Ruckus Wireless APs

[Chriss31]

Hi,

 

We have just purchased three Ruckus 7363 Wireless access points. We have been led to believe that they offer the ability to allow devices to connect without having to enter our proxy settings on each device.

 

Is there anyone who already has these AP's that can verify this? Would it be necessary to purchase the management device as well?

 

Many thanks,

 

Chriss

[reggiep]

We have the controller and we can't do this AFAIK!

[bladedanny]

Likewise here, we have the controller and whilst devices can connect to the wireless and access network (if allowed) without a proxy, they can not access the internet without entering the proxy.

 

I believe that ruckus have had multiple requests for this feature and it's something they are looking into, but there has been nothing as of yet.

[winng]

At a seminar in London yesterday attended by myself and @GrumbleDook, Ruckus clearly stated that their controller (ZoneDirector) would talk to AD to authenticate the user and was capable of determining what device the user had and then providing the appropriate secure Internet access without any IT staff intervention.

[Chriss31]

At a seminar in London yesterday attended by myself and @GrumbleDook, Ruckus clearly stated that their controller (ZoneDirector) would talk to AD to authenticate the user and was capable of determining what device the user had and then providing the appropriate secure Internet access without any IT staff intervention.

 

Would this go so far as removing the need for us to enter proxy settings into each device that wanted to connect? We're looking to open up our wireless network to pupil devices but I don't fancy configuring 800 iPhones.

[sted]

couldnt you put a wpad file on a server (and appropriate setup) that would as long as ie has automatically detect setting ticked fill it in as needed anyway?

[Chriss31]

couldnt you put a wpad file on a server (and appropriate setup) that would as long as ie has automatically detect setting ticked fill it in as needed anyway?

 

Unfortunately that wouldn't work with mobile and non-IE devices.

[Ashm]

If you could set up a guest VLAN that the guest WLAN is tagged to you could then have a transparent proxy set as the default gateway negating the need for proxy settings.

[Davit2005]

Were looking to use a SonicWall to filter all stuff on the guest/BYOD network/vLan or even setting up a transparent proxy for ALL said devices. Maybe even a seperate SSID for staff and an additional SSID with limited access for students (blocking YouTube and Streaming sites etc.).

 

Is there any documentation detailing law requirements for filtering to BYOD devices anywhere?

 

We are looking at ruckus at the moment, the reports and technology used.

Edited May 17, 2012 by Davit2005

[Dos_Box]

Moving to Networks forum.

[GrumbleDook]

IIRC from previous conversations with Ruckus vendors, you can enable some of the controllers to act as a transparent proxy. Might be worth asking for a full run down of what does what.

[Dragon]

You can do it through a WPAD file hosted on the Zone Director controller. Set up your DHCP and DNS with the correct entries for the devices to find the file.

 

It works on Windows and Apple devices but not Android.

[Dragon]

BTW you need to upgrade to software version 9.3

[reltihmd]

We have the Ruckus controller, we have a wpad file on it for windows devices, anything else requires a transparent proxy setting up - to my knowledge my controller will not act as a transparent proxy.

 

I would imagine that you can set the wpad up without needing the controller, IIRC the option is per WLAN in the advanced settings

[Disease]

We use Ruckus and have a WPAD file on the controller, they released it recently although we beta tested the first version of it.

[TechieWils]

As a couple of guys have said you can only upload a wpad file on to zone defender (mines a zd1000, no built-in transparent proxy) which configures ie and apple devices. The only way to get it working with android, blackberry etc is to use a transparent proxy as your default gateway and and point that towards your LEA proxy.