Ruckus Wireless ZoneDirector 1100 User Manual page 151

• Only WISPr Smart Client allowed: Choose this option to allow only clients that support
WISPr Smart Client login to access this hotspot. If this option is selected, a field appears
in which you can enter instructions for clients attempting to log in using the Smart Client
application.
• Smart Client HTTP Secure: If Smart Client is enabled, choose whether to authenticate
users over HTTP or HTTPS.
5. In Login Page (under Redirection), type the URL of the captive portal (the page where
hotspot users can log in to access the service).
6. Configure optional settings as preferred:
• In Start Page, configure where users will be redirected after successful login. You could
redirect them to the page that they want to visit, or you could set a different page where
users will be redirected (for example, your company website).
• In User Session, configure session timeout and grace period, both disabled by default.
– Session Timeout: Specify a time limit after which users will be disconnected and
required to log in again.
– Grace Period: Allow disconnected users a grace period after disconnection, during
which clients will not need to re-authenticate.
7. In Authentication Server, select the AAA server that you want to use to authenticate users.
– Options include Local Database and any AAA servers that you configured on the
Configure > AAA Servers page. If a RADIUS server is selected, an additional option
appears: Enable MAC authentication bypass (no redirection). Enabling this
option allows users with registered MAC addresses to be transparently authorized
without having to log in. A user entry on the RADIUS server needs to be created
using the client MAC address as both the username and password. The MAC
address format is a single string of characters without punctuation.
• In Accounting Server (if you have an accounting server set up), select the server from
the list and configure the frequency (in minutes) at which accounting data will be
retrieved.
• In Wireless Client Isolation, choose whether clients connected to this Hotspot WLAN
should be allowed to communicate with one another locally. See
Creating a WLAN section for a description of the same feature for non-Hotspot WLANs.
8. Configure optional settings as preferred:
• In Location Information, enter Location ID and Location Name WISPr attributes, as
specified by the Wi-Fi Alliance.
• In Walled Garden, enter network destinations (URL or IP address) that users can access
without going through authentication. A Walled Garden is a limited environment to
which an unauthenticated user is given access for the purpose of setting up an account.
After the account is established, the user is allowed out of the Walled Garden. URLs will
be resolved to an IP address (up to 35). Users will not be able to click through to other
URLs that may be presented on a page if that page is hosted on a server with a different
IP address. Avoid using common URLs that are translated into many IP addresses (such
as www.yahoo.com), as users may be redirected to reauthenticate when they navigate
through the page.
• In Restricted Subnet, define L3/4 IP address access control rules for the hotspot service
to allow or deny wireless devices based on their IP addresses.
Managing a Wireless Local Area Network
Working with Hotspot Services
"Options" in the
139