Ruckus VLANs

[cookie_monster]

Can someone tell me if Ruckus can manage it's own VLAN's independent of our switches. I'm trying to plan our new network layout which will be layer 3, I know that Ruckus can handle VLAN's I just don't know if that's in conjunction with your regular LAN switches or if it manages it's own.

 

I essentially want a wireless VLAN that can see our servers and one that can only see our Smoothwall so students can access the internet from their own equipment but not see the rest of the LAN. Can Ruckus do that regardless of the capabilities of our LAN switches.

 

Hope that makes sense.

 

Thanks.

[localzuk]

Yes, I believe it can. I've not set it up here like that myself but I believe you'd do it like this:

 

1. Set all the switch ports that the AP's connect to to be tagged on all the relevant VLANs

2. Set the default VLAN in the advanced settings for a WLAN

3. If you are using Radius to determine VLAN assignment, set up the authentication with that, and enable 'Dynamic VLANs' for the WLAN.

 

However, I may be wrong somewhere...

[Mr.Ben]

Hi Cookie_Monster

 

I don't have a Ruckus system, but have implemented a VLAN recently through our Managed Wireless network (a D-Link one).

 

What is your setup like?

 

Basically, I had to create a second Wireless network ('Guests') on the managed Wi-Fi switch and then assign it to the second VLAN. I also told it to assign DHCP. I had to tag all VLAN 2 traffic on every port on every switch that an AP is patched into.

 

I then had to tell each switch that the traffic goes through to get to the router to 'Tag' VLAN 2 traffic on the uplink ports and assigned one port on my main switch to VLAN 2

 

My router (so I assume your smoothwall would have to have???) has two interfaces, so the second interface was patched to the VLAN 2 only port. I had to configure the router's second interface to a 192 address.

 

There might be a cleverer way of doing this though!

Edited March 19, 2010 by Mr.Ben

[cookie_monster]

Hi Cookie_Monster

 

I don't have a Ruckus system, but have implemented a VLAN recently through our Managed Wireless network (a D-Link one).

 

What is your setup like?

 

Basically, I had to create a second Wireless network ('Guests') on the managed Wi-Fi switch and then assign it to the second VLAN. I also told it to assign DHCP. I had to tag all VLAN 2 traffic on every port on every switch that an AP is patched into.

 

I then had to tell each switch that the traffic goes through to get to the router to 'Tag' VLAN 2 traffic on the uplink ports and assigned one port on my main switch to VLAN 2

 

My router (so I assume your smoothwall would have to have???) has two interfaces, so the second interface was patched to the VLAN 2 only port. I had to configure the router's second interface to a 192 address.

 

There might be a cleverer way of doing this though!

 

 

 

Thanks guys. I'm not sure what the setup will be yet i'll have a new layer 3 core switch soon and some Ruckus kit, I now need to work out how best to use it. That's about where I am.

[robk]

Sounds like your setting up exactly what we have here, give up a ring at some point if you want.

 

Rob

[cookie_monster]

Sounds like your setting up exactly what we have here, give up a ring at some point if you want.

 

Rob

 

 

I was hoping you would be on your way with that already i'll be in touch.

 

Cheers.

[MYK-IT]

Can someone tell me if Ruckus can manage it's own VLAN's independent of our switches. I'm trying to plan our new network layout which will be layer 3, I know that Ruckus can handle VLAN's I just don't know if that's in conjunction with your regular LAN switches or if it manages it's own.

 

I essentially want a wireless VLAN that can see our servers and one that can only see our Smoothwall so students can access the internet from their own equipment but not see the rest of the LAN. Can Ruckus do that regardless of the capabilities of our LAN switches.

 

Hope that makes sense.

 

Thanks.

 

Hi Cookie!

 

I am in process of doing exactly the same here.

 

Currently have a Ruckus ZoneController and APs on loan from Joe @ Computer Products Limited (they have been fantastic) and i am currently testing the kit with our network.

 

Our network is currently 'flat' but have I have been configuring vlan (subnets) in combination with our Layer 3/4 Switch. As mentioned the ports that the AP / ZoneDirector connect to should be tagged (trunk port) with all the appropriate VLANS etc. After only the first week of trials, i have managed to get it working, getting IP address from DHCP server etc.

 

If anything the Ruckus was the easiest bit, i just have to fully documentate and plan how i want to implement the vlans (subnets), firewall etc etc etc into the school network. (More testing!).

 

So, yes, you would need a layer 3 switch.

 

Hope this helps!

[cookie_monster]

I seem to be all setup now. I'm hosting two WLANs on seperate SSIDs these are seperated by VLAN and the Ruckus will not allow any communication with any other clients or services on our network with the exception of the smoothwall and DHCP. My experience was similar to yours Ruckus was the most straight forward part.

 

Thanks all.