Ruckus Wireless ZoneDirector 1100 User Manual page 384

Using an External Server for Administrator Authentication
SSL Certificate Advanced Options
• Ruckus Wireless private attribute
- Vendor ID: 25053
- Vendor Type/Attribute Number: 1 (Ruckus-User-Groups)
- Value Format: group_attr1,group_attr2,group_attr3,...
• Cisco private attribute (if your network is using a Cisco access control server)
- Vendor ID: 9
- Vendor Type / Attribute Number: 1 (Cisco-AVPair)
- Value Format: shell:roles="group_attr1
• Active Directory or LDAP:
• Set up administrator groups.
• Populate these groups with users to whom you want to grant administrator
access. One way to do this is to edit each user's Member of profile and add
the group to which you want the user to belong. Remember the group names
that you set; you will enter this information when you create administrator
roles in ZoneDirector (see Step 3).
• TACACS+: See
2 Set up ZoneDirector to use an AAA server (Configure > AAA Servers).
3 Create an Administrator Role in ZoneDirector (Configure > Roles).
• Allow access to all/specific WLANs.
• Allow/deny Guest Pass Generation.
• Ensure that Allow ZoneDirector Administration is enabled, and choose the
level of administration privileges you want to allow for this role.
CAUTION!
administrators that are assigned this role will be unable to log into ZoneDirector even
if all other settings are configured correctly.
4 Test your authentication settings (Configure > AAA Servers > Test
Authentication Settings).
5 Specify AAA server to use (Administer > Preferences > Authenticate with
Auth Server).
384
TACACS+ for more information.
If you do not select the Allow ZoneDirector Administration check box,
group_attr2 group_attr3 ..."
Ruckus Wireless, Inc.