Statement of Conditions EDITION: December 20, 2007 -- vABC In the interest of improving internal design, operational function, and/or reliability, Ruckus Wireless, Inc. reserves the right to make Contact Information changes to the products described in this document without Ruckus Wireless notice.
AP to provide the best possible total coverage and resiliency. This user guide provides complete instructions for use of the Ruckus Wireless WebUI, the wireless network management toolbox for ZoneDirector. With WebUI, you can customize and manage all aspects of ZoneDirector and the network.
Ruckus Wireless ZoneDirector User Guide | Introducing ZoneDirector ZoneDirector Device Features The ZoneDirector device features the following: • Power: Press button to turn on/off device. • Status • Two 10/100/1000 Ethernet Ports • Console: DB-9 port • Reset: Use to reset the ZoneDirector. This is a normal reset and does not set AP back to factory defaults.
Ruckus Wireless ZoneDirector User Guide | Introducing ZoneDirector Overview of a Ruckus Wireless Network Your new Ruckus wireless network starts when you disperse a number of Ruckus Access Points (APs) to efficiently cover your worksite. After connecting the APs to your Ruckus ZoneDirector (through network hubs or switches), and completing the “zero IT”...
Page 8
Ruckus Wireless ZoneDirector User Guide | Introducing ZoneDirector Navigating the Dashboard The Dashboard offers a number of self-contained indicators and tables that summarize the network and its current status. Some indicators have values that link to more focused, detailed views on elements of the network.
Page 9
Ruckus Wireless ZoneDirector User Guide | Introducing ZoneDirector • Currently Active WLANs: Details of currently active ZoneDirector WLANs • Currently Managed APs: Details of the access points currently managed by the ZoneDi- rector • Support: Ruckus support information Using Indicator Widgets Dashboard widgets represent the indicators displayed as part of the active dashboard.
Dashboard. About Ruckus WLAN Security After your initial setup, your Ruckus wireless network connects all authorized users by default to your internal WLAN. This WPA-based WLAN is configured to provide secure cover- age for all authorized users. (A companion “guest” WLAN provides clear-text but controlled access for guest users.) But Ruckus offers other security options that can be applied to the...
Ruckus Wireless ZoneDirector User Guide | Introducing ZoneDirector The ZoneDirector supports one or more WLANs, and if you need to add a WEP WLAN for those users, in addition to your WPA internal WLAN, you can easily do so. User could utilize the Zero-IT Activation to obtain the WEP key automatically or could manually enter the WEP key in their client device wireless configuration.
Ruckus Wireless ZoneDirector User Guide | System Configuration Changing the Network Addressing If you need to replace or update the network settings for your Ruckus ZoneDirector, follow these steps. As soon as the IP address has been changed (applied), you will be disconnected from your ALERT! WebUI connection to the ZoneDirector.
Ruckus Wireless ZoneDirector User Guide | System Configuration Changing the System Name When you first worked through the Setup Wizard, you were prompted for a network-recog- nizable system name for the Ruckus ZoneDirector. If needed, you can change that name by following these steps: Go to Configure >...
Ruckus Wireless ZoneDirector User Guide | System Configuration FIGURE 2-3 Click Apply to save the results of any resynchronizations or NTP links. Changing the System Log Settings The Ruckus ZoneDirector maintains an internal log of current events and alarms. This file has a fixed capacity;...
Page 16
Ruckus Wireless ZoneDirector User Guide | System Configuration FIGURE 2-4 Checking the current log settings You can review and customize the log settings by following these steps: Go to Configure > System. Scroll down to Log Settings. FIGURE 2-5 Make your selections from these syslog server options: Event Log Level Select one of the three logging levels—...
Ruckus Wireless ZoneDirector User Guide | System Configuration Setting up Email Alarm Notification If an alarm condition is detected, the Ruckus ZoneDirector will record it in the event log. If you prefer, an email notification can be sent to a configured email address of your choosing.
Ruckus Wireless ZoneDirector User Guide | System Configuration Customizing the Guest “Login” Page You can customize the guest user login page, to display your corporate logo and to note helpful instructions, along with a “Welcome” title. If you want to include a logo, you'll need to prepare a web-ready graphic file, in one of three acceptable formats (.JPG, .GIF or...
Ruckus Wireless ZoneDirector User Guide | System Configuration Upgrading ZoneDirector and ZoneFlex APs Check the Ruckus Wireless Support web site on a regular basis, for updates and upgrades that can be applied to your Ruckus network devices—to ZoneDirector and all your Ruckus ZoneFlex APs.
