Ruckus, Smoothwall, Radius Connectivity issue

[stgoodyeara]

Here is a really strange one.

 

We have a Wifi network provided by ruckus, is has 2 SSID's on 2 different VLANS each connected to it own NIC on the smoothwall.

 

1. Staff SSID - uses the same VLAN as our windows network and gets IP address via our 2k8 server. Devices are then filtered on the smoothwall using an auth by location rule. Devices connect using a WPA2 shared key

2. Student SSID - Uses a separate VLAN with DHCP & DNS are all handled by the smoothwall on a totally different IP range. The clients authenticate with the WIFI network using the RADUIS on smoothwall.

 

All of the above works FINE...... EXCEPT when a device is connected to the staff ssid it works fine, if it switches to the student SSID it can authenticate using AD credentials via radius. It then works as expected on the student SSID. If the device then switches back to the Staff SSID it connects and gets an appropriate IP address but it wont browse the internet. It CAN access other Local network resources, but as far it's concerned the smoothwall no longer exists. It doesn't respond to ping or anything. Then from this day forward this device will never be able to browse the internet on the Staff SSID again. (some devices haven't been able to browse since October last year.) It appears to be affecting both windows PC's and iPads. I can re-format and reinstall the OS on an affected devices and they still wont browse on the staff SSID, so it not a machine level issue

 

I've got ruckus support looking into this because i felt it was a wifi issue. But they are drawing blanks. Anyone else suggest anything?

[Haptic]

Have you spoken to Smoothwall support also?

[stgoodyeara]

No we have Support through our LA for smoothwall so it's faffy. I thought id see if anyone on here could suggest anything and then wait to see if ruckus support came up with anything before i started down that avenue.

[dr_Wiley]

Hi having similar issues, did you ever find a solution?

[stgoodyeara]

Yes, i was related to the configuration of the radius accounting on the Ruckus controller. It had the wrong port numbers. Ive snipped my accounting settings for you.