Ruckus & VLANs

[Badaz52]

Yeah makes sense, we use 10.0 for all wifi devices and 172 for domain static devices, but I'm sure L3 only makes this possible.

 

You should be ok to vlan using same range on 1.0

 

Right ive managed to get the interfaces talking somehow!

 

I have an interesting issue now though in that if i create the vlan interfaces on the port that isnt connected i can see these in dhcp server and dns proxy and can select them. If i create the vlan interfaces on the port that is connected they dont appear...

[ass17]

Sounds strangely backwards, not sure...

[Badaz52]

Right everything is working now turns out i found a legacy bug with smoothwall and vlans which they have now sorted for me. I just now have one remaining issue. I have configured dhcp on all of my vlan interfaces with a separate range for each for example:

 

172.16.0.2 to 172.16.0.254 for staff

172.16.1.2 to 172.16.4.254 for students

172.16.5.2 to 172.16.5.254 for guest

172.16.6.2 to 172.16.7.254 for 6th form

 

I have untagged a port on the switch for my laptop on the staff vlan and i can confirm i have received a lease from smoothwall however it has given me 172.16.6.2 which is 6th form only im not connecting on this vlan whats gone wrong?

[timbo343]

I would check the switch config and look for which vlan the port is configured for. Sounds like a config error more than anything else to me

[Badaz52]

Ive got the card that the vlans are on plugged into port 12 on the switch which is:

 

Untagged vlan 1

Tagged 100-103

 

Laptop in port 4 untagged on vlan 100 (staff) smoothwall is set as vlan 100 for staff staff dhcp range is 172.16.0.2-172.16.0.254 but i dont get an ip from this range hmm

[timbo343]

Are you able to post the switch config (thats if it isnt too big) and let us know what each VLAN ID is for each group... ie VLAN 100 = Staff, VLAN 101 = Students etc.

[ass17]

Make sure that your VLAN IDS on the switch match those you have setup as your smoothwall interfaces.

[Badaz52]

Finally made a lot of progress with this, I have now managed to get smoothwall dishing out IP addresses exactly as I want and correctly depending on which SSID I connect to. I have followed the guide that was posted on here to configure the transparent proxies to re-direct to SSL page with session cookie and that is where I come unstuck. If I connect a device it takes me to the ruckus page to authenticate and authenticates perfectly, it then tries to load the smoothwall authentication page on port 442 which shows up in the web browser address bar correctly but then it says page cannot be displayed. What could I have missed? Edited September 8, 2014 by Badaz52

[altecsole]

I'm assuming you have an allow entry for Smoothwall. With our setup, I found that I had to change my ZoneDirector ACL to 'Allow all by default', set the entries I wanted to allow as No. 1 - 7 and then set a final entry at No. 8 to Deny our entire subnet. Previously I had it set to 'Deny all by default' with entries to allow, but couldn't get the SSL login to work. Changing to the above sorted that. Hope that helps for you.

[Badaz52]

I don't think I have that bit sorted, are you able to guide me through how to do this? I don't know much about ruckus still learning! lol

[altecsole]

If you haven't got any access control setup on your Zonedirector, I wouldn't worry about it. It was the ACL for our WLANs that stopped the SSL login page working for us. If you haven't configured ACLs, then that won't be the problem.

[Badaz52]

If you haven't got any access control setup on your Zonedirector, I wouldn't worry about it. It was the ACL for our WLANs that stopped the SSL login page working for us. If you haven't configured ACLs, then that won't be the problem.

 

I dont have any Acls configured but do have some restricted subnets defined in guest access but i dont think its the ZD. I authenticate to ZD no problem it then tries to find smoothwall on port 442 for login but cant. I cant ping it nor does it connect if i change it from hostname to ip. What else could be stopping it?

[ass17]

Do you mean 443 not 442? 443 is default https port

[Badaz52]

Do you mean 443 not 442? 443 is default https port

 

Smoothwall login page loads from 442 doesnt it? I have followed the guide which says provide external access for 81 and 442 is this not right?

[ass17]

Ah yes smoothy login page is 442, didnt read it carefully.

[ass17]

Try this

 

Login to your ZD.

 

Go to configure guest access then under restricted subnets put in the subnet

 

The destination address to your range to wish to access.

 

For example our rule is:

 

Description access to pupils gateway

address is 10.82.0.1/32

to any application

to any protocol

to any destination.

 

 

Save

 

Make sure it sits at the top above the deny rules.

 

10.82.0.1 is the vlan IP address of our pupil wifi interface setup in smoothy

Edited September 8, 2014 by ass17

[ass17]

Also on smoothy you need the following:

 

System >> Administration >> External Access

 

Interface | Source | Service | Enabled

Port 1-2_PupilWIFI | 10.82.0.0/21 | other web acess on HTTP (80) | Enabled

Port 1-2_PupilWIFI | 10.82.0.0/21 | other web access on HTTPS (442) | Enabled

 

 

As before change 10.82.0.0/21 for your ip network address

Edited September 8, 2014 by ass17

[Badaz52]

Still no luck, really frustrating as this is the last piece of the puzzle lol.

[altecsole]

We use port 80 for our SSL Cookie Session login page for Smoothwall? Admin login is on port 441.

[Badaz52]

We use port 80 for our SSL Cookie Session login page for Smoothwall? Admin login is on port 441.

 

Finally got it working turns out i missed part of the instruction where on external access you add the network address with the subnet mask as a / i sort of didnt do that bit so only had the network address in with no subnet mask doh!

 

Thank you to everyone who has helped and finally it is working :-)

[ass17]

Your very welcome, future ruckus users take note, please use the guide that a user had created and also refer to this post. You will get there in the end!!

 

Good luck and good night!!