Ruckus Guest Pass

[ADMaster]

Hi all,

I have a ZD 3000 updated to the V10 firmware.

 

I'm exploring using guest passes but can't seam to get them configured correctly.

 

I finally have the email sponsor bit working, but any user in the domain can be a sponsor. I'd like to restrict this to just staff.

 

If I go with the admin generated guest pass...

can I restrict this to just a few users perhaps in an AD group?

Can I restrict the number of devices they are allowed. I don't want someone generating an unlimited devices pass valid for a year or something silly like that.

 

When I try pressing device registration instead of guess pass, no passwords will work.

 

Am I overlooking a pre authentication ACL somewhere to deny all traffic until they get a valid guest pass?

 

Any chance of dynamic Vlans working to provide different levels of access?

Should I make my guest ssid radius auth and create guest accounts in AD?

The back story / reasons for these changes is we currently have 2 main ssids

schoolname is an ssid with radius auth and dynamic vlans to provide various levels of accessed based on staff / year group.

guest is open with splash tos page restricted to that of the youngest students as they can't be identified.

 

We have adult presenters come in who should have staff level access to the internet, but I can't raise the level of guest access with out putting in some sort of checks or all students would be on it.

 

Other ideas / advice welcome too.

 

Thank you,

[ADMaster]

I think I have the roles bit configured now so it is restricted to staff only. That's a huge step in the right direction.