Guest WiFi/Ruckus/Smoothwall/HP

[Guest SNewt]

Hi all

 

I’ve got the following set up:

 

• Core network switch (HP ProCurve 5412zl)
  
• Smoothwall (default gateway) – Port 1 connected to the network 10.10.8.1 255.255.252.0
  
• Ruckus ZoneDirector ZD3050
  
• Ruckus 7363 Access points
  
• 
  

The VLANS on main switch:

 

• VLAN 1 – Main network = 10.10.8.1 – 10.10.11.254 | 255.255.252.0
  
• VLAN 2 – BYOD = 10.10.16.1 – 10.10.19.254 | 255.255.252.0
  
• VLAN 3 – Guest = 10.10.24.1 – 10.10.27.254 | 255.255.252.0
  

 

The switch configuration is as below:

 

hostname "Core"

module 1 type J8702A

module 2 type J8702A

module 3 type J8702A

module 4 type J8702A

module 5 type J8705A

module 6 type J8705A

module 7 type J8705A

interface F19

speed-duplex auto-100

exit

interface A10

speed-duplex auto-10-100

exit

trunk D1-D4 Trk10 LACP

vlan 1

name "DEFAULT_VLAN"

untagged A1-A24,B1-B24,C1-C24,D5-D24,E1-E24,F1-F24,G1-G24,Trk10

ip address 10.10.8.50 255.255.252.0

exit

vlan 2

name "BYOD"

tagged E6,E20,G1,G18,G20

no ip address

exit

vlan 3

name "Guest"

tagged E6,E20,G1,G18,G20

no ip address

exit

snmp-server community "public" unrestricted

spanning-tree Trk10 priority 4

spanning-tree priority 0

no autorun

password manager

 

 

I’ve created 2 virtual interfaces on Smoothwall:

Networking > Interfaces

Name: Port 1-2_BYOD

VLAN Tag: 2

IP address: 10.10.16.1

Netmask: 255.255.252.0

 

Name: Port1-3_Guest

VLAN Tag: 3

IP address: 10.10.24.1

Netmask: 255.255.252.0

 

Smoothwall is to give out IPs on the above interfaces:

Services > DHCP Server

BYOD:

Network: 10.10.16.0

Netmask: 255.255.252.0

Primary DNS: 10.10.16.1

Default Gateway: 10.10.16.1

 

Guest

Network: 10.10.24.0

Netmask: 255.255.252.0

Primary DNS: 10.10.24.1

Default Gateway: 10.10.24.1

 

The problem is that our devices can’t connect to Guest/BYOD networks. They keep trying to connect, but they don’t get an IP address from Smoothwall. When I left Win7 laptop in a “trying to connect” state, it kept sending DHCP discover packets, and eventually after a long time it got a correct IP and displayed Ruckus welcome page. Once authenticated all works fine, but it’s taking so long to connect. No other device (iPad, Android) been able to connect yet, although from time to time I can see a new DHCP lease on Smoothwall (which means that device was able to connect to DHCP, but then quickly dropped the connection).

 

Anyone have any ideas why it is not working??

 

 

Thank you

[timbo343]

Have a read of thos document i wrote to set this up.. http://www.edugeek.net/forums/wireless-networks/108877-ruckus-guest-access-3.html#post1138295 post 43. It might help you out.

[ass17]

Effectively what you should have is your ruckus controller and APs on a seperate VLAN untagged.

 

All you ruckus wifi networks (staff,students,guests) etc on seperate individual VLANs and TAGGED!!

[Guest SNewt]

Have a read of thos document i wrote to set this up.. http://www.edugeek.net/forums/wireless-networks/108877-ruckus-guest-access-3.html#post1138295 post 43. It might help you out.

 

I have followed your original document while setting up Guest WiFi, but I will check the updated version in case I've missed something.

Thanks

[Guest SNewt]

Effectively what you should have is your ruckus controller and APs on a seperate VLAN untagged.

 

All you ruckus wifi networks (staff,students,guests) etc on seperate individual VLANs and TAGGED!!

 

Ruckus controller and APs are all on VLAN 1.

BYOD wlan is set to access VLAN 2 and GUEST network is set to access VLAN 3.

 

 

The switch ports the ZD, APs and Smoothwall are connected to are untagged on VLAN1 and tagged on VLAN2 and VLAN3.

[timbo343]

@SNewt

 

Can you test to make sure a device can get an IP address from the VLAN DHCP? Have you got a spare port on the core switch that you can use so that you can untag this port to a VLAN to see if a DHCP address is actually been used?

 

How many switches do you have? Have you got any edge switches connecting back to the core switch? Are you able to do the same test on the edge switches?

 

Are you able to tell us what ports on the main switch your ZD and APs are plugged into?

Edited May 6, 2014 by timbo343

[Guest SNewt]

@SNewt

 

Can you test to make sure a device can get an IP address from the VLAN DHCP? Have you got a spare port on the core switch that you can use so that you can untag this port to a VLAN to see if a DHCP address is actually been used?

 

How many switches do you have? Have you got any edge switches connecting back to the core switch? Are you able to do the same test on the edge switches?

 

I have tested the core switch and connected a laptop to a port untagged on VLAN, it gets the correct IP address from the VLAN DHCP and can access the Internet. I haven't tested the edge switches yet, as I first wanted to get that working on core switch.

 

Are you able to tell us what ports on the main switch your ZD and APs are plugged into?

ZDs are on G18 & G20

APs are on E6 & E20

[timbo343]

It seems that you have everything working right on the smoothwall if you are sble to get a DHCP address to a laptop connected directly to the switch. If its taking a while its got to be something on the ZD. Have you got route all traffic to the zone director ticked. This maybe causing a problem. Also are all the ports on the switch a Gig connection?

How come you have got 2 ports going to the ZD on the core switch? You only need one unless you are load balancing or running a redundant ZoneDirector.

[Guest SNewt]

It's all working now. For future reference, the above configuration is correct, just make sure that you won't miss out any of the Access Points when tagging VLANs( ).

 

Thank you for your help.