Ruckus, Smoothwall and AD

[dastrix]

Hi All,

 

We currently have all 3 and at the moment users login to a captive portal on the ruckus which then talks to microsoft nps and they download a key to install this then ties there device to a username in the ruckus web gui.

 

What we want to do is also get this info into the smoothwall instead of the device only showing up as a IP address, i believe some of you have done this and if so what do i need to configure?

 

Cheers

[dastrix]

no one really

[robk]

You want the byod instructions. Which smoothwall device do you have? Smoothwall support can sort this for you.

[dastrix]

UTM 1000

[robk]

Ah same as us then. Is your wireless network on its own vlan? If so it smoothwall already dhcp? Assuming that you set ruckus to use the smoothwall box as radius and away you go.

[dastrix]

I have ruckus talking to NPS to enable auto wifi config and cert etc, what i want to do is get the username for the device in smoothwall, we use our own dhcp servers and the ruckus is in its own vlan yeah.

 

I did put a ticket into smoothwall but no response as yet. hence why i have tried here.

[robk]

You lose nps and let smoothwall do that role. That then means smoothwall has the auth details and the logs are correct etc.

[dastrix]

Ok Thanks ill give it a try.

[dastrix]

So if i stop using the NPS server, how do i get the wifi to apply to domain connected laptops automatically and with the username in Ruckus and or smoothwall? Edited February 3, 2015 by dastrix

[robk]

Are these school laptops joining with machine accounts or do they log onto the WiFi as the user? If it's as user that's what smoothwall takes over for you.

[dastrix]

I seem to be getting a invalid user / pass when doing a auth check from the ruckus to the smoothwall.

 

I am correct in saying that i should have put the ruckus details into Authorized RADIUS clients and then added the smoothwall into aaa servers on the ruckus zd.

[TechMonkey]

Right, I had this working for a day and now it isn't working so don't count this as authoritative.

 

If you are fully up to date you don't need Smoothwall to be the DHCP. We had Ruckus setup with Smoothwall as the RADIUS server and accounting server, with the WLAN set to WPA2 and 802.1x EAP. In advanced options select the Smoothwall accounting server. In Smoothwall you have to add Ruckus as an authorised client.

 

Now when a client joins it will be asked for their domain username and password from within the WiFi settings, if they are authorised then they get on to the wireless network and Smoothwall recognises them.

 

This all seems easy and in theory it is, but I have been wrestling with this for about 3 weeks, had Smoothwall on it for about 2 weeks & now have Ruckus looking into it from their side. So hopefully you will have an easier time of it.

[dastrix]

Great, but thanks for your advise and fingers crossed it gets better for you.

 

Right, I had this working for a day and now it isn't working so don't count this as authoritative.

 

If you are fully up to date you don't need Smoothwall to be the DHCP. We had Ruckus setup with Smoothwall as the RADIUS server and accounting server, with the WLAN set to WPA2 and 802.1x EAP. In advanced options select the Smoothwall accounting server. In Smoothwall you have to add Ruckus as an authorised client.

 

Now when a client joins it will be asked for their domain username and password from within the WiFi settings, if they are authorised then they get on to the wireless network and Smoothwall recognises them.

 

This all seems easy and in theory it is, but I have been wrestling with this for about 3 weeks, had Smoothwall on it for about 2 weeks & now have Ruckus looking into it from their side. So hopefully you will have an easier time of it.

[dastrix]

yup dont seem to work ill wait for smoothwall to actually call me back