Ruckus \ Smoothwall Radius Headache

[ssouth]

Hello

 

Hoping someone out there has the same setup and can shed some light on why we can't get Radius to play ball.

 

Basically I have followed all the guides \ recommendations to keep it simple -

 

1. APs and Ruckus Controller are set in Smoothwall as Authorised Radius clients

2. Access control rules seup in Smoothwall for required groups.

3. Smoothwall Access rules on Ports - 1812 / 1813

4. AAA Server setup in Ruckus pointing to Smoothwall IP with Shared Secret

5. VLAN \ DHCP all setup fine - though I've even tried on on standard VLAN 1

 

I can connect with a Laptop to the SSID and the Laptop will get the required IP address, DNS, Gateway etc - so its certainly communicating in some way with smoothwall.

 

What I don't get is a user prompt or any Internet access - its like Smoothwall isn't passing through the AD authentication through?

 

My BYOD all works fine, so I know the general network setup is all fine.

 

Any help would be very much appreciated.

 

Thanks

[timbo343]

Got it working this afternoon, in fact think we were working on it at the same time. I dropped you an email about it.

 

Will give you a call about it.

[timbo343]

If anyone is able to help, we have done some digging and found that using WPA2 on the TEST ssid allows us to get out to the internet and the smoothwall is able to ping the clients.

 

If we change the auth method from WPA2 to Radius (both auth and accounting via the smoothwall) we cannot get out to the net, we cannot even ping the gateway of the VLAN, yet the clients can ping each other.

 

It's almost like there is something blocking Radius on the Smoothwall yet all the Smoothwall access and firewall rules for this VLAN are open.

 

And then at another site, we have to disconnect the client wifi and re-connect to get out to the net... very strange.