Ruckus Wireless ZoneDirector User Guide | System Configuration Working with Backup Files After you have set up and configured your Ruckus wireless network, you may want to back up the full configuration. The resulting archive can be used to restore your ZoneDirector and network.
Ruckus Wireless ZoneDirector User Guide | System Configuration Restoring the ZoneDirector to the Factory Default State In certain extreme conditions, you may want to reinitialize the Ruckus ZoneDirector, and reset it to the "factory default" state. In such a state, the network is almost ready for use, but all your user/guest/log and other records, accounts and configurations would all need to be manually re-configured.
Page 22
Ruckus Wireless ZoneDirector User Guide | System Configuration Alternate factory default reset method If you are unable to complete a software-based resetting of the Ruckus ZoneDirector, you can do the following “hard” restoration: NOTE Do not disconnect the ZoneDirector from any power source until this procedure is complete.
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network An Overview of Wireless Networks When your Ruckus ZoneDirector setup is complete, you have a fully functional wireless net- work, based on two secure WLANs (“internal” and “guest”) with access for authorized users and guests.
Page 25
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network FIGURE 3-1 Fine-tuning the current security mode In the internal WLAN (corporate) row, click Edit (if you haven't done so). You can choose from the following options, which will enhance the default “zero IT”...
Page 26
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network When the WLANs workspace appears, you will want to review, then change the secu- rity options for the internal network. To start, click Edit in the internal row.
Page 27
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network If you change the internal WLAN to WEP or 802.1x If you replace the default WPA configuration of the internal WLAN, your users must reconfig- ure the wireless LAN connection settings on their devices. This process is described in detail and can be performed when logging into the WLAN as a new user.
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network Setting Dynamic Pre-Shared Key Expiration When network users first activate their access to the WLAN with Dynamic PSK enabled, a unique pre-shared key (PSK) is generated automatically for their authentication. (This was activated by default in the WLAN Setup Wizard.) By default, all dynamic pre-shared keys...
Page 29
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network FIGURE 3-3 Type a Name for the ACL. Type a Description of the ACL. Select the Restriction mode as either allow or deny. Type a MAC address in the MAC Address text box, then click Create New to save the address.
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network Creating a New WLAN There are cases in which you might want to create additional WLANs. For example, you might want to create a WLAN for WEP-only client devices. Or you might want to create a WLAN that utilizes 802.1x/EAP and certificates.
Page 31
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network The Create New workspace displays the following: General Options Name/ESSID Type a short name (2–31 characters/numbers) for this WLAN. Description Enter a brief description of the qualifications/purpose for this WLAN, e.g., “Engineering”...
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network less Client Isolation option is automatically selected and cannot be unchecked. Guest WLANs are subject to guest access policies, such as redi- rection and subnet access restriction. [Available only with "Open" or "Shared" authentication.] Click...
Page 33
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network users/clients of your wireless network. (The ID should be a num- ber between 1 and 4094). Hide SSID Activate this option if you don't want the ID of this WLAN adver- tised at any time.
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network Authentication Options Encryption Options Client Configurables User must manually enter the text of the WEP-64 same WEP key stored in the Ruckus Shared WEP-128 ZoneDirector in their wireless network configuration.
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network Adding New Access Points to the WLAN If your staffing or wireless coverage needs increase, you can add APs to your network easily and efficiently. Depending on your network security preferences, the new APs can be auto- matically detected and activated, or new APs may require per-device manual approvals before becoming active.
Page 36
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network FIGURE 3-6...
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network Reviewing the Current Access Point Policies The Access Point Policy options include how new APs are detected and approved for use in WLAN coverage. To review and revise the general AP policy, follow these steps: Go to Configure >...
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network TX Power Specifies the maximum transmit power level relative to the cal- ibrated power. Click OK to save your settings. FIGURE 3-8 Deploying ZoneDirector WLANs in a VLAN Environment...
Page 39
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network • Verifying that those trunk ports are on the same native VLAN All DNS, DHCP, ARP, HTTP traffic from an unauthenticated wireless client will be passed NOTE onto the ZoneDirector from the AP via the management VLAN. If the client belongs to a par- ticular VLAN, ZoneDirector will add the corresponding VLAN tag before passing traffic to the corresponding wired network.
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network Blocking Client Devices When users log into a ZoneDirector network, their client devices (for example, laptop com- puters and PCs) are recorded and tracked. If, for any reason, you need to block a client device from network use, you can do so with WebUI.
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network The status is changed to “Blocked”. This will prevent the listed device (and its user) from using your Ruckus WLAN. Reviewing a list of previously blocked clients Go to Configure > Access Controls.
Page 42
Ruckus Wireless ZoneDirector User Guide | Managing a Wireless Local Area Network When the RF scan is complete and ZoneDirector has recalibrated the Map View, you can assess your changes, and make further adjustments as needed. Assessing current performance by using the Access Point table Go to Monitor >...
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Using an External Authentication Server Once your wireless network is set up, you can instruct the Ruckus ZoneDirector to authenti- cate wireless users using your existing Active Directory server, an existing RADIUS server, or to create new user accounts in the internal user database.
Page 45
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access FIGURE 4-2 When the Create New form appears, make the following entries: • Click in the Name field and type a descriptive name (e.g., “Active Directory”). • Verify that “Active Directory” or “RADIUS” is selected as the Type.
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Adding New User Accounts to ZoneDirector Once your wireless network is set up, you can instruct the Ruckus ZoneDirector to authenti- cate wireless users using an existing Active Directory server or RADIUS server, or to authen- ticate users by referring to accounts that are stored in the ZoneDirector's internal user database.
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Managing Current User Accounts The ZoneDirector allows you to review your current user roster in the internal user data- base, and to make needed changes to existing user accounts as needed.
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Creating New User Roles The ZoneDirector provides a “Default” role that is automatically applied to all new user accounts. This role links all users to the internal WLAN and permits any user to obtain guest passes for on-site visitor use.
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Guest Pass If you want users with this role to have permission to generate guest passes, activate this option. When you are finished, click OK to save your settings. This role is ready for assignment to authorized users.
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access land on the redirected page(s), they are shown the expiration time for their guest pass. Click Apply to save your settings. Managing Guest Pass Access By default, all of your users are allowed to issue temporary “day use” guest passes for visi- tors and contractors.
Page 51
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Controlling guest pass generation privileges To deactivate the “guest pass” generation privilege granted to all basic “default” role users, follow these steps: Go to Configure > Roles. When the Roles and Policies page appears, a table lists all existing roles, including “Default”.
Page 52
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Open the Role menu and choose the assigned role for this user. NOTE You can edit an existing user account and reassign the pass-generator role, if you prefer. Click OK to save your settings. Be sure to communicate the role, user name and pass- word to the appropriate end user.
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Activating Web Authentication of Users Web authentication, when activated on an WLAN, compels all users to log in to a specific WLAN every time they connect. This is helpful if you are managing an Internet hotzone.
Ruckus Wireless ZoneDirector User Guide | Managing User and Guest Access Managing Automatically Generated User Certificates and Keys With Ruckus Zero-IT wireless activation, a unique key or certificate is automatically gener- ated for a user during the activation process. More precisely, for a WLAN configured with WPA-PSK/WPA2-PSK and Dynamic PSK enabled, a unique and random key phrase is gener- ated for each wireless user.
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network Reviewing the ZoneDirector Monitoring Options The following highlights key ZoneDirector tab options and what you can do with them. Dashboard Every time you log in to the ZoneDirector via WebUI, this collection of status surveys appears.
Page 57
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network Importing the floorplan image Go to Configure > Maps. FIGURE 5-1 Click Browse to open a dialog box that assists you in locating and “opening” an image. If the import is successful, a thumbnail version of the floorplan will appear in the Cur- rent Image area.
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network Using the Map View Tools If your worksite floorplan has been scanned in and mapped with APs, the Map View will dis- play a graphical image of your physical Ruckus network AP distribution.
Page 59
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network Search text box: Enter a string, such as part of an AP's name or MAC address, and the map is filtered to show only the matching results. Clearing the search value returns the map to its unfiltered view.
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network An unapproved AP marker displays a “?” (question mark) above the antenna. A rogue AP displays a smaller red icon imprinted with a “bug”. A disconnected AP displays a red “X” above the antennae.
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network Reviewing Recent Network Events You have two options for reviewing events in your network: [1] open a complete list of all events, or [2] look at specific lists of events in each Monitor tab workspace, such as the WLANs workspace “Events/Activities”...
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network Monitoring Access Point Status There are several ZoneDirector features you can take advantage of, to monitor the perfor- mance and status of your Ruckus wireless APs: Open the Dashboard for a snapshot view of the most active APs. Click the MAC address link of any AP record to see more details.
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network • AP: An access point unknown to the ZoneDirector. • AP (SSID-spoof): A rogue AP that uses the same SSID as ZoneDirector’s AP, also known as Evil-twin AP. • AP (MAC-spoof): A rogue AP that has the same BSSID (MAC) of one of the virtual APs managed by the ZoneDirector.
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network Moving the APs into more efficient positions You can now move the APs into more efficient positions. To do so, click and drag individual AP markers on the Map View floorplan until your RF coverage coloration is optimized.
Page 65
Ruckus Wireless ZoneDirector User Guide | Monitoring Your Wireless Network You can disable this feature by unchecking the check box, which results in a minor increase in AP performance, but removes the detection of rogue APs from ZoneDirec- tor monitoring.
CHAPTER 6 Setting Administrator Preferences Chapter Contents • “Changing the ZoneDirector Administrator User Name and/or Password” ..63 • “Changing the Language Used in WebUI” ......63 •...
Ruckus Wireless ZoneDirector User Guide | Setting Administrator Preferences Changing the ZoneDirector Administrator User Name and/or Password You should change your ZoneDirector administrator login password on a monthly basis, but the administrator user name should be changed only if necessary. To edit or replace the cur- rent name or password, follow these steps: Go to Admin >...
Ruckus Wireless ZoneDirector User Guide | Setting Administrator Preferences When the Preferences page appear, open the Language menu and choose the pre- ferred language. See “FIGURE 6-1” on page 63. This only affects how WebUI appears, and does not modify either system (OS) or browser ALERT! settings.
Ruckus Wireless ZoneDirector User Guide | Troubleshooting Tips Troubleshooting Failed User Logins SUMMARY: This “troubleshooting” topic addresses the problems that network users might have with configuring their client devices and logging into your Ruckus WLAN. At the end of the setup wizard, your Ruckus ZoneDirector automatically activates a default internal WLAN for authorized users.
Ruckus Wireless ZoneDirector User Guide | Troubleshooting Tips Fixing User Connections If any of your users report problematic connections to the WLAN, here is one debugging technique that may prove helpful. Basically, you will be deleting that user's client from the Active Clients table in the Ruckus ZoneDirector, and when their client connection automati- cally renews itself, any previous problems will hopefully be bypassed.
Ruckus Wireless ZoneDirector User Guide | Troubleshooting Tips If WLAN connection problems persist If the previous technique fails to resolve the user's client mis-connections, you may need to guide them through a full re-setting of their WLAN configuration. This requires your deleting the user record, then creating a new user record, at which time the user must repeat the “new user connection”...
Ruckus Wireless ZoneDirector User Guide | Troubleshooting Tips Starting a Radio Frequency Scan This task complements the automatic RF scanning feature that is built into the Ruckus Zone- Director. That automatic scan assesses one radio frequency at a time, every 20 seconds or so.
Ruckus Wireless ZoneDirector User Guide | Troubleshooting Tips Reviewing Self Healing and Intrusion Prevention Options This Ruckus network feature adds automatic network adjustments to the existing monitoring functions, so that the Ruckus ZoneDirector can efficiently shift AP-specific settings and resources to improve coverage.
Ruckus Wireless ZoneDirector User Guide | Troubleshooting Tips When the Save As dialog box appears, pick a convenient destination folder, type a name for the file, and click Save. When the Download Complete dialog box appears, click Close. After the file is saved, you can email it to the technical support representative.
Index AP markers overview 55 Symbols Access Points 31 .TGZ file extension detecting rogue devices 58 backup files 16 placing markers on a floorplan map 53 Numerics restarting 71 802.1x see also “Access Points” Client Authentication option 30 verifying new APs 31 user requirements 23 Archived ZoneDirector settings WLAN security 23...
Page 77
Ruckus Wireless ZoneDirector User Guide | Index Client devices Map View options 38 monitoring 36 New WLAN creation 27 permanently blocking WLAN access 36 option values 27 reviewing a list of blocked clients 37 Detecting rogue Access Points 58 temporarily disconnecting 36...
Page 78
Ruckus Wireless ZoneDirector User Guide | Index synchronizing 10 Network addressing updating/refreshing current settings 10 changing 9 using NTP 10 network performance Internal user database diagnosing 68 using for authentication 42 New User Accounts Intrusion prevention options 70 adding new accounts 42...
Page 79
Ruckus Wireless ZoneDirector User Guide | Index restarting a ZoneDirector 71 generating a debug file 70 Restarting an Access Point 71 manually scanning radio frequencies 69 Restoring archived settings 16 problems with user connections 66 reviewing AP policies 33 restarting the ZoneDirector 71...
Page 80
Ruckus Wireless ZoneDirector User Guide | Index Roles and Policies 44 WPA2 21 WebUI buttons explained 3 Zero IT Activation WebUI Dashboard New WLAN creation 28 explained 3 ZoneDirector WebUI tabs backing up settings 16 explained 3 changing network addressing 9...
Need help?
Do you have a question about the Wireless ZoneDirector and is the answer not in the manual?
Questions and answers