Ruckus + Smoothwall + guest access - Idiots guide needed

[sparkeh]

First up I know that there are a few threads on this but I think I have got into a bit of a mess and need some hand holding to get this working.

Basically I just want to set up a simple guest wlan using Ruckus and Smoothwall.

 

To cut a *very long* story short, I am at the point where the guests can connect to the guest wlan and use their guest pass to auth. Clients get an IP, can use DNS and if I manually configure the proxy (or enable auto detect settings after auth) they can browse Internet. However I want it to be as hands off as possible.

• I have it from Ruckus support that there is no way that guest clients can use non-transparent proxies without configuring each device so I need to set up a transparent filter on my SW box.
  
• A nice chap from SW set this up and said I needed to route all the guest traffic through the SW box to be filtered. I think that this is where I am lost now. How to I do this?
  
• Oh and we don't have any vlans.
  

 

I will sit here banging my head on the desk until someone can come help

Edited November 20, 2013 by sparkeh

[timbo343]

Can i ask.. what smoothwall product are you using?

[sparkeh]

Can i ask.. what smoothwall product are you using?

Sure, SWG 700.

[ijk]

Can you assign a specific IP to a guest? Or one from a pool of known specific IPs? Edited November 20, 2013 by ijk
After thought.

[Mang]

Have you looked at DHCP option 252?

 

https://support.ruckuswireless.com/answers/000001560

 

I'm not sure if it is supported by all devices, but the short story is that you add an option to your DHCP server that instructs connecting devices to get proxy information from a wpad.dat file. This file can be placed on an internal web host. There are several examples available as to the format of the wpad.dat file, but it is basically a javascript:

 

// vim: syntax=javascript

 

function FindProxyForURL(url, host)

{

if (shExpMatch( host, "192.168.0.*" )

|| shExpMatch( host, "127.*" )

|| shExpMatch( host, "localhost" )

|| shExpMatch( host, "*.YOUR.DOMAIN.NAME" )

|| isPlainHostName( host )

|| dnsDomainIs( host, ".YOUR.DOMAIN.NAME" )) {

return "DIRECT";

}

 

// You shouldn't need this, but in some cases it might be handy:

// if (isInNet(host, "192.168.0.0", "255.255.0.0")) {

// return "DIRECT";

// }

 

// This uses the Dan's Guardian port by default, squid if that isn't

// working, and direct if that isn't working. On my network, i don't

// use DIRECT, because i block outgoing access in the firewall.

return "PROXY proxy.YOUR.DOMAIN.NAME:8080; PROXY proxy.YOUR.DOMAIN.NAME:3128; DIRECT";

}

 

I don't implement this anymore, but used to and it worked

[Guest]

Hi thanks for the post. im in the same predicament as @sparkeh.

 

I have a Zone direcector 1100 and have set up a guest account.

@Mang i tried that yesterday, all my windows laptops got the confiuration and could access the proxy no problem with thwe wpad.dat.

but when i went to try an ipod and my andoid phone it wouldnt pick up the settings! i even unblocked the dns settings for wpad and still wouldnt pick up.

 

so im going to try what @sparkeh mentioned but im awaiting on a small pc to come through so i can install SW on it.

 

can i ask if anyone else knows of a transparent proxy i can install on a windows server machine, btw i have heard of sqiud all ready!

 

Thanks for your help

[sparkeh]

Sorry I kind of lost track of this thread but thanks for replies.

 

Yes we already use wpad.

 

Ok, where I am at is that guest wlan is working but its a bit faffy as guests have to make sure that all proxy settings are cleared to bring up the Ruckus guest sign in page, then tick 'automatically detect settings' to use our wpad.dat - all works great after that.

 

Its that step of altering the proxy settings that I want to overcome.

[Guest]

im in the same situation as you, i work in a school and we have lots of people coming and going with laptops from meetings and last thing i want to do is set proxy settings.

 

ive been testing a smoothwall in a VM so ive ordered a small PC to do this, so i will post results back if i get it working, ideally i would love to get it working on windows server but i dont want to run Squid!