus partner - that has a lot of good info in it. Some additional tips:
    - If you are using WPAD on a WLAN with client isolation and the proxy is on the same subnet as clients/ZD then you need to add an Allow rule for the proxy IP to the Guest Access Restricted Subnets
    - Similarly if you ar eusign L3/L4 Access Controls on the WLAN you need to add and allow rule for the proxy IP
    - If you are using Guest Access or Web Portal then you need to add an exception for the ZD IP in the WPAD file so it can access it directly for redirection to work properly

    Ultimately, either scrap your non-transparent proxy and move to a transparent proxy which solves all these client config issues, else have transparent proxy redirect your users to the non-transparent proxy (only works for HTTP traffic as I tested it and doesn't support proxy web authentication). I tested using a Microtik RB750 which has transparent redirection and NAT features to achieve this - think you can also do it on Smoothwall and Squid (which does support transparent HTTPS is you install the SSL Bump module). If you need any details on how I set it up with my RB750 send me a PM.

SHARE:
+ Post New Thread
Page 4 of 4 FirstFirst 1234

Similar Threads

  1. RUCKUS help - Guest access & the internet via Proxy
    By jamin100 in forum Wireless Networks
    Replies: 24
    Last Post: 15th March 2012, 09:21 AM
  2. Replies: 2
    Last Post: 10th February 2012, 03:53 PM
  3. Ruckus Guest Access
    By Quackers in forum Wireless Networks
    Replies: 5
    Last Post: 6th February 2012, 10:59 AM
  4. Ruckus Wireless - Guest Access from Mac devices
    By Maxell in forum Wireless Networks
    Replies: 0
    Last Post: 2nd November 2011, 02:36 PM
  5. Need help and advice on wireless guest access proxy settings
    By sammy42 in forum Learning Network Manager
    Replies: 4
    Last Post: 6th October 2011, 08:43 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •