Ruckus Wireless ZoneDirector 1100 User Manual page 40

Ensuring That APs Can Communicate with ZoneDirector
Firewall Ports that Must be Open for ZoneDirector Communications
manually configure a port-mapping table on the NAT device to allow remote access
into ZoneDirector. This allows APs to establish an LWAPP connection with Zone-
Director, as well as allowing remote HTTPS and SSH management access to
ZoneDirector.
cations.
Specifically, the following ports must be mapped to ZoneDirector's private IP
address on the NAT device's port mapping table: ports 21, 22, 80, 443, 12222,
12223.
Note that there are some limitations with this configuration, including:
• SpeedFlex performance test tool will not work (ZoneDirector needs to know the
IP addresses of the APs).
• Deploying two ZoneDirectors behind the same NAT in a Smart Redundancy
configuration requires creation of two port forwarding rules (one for each
ZoneDirector physical IP address), and that the APs are configured with both
ZoneDirectors' public IP addresses as primary and secondary ZD IPs.
• An active ZoneDirector behind NAT will be unable to perform upgrades to the
standby ZoneDirector on the other side of the NAT device.
40
Table 11 lists the ports that must be open for trans-NAT communi-
Ruckus Wireless, Inc.