BYOD/VLANS

[GRitchie]

Afternoon,

This is not a topic for a Friday afternoon, but I'm going to ask anyway.

 

Does anyone know of any good guides for configuring a BYOD network with Ruckus?

I'm also a complete noob when it comes to VLANs, so if anyone has any information about those, it would be greatly appreciated!

 

Ideally I want it nice and simple. I've got the WLANs in Ruckus, one with AD authent and one with the Guest Pass system.

I just need them both separate from the internal LAN :-)

 

Thanks!

[simpsonj]

Myself and @foofighterjim had a very similar plan over the summer, except we had Aerohive instead of Ruckus, but I imagine the differences are probably quite minimal...

[Davit2005]

I done this a few years ago with Ruckus and using a SonicWall firewall.

 

Have you got any vLANS set up at the moment?

 

Are you using/going to use your core switch to do InterVlan routing?

 

You will probably need access to your firewall/router to add the route to the subnet via the core switch.

[GRitchie]

I'm not going to pretend I know what that means...

 

Don't think we have any VLANs now. There were some for an old BYOD system, but it was misconfigured so I ripped them all out.

[jslate1980]

Timbo343 did you create a guide?

[IrritableTech]

There's quite a lot of threads on here with example switch configs and guidance on how to set up ruckus for VLANs.

 

What switch gear have you got currently?

[timbo343]

Timbo343 did you create a guide?

 

Indeed i did. The guide is for smoothwall, ruckus and hp switches. It depends what @GRitchie is using in terms of switches and if he has a smoothwall.

Setting up BYOD with Smoothwall & Ruckus 02.11.15.docx

Edited January 8, 2016 by timbo343

[GRitchie]

I'll only be doing this when I have all HP switches. Currently a mix of HP and Netgear.

We also have smoothwall, so hopefully your guide should be perfect!

[timbo343]

I'll only be doing this when I have all HP switches. Currently a mix of HP and Netgear.

We also have smoothwall, so hopefully your guide should be perfect!

 

Fingers crossed it will be. There are lots of ways to do it. Unfortunately the draw back with mine is it uses open SSIDs rather than secure ones due to 802.1x and the cert problem on windows 7. Apparently this can be got round by just adding any SSL cert to the smoothwall box which should be easier to do once the Edinburgh release comes out in the next few weeks. This is something for me to test.

 

So what does mine do?

A user connects to the SSID which is open and they are prompted with a webpage which has a link to the MITM certificate and a button to continue to login to the wireless.

On the next page i have a basic forum which the user users their network details to authenicate. The details are passed to the ruckus box.

Now authenticated, users are shown a landing page which has links to certain sites that we use in school and obviously google.

 

I've tried to make the whole process as simple as possible.

[GRitchie]

Sounds good!

When I get around to it, would it be okay to PM you with any problems along the way? :-)

[jamesfed]

Series: 4 SSIDs 1 Secondary Academy « my world of IT The port tagging stuff for the APs, Uplinks and Controller might be helpful for you from the guide I made ages ago.

[timbo343]

Sounds good!

When I get around to it, would it be okay to PM you with any problems along the way? :-)

 

Yeah sure , ill try and help where possible.

[twin--turbo]

what resources are they going to access and how?

have you considered the need to isolate clients from each other?

 

TT

[timbo343]

Ruckus has a client isoloation feature which can be turned on.