+ Post New Thread
Results 1 to 15 of 15
Wireless Networks Thread, Ruckus & Guest WLAN...again in Technical; I'm struggling to setup a guest SSID on our Ruckus ZoneDirector 1100 running v9.4.2.0.29. I have got as far as ...
  1. #1

    Join Date
    Oct 2007
    Location
    Cambridgeshire, UK
    Posts
    306
    Thank Post
    58
    Thanked 23 Times in 20 Posts
    Rep Power
    18

    Ruckus & Guest WLAN...again

    I'm struggling to setup a guest SSID on our Ruckus ZoneDirector 1100 running v9.4.2.0.29. I have got as far as having an open guest SSID which when connected, prompts the user to accept the T&Cs without requiring authentication but never actually redirects to the internet. I have setup WPAD on our internal DHCP/DNS which points all external traffic via our LA provided proxy. This appears to work correctly in that clients connecting to the normal school SSID (security enabled) are correctly routed. I suspect the issue lies with the fact that our internal network and LA proxy are on different networks but I am stuck. Attached is a capture of the guest ACL rules setup on the ZoneDirector.
    Attached Images Attached Images

  2. #2

    Join Date
    Sep 2013
    Location
    UK and Europe
    Posts
    115
    Thank Post
    0
    Thanked 56 Times in 46 Posts
    Rep Power
    12
    Is there a rule on the gateway to allow traffic between the subnets ?

    NM

  3. #3

    Join Date
    Oct 2007
    Location
    Cambridgeshire, UK
    Posts
    306
    Thank Post
    58
    Thanked 23 Times in 20 Posts
    Rep Power
    18
    I suppose there must be because the normal security enabled WLAN (along with the LAN) traffic routes fine.

  4. #4

    Join Date
    Oct 2007
    Location
    Cambridgeshire, UK
    Posts
    306
    Thank Post
    58
    Thanked 23 Times in 20 Posts
    Rep Power
    18
    Someone must have managed to get this sorted within a similar setup?! Where am I going wrong? Pretty please.

    Dave

  5. #5

    Join Date
    Sep 2013
    Location
    UK and Europe
    Posts
    115
    Thank Post
    0
    Thanked 56 Times in 46 Posts
    Rep Power
    12
    Would you be able to do a wireshark capture on to see what's happening at the frame/packet level on the wired side ?

  6. #6

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    18,163
    Thank Post
    522
    Thanked 2,555 Times in 1,983 Posts
    Blog Entries
    24
    Rep Power
    879
    Is the guest wireless on its own IP subnet? If so, what's doing the routing between it and the proxy subnet?

  7. #7

    Join Date
    Oct 2007
    Location
    Cambridgeshire, UK
    Posts
    306
    Thank Post
    58
    Thanked 23 Times in 20 Posts
    Rep Power
    18
    Ok, installed Wireshark and have run a capture from the wired network. I may be interpreting it wrongly but the only IP addresses I see when loading a browser and accessing a known site like bbc.co.uk is the traffic between the IP of the wireshark machine and the proxy.

    Is the guest wireless on its own IP subnet? If so, what's doing the routing between it and the proxy subnet?
    No, when a client connects to the guest SSID, it gets given an IP on the same subnet which says to me (rightly or wrongly) that access to the local server for DHCP is working.

  8. #8
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,487
    Thank Post
    10
    Thanked 502 Times in 442 Posts
    Rep Power
    114
    So you have DNS/DHCP/wpad set up. Do you have ACLs to allow access to those from the guests? People often forget the webserver with the wpad file in the exceptions.

  9. #9

    Join Date
    Oct 2007
    Location
    Cambridgeshire, UK
    Posts
    306
    Thank Post
    58
    Thanked 23 Times in 20 Posts
    Rep Power
    18
    Yes, I added that server's IP shortly after I first posted but it made no difference.

  10. #10
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,487
    Thank Post
    10
    Thanked 502 Times in 442 Posts
    Rep Power
    114
    Does the client get an IP? can it ping the gateway?
    Same or different IP range for the guests?

  11. #11
    DaveCoop's Avatar
    Join Date
    Feb 2009
    Posts
    85
    Thank Post
    6
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    HI DJJones, forgive me if this has already been stated but is you public wi-fi on the same subnet as your main network? Our Public network comprises of a public server for DHCP WPAD, IPcop for transparent proxy (Stuck behind LEA connection) and a wireless controller Vlan'd to separate it all. I'm not sure how Rukus works or what it can /cant do but IPcop is good if your behind proxy's.

  12. #12
    DaveCoop's Avatar
    Join Date
    Feb 2009
    Posts
    85
    Thank Post
    6
    Thanked 2 Times in 2 Posts
    Rep Power
    12
    and the bit i forgot to put is that you can get it to direct your traffic. we couldn't get our public to work before putting in IPcop

  13. #13

    Join Date
    Oct 2007
    Location
    Cambridgeshire, UK
    Posts
    306
    Thank Post
    58
    Thanked 23 Times in 20 Posts
    Rep Power
    18
    Ok...I have this working for laptops but not the iPads. On the iPad after clicking accept on the T&Cs, it just hangs and never redirects.

  14. #14

    Join Date
    Sep 2013
    Location
    UK and Europe
    Posts
    115
    Thank Post
    0
    Thanked 56 Times in 46 Posts
    Rep Power
    12
    Have you heard of a program called Fiddler you can use to troubleshoot these kinds of issues (it's free).

    Here's a blogpost from a chap called Jake Snyder where he explains its use, it may help guide you to the issue.

    Transmit Failure: Using Fiddler2 to troubleshoot Captive Web Portals

    NM
    Last edited by neilmac; 12th October 2013 at 02:15 PM.

  15. Thanks to neilmac from:

    White_Fi (15th October 2013)

  16. #15
    White_Fi's Avatar
    Join Date
    Sep 2008
    Location
    Ipswich
    Posts
    188
    Thank Post
    7
    Thanked 34 Times in 32 Posts
    Rep Power
    33
    Wow!!! Fiddler.... how did I not know about this!!!

    Thanks Neil



SHARE:
+ Post New Thread

Similar Threads

  1. Ruckus and guest access
    By Sheridan in forum Wireless Networks
    Replies: 46
    Last Post: 9th April 2014, 02:31 PM
  2. RUCKUS help - Guest access & the internet via Proxy
    By jamin100 in forum Wireless Networks
    Replies: 24
    Last Post: 15th March 2012, 10:21 AM
  3. Ruckus Wireless - Guest Access from Mac devices
    By Maxell in forum Wireless Networks
    Replies: 0
    Last Post: 2nd November 2011, 03:36 PM
  4. Smoothwall/Ruckus guest WLAN
    By badders in forum Internet Related/Filtering/Firewall
    Replies: 10
    Last Post: 1st December 2009, 08:48 PM
  5. Ruckus Wireless Again!
    By stevenlong1985 in forum Wireless Networks
    Replies: 11
    Last Post: 8th May 2009, 11:08 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •