Ruckus BYOD - possible android problem - not tested on apple products
We have had a ruckus system running brilliantly for months and i'm really happy with it, in fact i cannot praise it enough.
There has been one little niggle though which has been bothering me and that is to do with BYOD either Staff or Students. I'm in two minds on which way to go with this.
At the moment i have an open SSID (BYOD-STAFF) for Staff, a SSID (BYOD-STUDENTS) and a SSID (BYOD-POST16) for students where users will connect to and authenticate against Active Directory and if they are part of the relevant member group in AD they are granted access. This is working fine however the connection isn't encrypted. They are then passed to the smoothwall for SSL login to the net as WPA on Smoothwall and the ruckus group membership don't work so i cannot let on staff connect to the staff SSID, anyway that's another story.
I have seen and tested, which i have got setup but hidden at the moment, a SSID called Provision which is open and a test SSID for staff called BYOD-STAFF-En which is encrypted. A member of staff connects to the provision SSID, which gives the user an IP address from the main domain for a little while, logs into a walled garden, inputs their username and password and they download the prov.exe on windows or prov.apk if on android. Once the profile has been downloaded the user, i have found if using...
a) a laptop, needs to turn the wireless off and then back on again and the laptop connects to the relevant SSID which the profile has given.
b) an android device, will not pass me over to the relevant SSID, even if i turn the wireless off and on, it still doesn't work. The only way i have got it to work is to disconnect or forget the provision SSID.
c) i have tried it on an apple device however the apple device is locked to IrisConnect so i cannot install google chrome as safari doesn't work.
I thought this profile moved the device over to the SSID automatically this making it easy for the user. At the moment, it does't seem straight forward for the average user.
Has anyone else had this problem or are people doing it the former way i have mentioned. I would really like to get the latter working to see how it goes.