+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 17
Wireless Networks Thread, ruckus guest connections in Technical; I'm confused about the ruckus guest network feature. Having some connectivity issues with the guest and nowhere in zone director ...
  1. #1
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,535
    Thank Post
    110
    Thanked 89 Times in 75 Posts
    Blog Entries
    47
    Rep Power
    41

    ruckus guest connections

    I'm confused about the ruckus guest network feature.

    Having some connectivity issues with the guest and nowhere in zone director can i find information of what ip address the ruckus is using on the guest vlan.... well its making it hard to figure out whats happening. anyone know how to know?

  2. #2

    CPLTD's Avatar
    Join Date
    Apr 2008
    Location
    Northamptonshire
    Posts
    4,090
    Thank Post
    1,407
    Thanked 664 Times in 513 Posts
    Blog Entries
    1
    Rep Power
    263
    Where did you buy the equipment from and have you got support with them?

    I am seeing this more and more - if you have and you bought it from a reputable reseller they will be able to help. Make use of them!

    Hope it helps.


    Chris

  3. Thanks to CPLTD from:

    browolf (20th September 2013)

  4. #3

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,381
    Thank Post
    525
    Thanked 2,615 Times in 2,021 Posts
    Blog Entries
    24
    Rep Power
    891
    The IP of the controller is the same all the time for us - on all our WLANs.

    However, each vlan is on its own subnet, with IP segregation enabled but a few IPs allowed through via ACLs (to get to things like the proxy server).

  5. Thanks to localzuk from:

    browolf (20th September 2013)

  6. #4
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,535
    Thank Post
    110
    Thanked 89 Times in 75 Posts
    Blog Entries
    47
    Rep Power
    41
    Quote Originally Posted by localzuk View Post
    The IP of the controller is the same all the time for us - on all our WLANs.

    However, each vlan is on its own subnet, with IP segregation enabled but a few IPs allowed through via ACLs (to get to things like the proxy server).
    we have the main secured wireless on

    vlan 1 with address 192.168.x.x / 255.255.0.0

    the unsecured guest on

    vlan 5 with address range 10.168.201.x /255.255.240.0 + proxy on this subnet.

    the known ip of the controller is on the 192.168 range.

  7. #5

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,381
    Thank Post
    525
    Thanked 2,615 Times in 2,021 Posts
    Blog Entries
    24
    Rep Power
    891
    So, what's the problem? The IP for the controller is the normal one, wherever you have it.

  8. Thanks to localzuk from:

    browolf (20th September 2013)

  9. #6
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,535
    Thank Post
    110
    Thanked 89 Times in 75 Posts
    Blog Entries
    47
    Rep Power
    41
    i don't get how a device with a 192.168.x.x talks to a proxy with a completely different address/subnet...

  10. #7

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,381
    Thank Post
    525
    Thanked 2,615 Times in 2,021 Posts
    Blog Entries
    24
    Rep Power
    891
    That needs to be handled by stone form of router, to do the inter-vlan traffic. The ruckus device won't do it.

  11. Thanks to localzuk from:

    browolf (20th September 2013)

  12. #8
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,535
    Thank Post
    110
    Thanked 89 Times in 75 Posts
    Blog Entries
    47
    Rep Power
    41
    Quote Originally Posted by localzuk View Post
    That needs to be handled by stone form of router, to do the inter-vlan traffic. The ruckus device won't do it.
    the ruckus controller is attached to a switch port that is tagged on both vlans. could that be how?

  13. #9

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,381
    Thank Post
    525
    Thanked 2,615 Times in 2,021 Posts
    Blog Entries
    24
    Rep Power
    891
    No. There still needs to be a layer 3 router to pass traffic between the 2 subnets. Otherwise, they are effectively 2 separate networks sharing the same switch.

    What switch do you have at your core?

  14. Thanks to localzuk from:

    browolf (20th September 2013)

  15. #10

    Join Date
    Sep 2013
    Location
    UK and Europe
    Posts
    115
    Thank Post
    0
    Thanked 56 Times in 46 Posts
    Rep Power
    12
    Switching and VLANS occur at layer 2. If you want to go from one IP range to another, you need to do this at layer 3, usually via the router / default gateway.

    Why would you want to access the Zone Director from a guest SSID anyway ?

  16. Thanks to neilmac from:

    browolf (20th September 2013)

  17. #11
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,535
    Thank Post
    110
    Thanked 89 Times in 75 Posts
    Blog Entries
    47
    Rep Power
    41
    Quote Originally Posted by neilmac View Post
    Switching and VLANS occur at layer 2. If you want to go from one IP range to another, you need to do this at layer 3, usually via the router / default gateway.

    Why would you want to access the Zone Director from a guest SSID anyway ?

    not as such but we have a connectivity issue between devices on the guest wireless and the guest proxy and it would be useful to be able ping from the proxy to the ruckus controller. the guest wireless is tunnelled from the APs to the controller. however it appears that the setup is perhaps not as I imagine it to be.


    re core switch. its a 3com fibre switch but cant remember the model.

  18. #12

    Join Date
    Sep 2013
    Location
    UK and Europe
    Posts
    115
    Thank Post
    0
    Thanked 56 Times in 46 Posts
    Rep Power
    12
    Traffic isn't normally tunnelled back to the controller, it normally is distributed directly out of the switch port.

    Can you describe the problem in any more detail ?

    When troubleshooting, begin at layer 1, then layer 2, then layer 3. You can also run connection tests from the zone director, also check the controller logs. You should run a test to something on the same VLAN before going to a different subnet. If you can, set up iPerf or use the zapperf in the zone director. As pointed out, if you suspect the wifi, the first port of call is always the guy who sold it to you. Discuss the problem with your reseller.

    By the way, what encryption settings do you have on the problem SSID ?

    NM

  19. Thanks to neilmac from:

    browolf (20th September 2013)

  20. #13

    Join Date
    Feb 2013
    Posts
    119
    Thank Post
    46
    Thanked 8 Times in 7 Posts
    Rep Power
    5
    Quote Originally Posted by browolf View Post
    I'm confused about the ruckus guest network feature.

    Having some connectivity issues with the guest and nowhere in zone director can i find information of what ip address the ruckus is using on the guest vlan.... well its making it hard to figure out whats happening. anyone know how to know?
    That's because the Ruckus ZD doesn't care what IP range you are using on your guest vlan.

  21. Thanks to catch21 from:

    browolf (20th September 2013)

  22. #14
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,535
    Thank Post
    110
    Thanked 89 Times in 75 Posts
    Blog Entries
    47
    Rep Power
    41
    Quote Originally Posted by neilmac View Post
    Traffic isn't normally tunnelled back to the controller, it normally is distributed directly out of the switch port.

    Can you describe the problem in any more detail ?

    When troubleshooting, begin at layer 1, then layer 2, then layer 3. You can also run connection tests from the zone director, also check the controller logs. You should run a test to something on the same VLAN before going to a different subnet. If you can, set up iPerf or use the zapperf in the zone director. As pointed out, if you suspect the wifi, the first port of call is always the guy who sold it to you. Discuss the problem with your reseller.

    By the way, what encryption settings do you have on the problem SSID ?

    NM
    because not all the switches the APs are connected to are enabled with the guest vlan, the guest config in zone director is set to "tunnel mode".

    it seems to be zone director merely acts as a gate between guest devices and the guest vlan and doesnt have an actual presence on the guest vlan.

    there is no encryption on the guest ssid.

    the problem is the login page which is supposed to auto redirect to google doesn't. it just hangs on redirecting. makes the guest a bit pointless if the internet doesnt work

  23. #15
    IrritableTech's Avatar
    Join Date
    Nov 2007
    Location
    West Yorkshire
    Posts
    932
    Thank Post
    118
    Thanked 218 Times in 175 Posts
    Rep Power
    73
    I've just taken the following from a support document... https://support.ruckuswireless.com/d...notes/download

    VLAN, Dynamic VLAN, and Tunnel Mode
    5.2.41 If the VLAN, Dynamic VLAN, and Tunnel Mode features are all enabled and they have
    conflicting rules, ZoneDirector prioritizes and applies these three features in the following order:
    1. Dynamic VLAN (top priority)
    2. VLAN
    3. Tunnel Mode
    So if your guest WLAN is tagged with a VLAN, tunneling might not work. May not apply in this case, but worth noting perhaps.

    I'd guess the redirection isn't working, because the clients can't find your proxy - due to the fact their is no routing going on?

    Out of interest, if you have the guest wireless use tunneling, and you configure your zone director second nic in your guest ip range / vlan - Is the ZD able to route the traffic over? Just thinking out loud here - I've never tried it.

    If I've got the wrong end of the stick could you perhaps clarify everything? IP ranges - vlans - what is tagged where - a diagram might help too.

  24. Thanks to IrritableTech from:

    browolf (20th September 2013)



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Ruckus Guest Access
    By rocknrollstar in forum Network and Classroom Management
    Replies: 3
    Last Post: 21st June 2012, 11:07 PM
  2. Replies: 2
    Last Post: 10th February 2012, 04:53 PM
  3. Ruckus Guest Access
    By Quackers in forum Wireless Networks
    Replies: 5
    Last Post: 6th February 2012, 11:59 AM
  4. ruckus guest wireless
    By nephilim in forum Internet Related/Filtering/Firewall
    Replies: 2
    Last Post: 7th November 2010, 11:28 PM
  5. Smoothwall/Ruckus guest WLAN
    By badders in forum Internet Related/Filtering/Firewall
    Replies: 10
    Last Post: 1st December 2009, 08:48 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •