Page 1 SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1 Part Number: 800-71511-001 Published: 04 September 2017...
Page 2: Table Of Contents
Configuring General Settings..................28 Viewing System Settings...................28 Configuring System Time...................28 Configuring the Remote Syslog Server..............29 Configuring SCI Settings..................31 Setting the Northbound Portal Password............31 Enabling Global SNMP Notifications..............31 Configuring SMTP Server Settings..............35 SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 3 Understanding the System, Zones and AP Groups............67 Hierarchy Overview....................67 Working with AP Zones..................68 Working with AP Groups...................76 Monitoring Zones and AP Groups..............86 Viewing Modes......................89 AP Status........................89 Configuring Access Points...................89 SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 4 5 Managing Clients Working with Wireless Clients..................126 Viewing a Summary of Wireless Clients............126 Viewing Information about a Wireless Client.............128 Deauthorizing a Wireless Client................128 Blocking a Wireless Client................129 Unblocking a Wireless Client................129 SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 5 Creating a Guest Access Portal...............158 Working with Hotspot (WISPr) Services............160 Creating a Web Authentication Portal..............162 Creating a WeChat Portal................164 Working with Hotspot 2.0 Services..............165 Creating a UA Blacklist Profile................171 SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 6 Creating an Ethernet Port Profile..............224 Creating a Tunnel DiffServ Profile..............227 DHCP Relay....................228 Enabling Flexi VPN..................228 Enabling L3 Roaming Criteria for vDPs............229 Tunnel Encryption....................231 Forwarding Multicast Packets................231 Location Services......................232 DHCP........................234 SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 7 Managing Administrator and Roles................256 Creating User Groups..................256 Creating Administrator Accounts..............257 Creating a RADIUS Server for Administrator Authentication......258 Enabling the Access Control List..............259 Backing Up and Restoring Clusters................260 Creating a Cluster Backup................260 SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 8 12 Diagnostics Applying Scripts......................285 Applying AP CLI Scripts....................285 Viewing and Downloading Logs.................286 Available System Logs for SZ100..............287 Viewing RADIUS Proxy Settings................288 Appendix A: Ports to Open for AP-SCG/SZ/vSZ/vSZ-D Communication SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 9 No part of this documentation may be used, reproduced, transmitted, or translated, in any form or by any means, electronic, mechanical, manual, optical, or otherwise, without prior written permission of Ruckus Wireless, Inc. ( Ruckus”), or as expressly provided by under license from Ruckus.
Page 10 Notice type Description Information that describes important features NOTE: or instructions Information that alerts you to potential loss of CAUTION: data or potential damage to an application, system, or device SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 11 Document Conventions Notice type Description Information that alerts you to potential personal WARNING: injury SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 12 Documentation Feedback Documentation Feedback Ruckus Wireless is interested in improving its documentation and welcomes your comments and suggestions. You can email your comments to Ruckus Wireless at: docs@ruckuswireless.com When contacting us, please include the following information: • Document title • Document part number (on the cover page) •...
Page 13 Online Training Resources To access a variety of online Ruckus Wireless training modules, including free introductory courses to wireless networking essentials, site surveys, and Ruckus Wireless products, visit the Ruckus Wireless Training Portal at: https://training.ruckuswireless.com. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 14: Navigating The Dashboard
AP firmware deployed to the zone you are configuring is earlier than this release. To ensure that you can view and configure all new features that are available in this release, Ruckus Wireless recommends upgrading the AP firmware to the latest version.
Page 15: Web Interface Features
(not http) to the Management interface IP address to connect to the web interface. If a browser security warning appears, this is because the default SSL certificate (or security certificate) that the controller is using for HTTPS communication is signed by Ruckus Wireless and is not recognized by most web browsers.
Page 16 • Refresh—Refreshes the web page. • Global filter—Allows you to set the preferred system filter. • My Account link—Allows you to: • Change password • Set session preference • Log off SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 17: Changing The Administrator Password
1. From the Header bar, click admin and select Log off. The following message appears: Are you sure you want to log off? 2. Click Yes. The controller logs you off the web interface and the logon page appears. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 18: Configuring Global Filters
. The below figure appears. Figure 3: Global Filter Form 2. Select or clear the required system filters and click • Save—To save the filter settings with the default group. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 19: Warnings And Notifications
• System support has expired • Default 90-day AP license expiring soon • Default AP license has expired • Default 90-day RTU license expiring soon • RTU has expired SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 20: Setting Global Notifications
Settings (gear) icon. For more information on customizing the information displayed on the Health dashboard, see Customizing Health Status Thresholds on page 21. Figure 6: Health Workspace area SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 21: Understanding Cluster And Ap Health Icons
Dashboard form, click the Cluster Status or AP Status tab, and configure the following: • Cluster Status: Configure CPU, hard disk and memory usage percentages above which the cluster will be marked as flagged status. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 22 High sensitivity means that APs will more quickly alternate between flagged and non-flagged status. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 23: Using The Health Dashboard Map
AP on the map. You can also change the view mode altogether, from map view to Groups, Control Planes or Data Planes view mode using the settings menu. Figure 9: Configuring map s e t t i n g s SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 24: Traffic Analysis
Point (AP). You can view historical and real-time data of the AP. Throughput and the number of clients connected to the AP are displayed in a bar chart. You must configure the AP settings to view its traffic analysis. To configure the AP settings: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 25 • Topology—To view the location map. • Bytes—To view the throughput. • Clients—To view the client details. 7. Select the following mouse-scroll behavior when you point the mouse over a map: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 26: Configuring Traffic Analysis Display For Wlans
• OS Type—Types of OS the associated clients are using • Application—Throughput the applications use You must configure the Client settings to view its traffic analysis. To configure the Client settings: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 27 • Select the Type of display you want to view. For example, Chart or Table. • Select the required Client identification option to be displayed. For example, Name, MAC or IP. • Click OK. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 28: Configuring System Settings
The controller uses an external network time protocol (NTP) server to synchronize the times across cluster nodes and managed access points. To edit the system time: 1. Go to System > General Settings > Time. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 29: Configuring The Remote Syslog Server
3. Choose the Protocol type. server is unavailable. 4. Click Ping Syslog Server. If the syslog server is reachable, a flashing green circle and the message Success appears after the button. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 30 Error, Warning, Info controller. and Debug, for the following event severities: • Critical • Major • Minor • Warning • Informational • Debug SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 31: Configuring Sci Settings
Both SNMPv2 and SNMPv3 can be enabled at the same time. The SNMPv3 framework provides backward compatibility for SNMPv1 and SNMPv2c management applications so that existing management applications can still be used to manage the controller with SNMPv3 enabled. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 32 4. Click OK. Configuring SNMP v3 Agent 1. Go to System > General Settings > SNMP Agent. 2. Select the Enable SNMP Notifications Globally check box to send out notification messages. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 33 Standard, data block cipher. 3. Enter a Privacy Phrase, 8 through 32 characters. • MD5—Message-Digest algorithm 5, message hash function with 128-bit output. 1. Enter the Auth Pass Phrase. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 34 You can also edit or delete an SNMPv3 agent. To do so, select the SNMPv3 agent NOTE: from the list and click Configure or Delete respectively. 4. Click OK. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 35: Configuring Smtp Server Settings
5. Enter the FTP Host, IP address of the FTP server. 6. Enter the FTP Port, number. The default FTP port number is 21. 7. Enter a User Name for the FTP account that you want to use. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 36: Configuring The Sms Gateway Server
• automatically, select the Automatically approve all join requests from APs check box. • manually, clear the Automatically approve all join requests from APs check box. This option enhances wireless security. 3. Click OK. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 37: Working With Ap Registration Rules
NOTE: command line interface. 6. Click OK. When the process is complete, the page refreshes, and then registration rule that you created appears on the AP Registration Rules page. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 38: Creating Vsz-D Zone Affinity
• In the first box, enter the value that you want to set as the traffic threshold. This value will be applied in conjunction with the data unit that you select in the second box. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 39: Configuring The Tunnel Udp Port
• From the left pane of the application, click System > Cluster. The Cluster page appears as shown in Figure 14: System Cluster Overview on page 39. Figure 14: System Cluster Overview SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 40: Control Planes And Data Planes
• Real Time Data, enter the duration in minutes and click Start. Figure 15: Cluster Node Traffic and Health. on page 40 appears. Figure 15: Cluster Node Traffic and Health. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 41: Interface And Routing
UDI are on the same subnet and assigned different IP addresses, hotspot clients will not be redirected to the logon URL for user authentication. The user defined interface (UDI) is unavailable in Virtual SmartZone (High-Scale and NOTE: Essentials). SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 42: Displaying The Chassis View Of Cluster Nodes
• To configure cluster redundancy, you will need to retrieve the IP addresses assigned to the control interfaces of all nodes on clusters that you want to configure. Figure 17: Cluster Redundancy SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 43 3. If managed APs are unable to connect to the IP addresses specified for Cluster A, they will attempt to connect to the IP addresses (one node at a time) specified for Cluster B. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 44: Configuring The Control Plane
• Enter the Gateway router address. • Enter Control NAT IP address. • DHCP—To automatically obtain an IP address from a DHCP server on the network. • Enter Control NAT IP. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 45 SZ300 controllers) (recommended)—To manually assign an IP address to this interface manually. • Enter the IPv6 IP Address (global only) with a prefix length (for example, 1234::5678:0:C12/123) is required. Link-local SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 46 • Enter the IPv6 Gateway address (global or link-local) without a prefix length. For example, 1234::5678:0:C12 (global address without a prefix length) and fe80::5678:0:C12 (link-local address without a prefix length). SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 47 If the control plane and UDI are on the same subnet and assigned different IP addresses, hotspot clients will not be redirected to the logon URL for user authentication. Name Indicates the name of the Enter a name. interface. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 48 AP rebalancing helps distribute the AP load across nodes that exist within a cluster. When a multi-node cluster is upgraded, the node that reboots the last typically does not have any APs associated with it. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 49 To rebalance APs across the nodes: 1. Go to System > Cluster > Control Planes > More > Rebalance APs. Figure 18: AP Rebalancing Form SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 50: Monitoring Cluster Settings
• Severity: Select the severity level by which you want to filter the list of events. • Date and Time: Select the events by their Start and End dates. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 51: Working With Maps
APs in their respective physical locations on the map, and scaling the map to match the actual dimensions of your venue. Floorplan maps allow you to view site/venue/floor-specific details such as: • AP status, performance, and health conditions SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 52 6. To add a Map Image, click Browse and select a site, venue, or floor map in jpg, jpeg, png, bmp or svg file formats. NOTE: The maximum file size per indoor map is 5MB. 7. Click Next, the Scale Map tab appears. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 53 (if you entered the GPS coordinates correctly). The Dashboard icon that represents your venue provides an overview of the number of APs in the venue and their status. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 54: Monitoring Aps Using The Map View
• Traffic: The total traffic volume over the last 1 hour. • Latency: The average time delay between AP and connected clients. • Airtime Utilization: Percent of airtime utilized, by radio. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 55: Certificates
All the security certificates that the controller uses for its web interface, AP portal, and hotspots are managed from a central storage. By default, a Ruckus Wireless-signed SSL certificate (or security certificate) exists in the controller. However, because this default certificate is signed by Ruckus Wireless and is not recognized by most web browsers, a security warning appears whenever you connect to the web interface or users connect to the AP portal or a hotspot.
Page 56: Assigning Certificates To Services
If you do not have an SSL certificate, you will need to create a certificate signing request (CSR) file and send it to an SSL certificate provider to purchase an SSL certificate. To create a CSR file: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 57: Managing Ap Certificates
2. In the AP Request List area, those APs with the Need Export column marked Yes needs certificate replacement. Those marked with No means that the certificate request has already been exported. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 58: Importing Trusted Ca Certificates
9. From the Certificate Renewal Request page, check the Status column of your request. After the request is processed, you will receive the response from Ruckus Wireless, with a link to the .res response file for Import on the Certificate Refresh page.
Page 59: Configuring Templates
Select the country code. ensure that this zone uses authorized radio channels. Location Indicates generic location. Enter the location. Location Additional Indicates detailed location. Enter additional location Information information. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 60 Select the check boxes. Indoor want the 5GHz radios to operate. Channel Range (5G) Indicates for what channels Select the check boxes. Outdoor want the 5GHz radios to operate. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 61 GRE Tunnel Profile Indicates the tunnel profile. Select the required option or click Create and enter the following details: • Name • Description • Ruckus Tunnel Mode • Tunnel Encryption SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 62 1. Enter the Auth Pass Phrase 2. Select the Privacy option. For DES and AES options, Enter the Privacy Phrase. 3. Select the required Privilege: Read or Write. 4. Click OK. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 63 • duration in seconds to Block a client for • number of repeat authentication failures • duration in seconds to be blocked for every repeat authentication failures. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 64 Zone Templates form appears. 3. From Select AP Zone, select the required zone. 4. Click Apply. Exporting Zone Templates You can export a zone template. To export a zone template: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 65: Working With Wlan Templates
2. From the list, select the WLAN template that you want to apply and click Apply. The Apply WLAN Template to selected zones form appears. 3. From Select AP Zone, select the required zone. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 66 Configuring System Settings Configuring Templates 4. Click Apply. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 67: Working With Access Points
You can virtually split them using the following hierarchy: • System—Highest order that comprises of multiple zones • Zones—Comprises of multiple AP groups • AP groups—Comprises of multiple APs • APs—Individual access points. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 68: Working With Ap Zones
Understanding the System, Zones and AP Groups Working with AP Zones An AP zone functions as a way of grouping Ruckus Wireless APs and applying a particular set of settings (including WLANs and their settings) to thise group of Ruckus Wireless APs. Each AP zone can include up to 27 WLAN services.
Page 69 Select the firmware. it applies. Country Code Indicates the country code. Select the country code. Using the correct country code helps ensure that APs use only authorized radio channels. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 70 5GHz radio that you want managed indoor APs to operate. Channel Range (5G) Indicates the channels on the Select the check boxes. Outdoor 5GHz radio that you want managed outdoor APs to operate. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 71 Configuration > AP GRE Tunnel Options Tunnel Type Indicates the supported tunnel Choose : type (Ruckus GRE, SoftGRE • Ruckus GRE and select the and SoftGRE+IPsec) GRE Tunnel Profile. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 72 Target IP and Target Port. 6. Click OK. DHCP Service for Wi-Fi Clients Enable DHCP Service in Enables the DHCP service for Select the check box. this zone this zone. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 73 • Enable events and alarms for only malicious rogue devices of selected type and select the Rogue Type: • SSID Spoofing • Same Network • MAC Spoofing SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 74 While Background Scanning must be enabled for rogue AP detection, AP location detection and radio power adjustment, either can be used for automatic channel optimization. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 75 You can, if you prefer, customize the automatic scanning of RF activity, deactivate it if you feel it's not helpful, or adjust the frequency, if you want scans at greater or fewer intervals. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 76: Working With Ap Groups
Follow these steps to create an AP group. 1. From the left pane, select Access Points. The below figure appears. Figure 28: Access Point SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 77 3. Enter the details as explained in the follwoing table. 4. Click OK. Table 10: AP Group Details Field Description Your Action Name Indicates a name for the Enter a name. Zone/AP group. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 78 5GHz radios of managed indoor APs to operate. Channel Range (5G) Indicates for what channels Select the check boxes. Outdoor want the 5GHz radios of managed outdoor APs to operate. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 79 • WLAN Group—Specify to which WLAN group this AP group belongs. Configuration > AP SNMP Options Override zone Indicates that the AP Group Select the check box. configuration configuration overrides the zone configuration. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 80 Enables the external 2.4 GHz Select the Enable external GHz) antenna on the selected AP antenna check box, and then set model. the gain value (between 0 and 90dBi) in the box provided. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 81 • Select the Type. • Enter the WLAN Metrics. AP Management VLAN Indicates the AP management Choose the option. Click VLAN ID, VLAN settings. and then type the VLAN ID that you SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 82 The options that appear in the General Options section depend on the AP model NOTE: that you select. Not all the options described in the table below will appear for every AP model. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 83 Enable external antenna check box, and then set the gain value (between 0 and 90dBi) in the box provided. 6. In the Port Settings section, configure the following options for each LAN port. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 84 Supported LLDP Attributes The Link Layer Discovery Protocol (LLDP) is a vendor-neutral Layer 2 protocol that allows a network device (for example, a Ruckus Wireless AP) to advertise its identity and capabilities on the local network. LLDP information is sent by devices from each of their interfaces at a fixed interval (default is 30 seconds), in the form of an Ethernet frame.
Page 85 VLANs, thereby separating the traffic on these ports from traffic on other VLANs. General ports are user-defined ports that can have any combination of up to 20 VLAN IDs assigned. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 86: Monitoring Zones And Ap Groups
Table 11: System, Zone, and AP Groups Monitoring Tabs Tabs Description System Zone AP Groups General Displays group information Configuration Displays group configuration information. Health Displays historical health information. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 87 4. Click OK, a message appears stating that the zone template was extracted successfully. 5. Click OK. You have completed extracting a zone template. The extracted Zone template can be viewed under System > Templates > Zone Templates. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 88 3. Select the Switchover Cluster from the drop-down. 4. The control IP configured while enabling cluster redundacy is listd in the IPv4 List. 5. Click OK, the system refreshes. You have configured the cluster switchover settings. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 89: Viewing Modes
Your Action AP Configuration > General Options Indicates the name of the AP. Enter a name. AP Name Description Gives a short description of the Enter a short description. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 90 20 or 40 (MHz), or select Auto to set it automatically. • Channel—Select the channel to use for the b/g/n (2.4GHz) radio, or select Auto to set it automatically. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 91 Select the check box settings. SNMPv2 Agent Allows you to add users to 1. Click Create and enter SNMPv2 Agent. Community. 2. Select the required Privilege. If you select SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 92 Allows you to operate using Select the option. PoE mode. Port Settings Indicates the port settings. Select the option and choose the required LAN option. AP Configuration > Advanced Options SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 93 AP at which it will stop update the following details: accepting new clients. • Min Client Count • Max Radio Load • Min Client Throughput Swap Configuration SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 94: Managing Access Points
• Status • Configuration Status • Registered On (date the access point joined the controller network) • Registration Details • Registration State • Actions (actions that you can perform) SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 95: Downloading The Support Log From An Access Point
® The support log contains important technical information that may be help Ruckus Wireless Support troubleshoot the issue with the access point. Follow these steps to download the support log from an access point.
Page 96 • Swap In AP Model • Swap Out AP MAC The exported CSV file for batch swapping APs only contains swapping APs. It NOTE: does not contain pre-provisioned APs or auto discovered APs. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 97: Editing Swap Configuration
3. Select the AP zone to which you want to move the access point. 4. Click OK. You have completed moving an access point to a new AP zone. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 98: Monitoring Access Points
Access Point on page 95. • Trigger AP Binary Log - Triggers binary log for the selected AP. • Download CM Support Log - Downloads Cable Momdem support log. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 99 • Swap - Swaps current AP to swap-in AP. See, Editing Swap Configuration on page 97. • Approve - Approves AP and completes registering. See, Working with AP Registration Rules on page 37. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 100: Working With Wlans And Wlan Groups
The following WLAN details can be viewed regardless of the mode selected: • Name • Alert • SSID • Auth Method • Encryption Method • Clients • Traffic • VLAN SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 101: Wlan Groups
5. Click Next, The Create WLAN Group form appears. 6. Click OK. You can also edit, clone, and delete WLAN group by selecting the options Configure NOTE: Clone , and Delete respectively, from the Wireless LANs page. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 102: Creating A Wlan Configuration
System tree hierarchy, select the Zone where you want to create a WLAN. Figure 30: Wireless LANs 2. Click Create, Figure 31: Create WLAN Configuration on page 102 appears. Figure 31: Create WLAN Configuration SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 103 Guest Access are not workflows) or WISPr. supported by APs in IPv6 mode. Hotspot (WISPr) applies to NOTE: WLAN traffic that is tunneled and not tunneled. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 104 PSK-based encryption can be supported. • 802.1x EAP—A very secure authentication/encryption method that requires a back-end authentication server, such as a RADIUS server. Your choice mostly depends on the types of SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 105 Wireless recommends and enter the Mobility against using WEP if Domain ID. possible. • the required 802.11w MFP option. 4. Dynamic PSK • Disable • Internal • Enter DPSK Length SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 106 4. Select Enable 802.11 Fast BSS Transition. 5. Enter the Mobility Domain ID. 6. Dynamic PSK • Disable • Internal • Enter DPSK Length • Choose DPSK Type • Select DPSK Expiration SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 107 Hotspot Portal (for WLAN Authentication Type: Hotspot (WisPr)) Hotspot (WISPr) Defines hotspot behavior, Select the hotspot portal profile that you Portal like redirects, session want this WLAN to use. timers, and location SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 108 Additionally, if you want the controller to WLAN. proxy accounting messages to the AAA server, select the Use the Controller as Proxy check box. Authentication & Accounting Server (for WLAN Authentication Type: Web Authentication) SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 109 We Chat Portal (for WLAN Authentication Type: We Chat) We Chat Portal Defines the We Chat Select a We Chat portal service. authentication URL, DNAT destination, and other information. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 110 • AP MAC • User-defined NAS Request Timeout Indicates the duration Enter the timeout period (in seconds). after which an expected RADIUS response message is considered to have failed. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 111 L2 access control policy. OS Policy Enables the WLAN to Select the required option. apply a unique policy to a device based on OS type. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 112 WLAN. the option is selected. Proxy ARP Enables proxy ARP. When Select the check box. proxy ARP is enabled on a WLAN, the AP provides proxy service for stations SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 113 Enhances roaming by Select the check box. Report providing a list of neighbor APs to the client device. APs build a neighbor AP list via background scanning, and when the SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 114 Stops the controller from Select the check box. monitoring traffic statistics for unauthorized clients. Inactivity Timeout Indicates the duration Enter the duration in seconds. after which idle clients will be disconnected. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 115 WLAN and apply it, but prevent it from advertising until ready. The"specific" setting allows a configurable schedule based on time of day and days of the week. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 116 Range: 1 mbps through 200 of this feature is to prevent mbps. the combined throughput form all users of an SSID from exceeding this threshold. This feature is different from per-user SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 117 Flexi-VPN Profile Forwards tunneled traffic Choose the DHCP Profile from the to another remote drop-down. instance through RuckusGRE Tunnel. This feature is NOTE: applicable only to vSZ-E platform. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 118: 802.11 Fast Bss Transition
In some situations, the ability to skip the login page for open WLANs is a benefit. However, for other guest or public access designs, the lack of ability to control the entire web authentication process is not desirable. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 119: Client Admission Control
• The load balancing rules apply only to client devices; the AP always responds to another AP that is attempting to set up or maintain a mesh network. • Load balancing does not disassociate clients already connected. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 120: Mobility Domain Id
• Does not provide and option to modify the portal (WYSIWYG) • User authentication is done by the RADIUS server, LDAP and Active Directory • Allows redirecting user web pages • Guest WLAN SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 121: Rate Limiting Ranges For Policies
6.50Mbps. For SmartZone release 3.1.x, the APs support the following rate limiting values: NOTE: • 0.10Mbps • 0.25Mbps - 20.00Mbps (increments by 0.25Mbps) • 30.00Mbps • 40.00Mbps • 50.00Mbps SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 122: Working With Wlan Schedule Profiles
WLAN in Los Angeles to turn on at 9 AM and your browser was set to New York time, please configure the WLAN service schedule to enable the WLAN at noon. When configuring the service schedule, all times are based on your browser's timezone setting. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 123: Managing Wlans
Alarm Displays the respective alarms information. See Managing Events and Alarms on page 281. Event Displays the respective event information. See Managing Events and Alarms on page 281. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 124: Extracting A Wlan Template
2. Click More and select Apply WLAN Template, the Apply WLAN Template dialog box appears. 3. From the Select a WLAN template drop-down, select the template. 4. Click OK, a confirmation message appears asking to apply the wlan templates to the zone. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 125: Changing The Zone's Ap Firmware Version
2. Click More and select Switchover Cluster. The Switchover Cluster dialog box appears. 3. Select the Switchover Cluster from the drop-down. 4. Click OK, the page refreshes. You have configured the cluster switchover settings. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 126: Managing Clients
Displays the hostname of the wireless client OS Type Displays the operating system that the wireless client is using IP Address Displays the IP address assigned to the wireless client SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 127 Displays the authentication method used by the AP to authenticate the wireless client Auth Status Indicates whether the wireless client is authorized or unauthorized to access the WLAN service Encryption Displays the encryption method used by the AP SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 128: Viewing Information About A Wireless Client
3. When you have located the client, select it, and then click the Deauthorize button above the table. The table refreshes, and then the client that you deauthorized disappears from the list. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 129: Blocking A Wireless Client
MAC address of the client, enter the MAC address in the search box, and then press <Enter> to search for the client. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 130: Working With Wired Clients
2. From the list of wired clients, locate the client whose details you want to view. 3. Under the MAC Address column, click the MAC address of the wired client. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 131: Deauthorizing A Wired Client
2. Select the User Roles tab, and then select the zone for which you want to create the role. 3. Click Create. The Create User Role page appears. Figure 32: Create User Role SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 132: Creating A User Role With Active Directory Authentication
Creating a User Traffic Profile on page 173. 2. Create a role, refer Creating a User Role on page 131. 3. Create a new Proxy AD server and apply the UTP. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 133: Creating A User Role With 802.1X Authentication
AAA profiles. Also, there are some components that will not work in 3.5, even though the GUI would lead us to believe they do. For example, SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 134: Creating A Local User
2. Select the Local Users tab, and then select the zone for which you want to create the local user. 3. Click Create. The Create User page appears. Figure 33: Create User 4. Configure the options in the Create User form. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 135 CSV file. You can also edit, clone and delete user by selecting the options Configure, Clone and NOTE: Delete respectively, from the Local Users tab. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 136: Creating A Subscription Package
You have completed creating a subscription package. You can also edit and delete a package by selecting the options Configure and Delete NOTE: respectively, from the Subscription Package tab. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 137: Working With Guest Passes
WLAN back to the controller. b) In Authentication Type, click Guest Access. 5. Configure the rest of the WLAN settings. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 138 If you are generating more than one guest pass, the Auto Generate check box is selected automatically and is not configurable. b) Pass Effective Since: Set the guest pass validity period by selecting one of the following options: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 139 • Event: Displays information about events associated with the user. Click the icon to apply filters. Click the icon to export all the data into a CSV file. Figure 36: Generating a guest pass SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 140 The page that appears after you generate a guest pass contains options for delivering the guest pass to guest users (see the following image). Figure 37: Options for delivering guest passes to guest users SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 141: Creating A Guest Pass Template
See the following image for the content of the default printout template. Figure 38: Content of the default printout templ a te 7. Insert the following variables into the content of your template: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 142: Creating A Guest Instruction Sms Template
2. Click Guest Pass Template. The Guest Pass Template page appears. 3. In the Guest Instruction SMS Template section, click default.txt, which is the default guest pass printout template. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 143 An information message box appears and informs you that the template file has been uploaded successfully. 12. Click OK. The template file you uploaded now appears in the list of templates. Figure 41: The Upload a Template File form SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 144: Exporting The Guest Pass To Csv
• Expiration Date • WLAN You have completed exporting the last generated guest passes to CSV. Figure 42: A sample CSV of generated guest passes when opened in Excel SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 145: Generating Guest Passes From An Imported Csv
• Key: Enter a guest pass key or leave it blank so the controller can generate the key automatically. Figure 43: The sample CSV file when opened in Excel SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 146 • Limited to [ ]: If you want a limited number of users to share this guest pass, click this option, and then type the number in the box. • Unlimited: If you want an unlimited number of users to share this guest pass, click this option. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 147: Printing The Guest Pass
3. Click Print Selected. A new browser page appears, which displays the guest pass and available printing options. 4. Configure your printer settings, and then print the guest passes. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 148: Sending The Guest Pass Via Email
7. Click OKto close the dialog box. You have completed sending guest passes via email. Figure 46: Use the Recipient Email form to specify who will receive the guest passes via email SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 149: Sending The Guest Pass Via Sms
After the validity period ends, the DPSK expires and the student's device can no longer access the school's WLAN. Without the use of DPSKs, the school administrator would have to SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 150 AP) so that the DPSK is maintained in one place. There is no limitation on the number of DPSK supported in this mode. Only proxy AAA authentication is supported for External DPSK. NOTE: External DPSKs are supported only on bounded DPSKs. NOTE: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 151: Viewing Dynamic Psks
AP zone and a maximum of 20,000 DPSKs can be included within a cluster (Carrier: per Domain. Enterprise: System), and up to 50,000 DPSKs an be included within a cluster SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 152: Importing Dynamic Psks
A sample CSV file is displayed as show in the figure. Figure 48: Sample CSV 3. Modify the CSV file as appropriate and save it. The following are the fields that need to be completed in the CSV file: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 153 8. Click Download CSV to download a CSV that contains the generated DPSKs. The CSV file appears in the following format. Figure 49: New CSV f o r m a t You have completed generating DPSKs. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 154: Creating An External Dpsk Over Radius Wlan
3. Create Zone Configuration. Refer, Creating an AP Zone on page 68. 4. Create WLAN Configuration for DPSK. Refer, Creating a WLAN Configuration on page 102. Figure 50: External DPSK Configuration SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 155: Application Recognition And Control
If Application Recognition and Control is unable to find an application name, it displays NOTE: the source and destination IP: port address of the application Figure 51: Top Applications - Chart View SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 156 From the Total option, you can also filter the data based on the radio frequencies (2.4 GHz and 5 GHz). Figure 53: Click an application to view top client details SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 157 You can configure application control policies (denial, rate limiting, and QoS) using the NOTE: Services and Profiles > Application Control page. For more information, see Configuring Application Controls on page 186. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 158: Services And Profiles
1. Go to Services & Profiles > Hotspots & Portals. 2. Select the Guest Access tab, and then select the zone for which you want to create the portal. 3. Click Create. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 159 Show Terms and Conditions check box. The box below, Terms and Conditions which contains the default Terms of Use text, becomes editable. Edit the text or leave it unchanged to use the default text. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 160: Working With Hotspot (Wispr) Services
Services and Profiles Working with Hotspots and Portals • Web Portal Logo: By default, the guest hotspot logon page displays the Ruckus Wireless logo. To use your own logo, click the Browse button, select your logo Web Portal Logo (recommended size is 138 x 40 pixels, maximum file size is 20KB), and then click Open.
Page 161 • Start Page: select one of the following • Redirect to the URL that the user intends to visit: You could redirect users to the page that they want to visit. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 162: Creating A Web Authentication Portal
1. Go to Services & Profiles > Hotspots & Portals. 2. Select the Web Auth tab, and then select the zone for which you want to create the portal. 3. Click Create. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 163 • Grace Period: Set the time period (in minutes) during which disconnected users are allowed access to the hotspot service without having to log on again. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 164: Creating A Wechat Portal
1. General Options • Name: Type a name for the portal that you are creating. • Description: Type a short description of the portal. 2. Portal Settings: configure the following SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 165: Working With Hotspot 2.0 Services
SSIDs to choose from, the Hotspot 2.0 client can automatically select and authenticate to an SSID based on the client's SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 166 2. Description: Enter a description for the WLAN profile. 3. Operator: Select the operator profile. This name identifies the service operator when assigning an HS2.0 service to a HS2.0 WLAN. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 167 1. Go to Services & Profiles > Hotspots & Portals. 2. Select the Hotspot 2.0 tab, and then select the device for which you want to create the profile. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 168 There can be one or more identity providers per Hotspot 2.0 access WLAN. To configure the HS 2.0 identity provider, you must configure the following: Network Identifier Follow these steps to create a Hotspot 2.0 Identity Provider - Network Identifier. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 169 • Common Language Icon: This is the default icon presented in the device for this identity provider in case the device does not find any match for other icons per language in the table. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 170 2. Select the Hotspot 2.0 tab, and then select the zone for which you want to create the profile. 3. Click Create. The Create Hotspot 2.0 Venue Profile page appears. Figure 61: Creating a Hotspot 2.0 Venue Profile SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 171: Creating A Ua Blacklist Profile
Creating a UA Blacklist Profile The controller automatically blocks certain user agents (or software used by a user) from accessing hotspots provided by controller-managed APs. When the controller blocks any of these user SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 172 The Creating a UA Blacklist Profile page appears. Figure 62: Creating a UA Blacklist Profile 4. Configure the following: 1. Name: Type a name of the user agent. 2. User Agent Pattern: Type the agent pattern. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 173: Configuring Access Control
3. Click Create. The Create User Traffic Profile page appears. Figure 63: Create User Traffic Profile 4. Configure the following: 1. Name: Type a name for the user profile. 2. Description: Type a short description for this profile. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 174 • Description: Type a short description for the user traffic rule. • Access: Select Allow or Block depending on whether you want to set this rule as the default rule. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 175 Follow these steps to create and application policy: 1. Click Create. The Create Application Policy page appears. Figure 65: Creating an Application Policy Rule 2. Configure the following: • General Options: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 176: Creating Os Policy Service
2. Select the OS Policy tab, and then select the zone for which you want to create the policy. 3. Click Create. The Create OS Policy Service page appears. Figure 67: Creating an OS Policy Service SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 177 Creating OS Policy Rules You can create rules for every OS policy service that you create. 1. Click Create. The Create OS Policy Rule page appears. Figure 68: Create OS Policy Rule SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 178: Creating A Vlan Pooling Profile
2. Select the VLAN Pooling tab, and then select the zone for which you want to create the profile. 3. Click Create. The Create VLAN Pooling page appears. Figure 69: Creating a VLAN Pooling Profile SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 179 To use the VLAN pooling feature, you first need to create a VLAN pooling profile, and then you can assign the profile to a specific WLAN or override the VLAN settings of a WLAN group. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 180: Create Precedence Profile
3. Rate Limiting Precedence: Use the Up and Down options to set the Rate Limit priority. When SSID Rate Limiting (restricts total usage on WLAN) is enabled, per-user rate NOTE: limiting is disabled. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 181: Creating An L2 Access Control Service
Figure 71: Creating an L2 Access Control Service 4. Configure the following: 1. General Options: • Name: Type a name for this policy. • Description: Type a short description for this policy. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 182: Creating Blocked Clients
2. Select the Blocked Client tab, and then select the zone for which you want to block the client access. 3. Click Create. The Create Blocked Client page appears. Figure 72: Create Blocked Client SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 183: Creating A Client Isolation Whitelist
1. Go to Services & Profiles > Access Control. 2. Select the Client Isolation Whitelist tab, and then select the zone for which you want to specify the list of approved clients. 3. Click Create. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 184: Creating Time Schedules
You can control client access to the network by providing a time schedule within which the device can access the network. 1. Go to Services & Profiles > Access Control. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 185: Creating A Dns Server Profile
2. Select the DNS Servers tab, and then select the zone for which you want to create the profile. 3. Click Create. The Create DNS Server Profile page appears. Figure 75: Creating a DNS Server Profile SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 186: Configuring Application Controls
Additionally, you can create your own user-defined applications, import an updated application signature package, and configure rate limiting and QoS traffic shaping policies based on system-defined or user-defined applications. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 187: Creating An Application Control Policy
5. In Rules, click Create to create a new rule. Each application policy can contain up to 32 rules. The Create Application Policy Rule page appears. Figure 77: Creating an Application Policy Rule SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 188: Implementing An Application Control Policy
9. Expand the Advanced Options section, and select a User Traffic Profile you created from the drop-down list. Alternatively, click Create to create a new UTP. 10. Click OK to save your WLAN changes. Figure 78: Create a User Traffic Profile (UTP) SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 189 Services and Profiles Configuring Application Controls Figure 79: Select an Application Policy to apply to this UTP Figure 80: Apply the UTP to a WLAN SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 190: Creating A User Defined Application
5. Destination Port: Type the destination port for the application. 6. Protocol: Select the protocol used by the application. Options include TCP and UDP. 7. Click OK. You have created the user defined application. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 191: Creating An Application Control Policy
5. In Rules, click Create to create a new rule. Each application policy can contain up to 32 rules. The Create Application Policy Rule page appears. Figure 83: Creating an Application Policy Rule SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 192: Working With Application Signature Package
Next, you can continue to apply the application control policy to user traffic, as described in Implementing an Application Control Policy. Working with Application Signature Package Ruckus Wireless will periodically release and make new application signature packages available for download. Download the latest application signature package to a local folder and perform the following procedure: •...
Page 193 1. In the Access Point, enter the Privileged EXEC mode using CLI. 2. Enter the following CLI command, which displays the latest version of the signature package. rkscli:get tdts-sigpack Current TDTS Signature Package is Ruckus-SigPack-Ver-x.xx.trf SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 194: Authentication
4. Configure the following: 1. General Options • Name: Type a name for the AAA server that you are creating. • Description: Type a short description of the AAA server. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 195 • Key Attribute: Type a key attribute to denote users (for example, default: uid) • Search Filter: Type a search filter (for example, objectClass=Person). 5. Click OK. You have completed creating a Non-proxy AAA server. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 196: Creating Proxy Aaa Servers
Testing AAA Server (Auth) To ensure that the controller administrators will be able to authenticate successfully with the RADIUS server type that you selected, Ruckus Wireless strongly recommends testing the AAA server after you set it up. The test queries the RADIUS server for a known authorized user and return groups associated with the user that can be used for configuring roles within the controller.
Page 197 • LDAP, configure the following: 1. Select the Enable TLS Encryption check box if you want to use the Transport Layer Security (TLS) protocol to secure communication with the server. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 198 These are the Radius service options available for the primary and secondary servers. RFC 5580 Out of Band Location Delivery: If you want out-of-band location delivery (RFC 5580) to apply only to Ruckus Wireless APs, select the Enable for Ruckus AP Only check box. Table 21: Primary Server Options Configure the primary RADIUS server settings.
Page 199 Table 23: Health Check Policy These options define the health monitoring settings of the primary and secondary RADIUS servers, when the controller is configured as RADIUS proxy for RADIUS Authentication and Accounting messages. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 200 The default Revive Interval is 120 seconds. No Response Fail Click Yes to respond with a reject message to the NAS if no response is received from the SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 201 Testing AAA Servers To ensure that the controller administrators will be able to authenticate successfully with the RADIUS server type that you selected, Ruckus Wireless strongly recommends testing the AAA server after you set it up. 1. Go to Services & Profiles > Authentication.
Page 202: Authentication Support Matrix
AAA server through the controller. Authentication Support Matrix It is important to understand the compatibility between AAA servers and different WLANs. Proxy Mode In proxy mode, authentication requests are set through the controller. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 203 IDM-provisioned local databases are not supported. Table 26: Non-proxy Mode Compatibility Authentication 802.1X Zero-IT HS 2.0 HS 2.0 Web Auth Hotspot/WISPr Source Onboard Onboard Secure Active Directory RADIUS Yes* LDAP OAuth - Google/FB/LinkedIn SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 204 Profiles configure a NonProxy AAA profile globally and then use it across zones Dynamic Policy Assignment (Proxy Authentication Types) The following table details dynamic policy assignments across authentication types. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 205 ACL and Rate Limiting policies. Dynamic Ability to VLAN / assign a VLAN user to a Pool VLAN through a VLAN attribute from RADIUS, AD, LDAP, OAuth. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 206 ACL to a user through an attribute from RADIUS, AD, LDAP, OAuth. Dynamic Ability to Rate Limit assign a specific Rate Limit to a user through an attribute from RADIUS, SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 207 ACL and rate limit. Dynamic ACL Ability to assign a specific ACL to a user through an attribute from the authentication source. ACLs are a NOTE: part of a UTP. If you SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 208 LDAP serve. Only Non-Proxy LDAP is NOTE: supported at the Zone Level. Test AAA - OAuth Ability to test a specific username/password against a configured OAuth server. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 209 MAC Auth Notes WISPr Proxy-Mode Active Directory Yes* PAP / CHAP is supported for Web Authentication HotSpot/WISPr. NOTE: interface (AD) is required WebAuthenti c ai t on (CHAP) and SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 210 WebAuthenti c ai t on (CHAP) and 802.1X (MSCHAPv2). Non-proxy Mode Active Directory Yes* RADIUS Yes* LDAP Yes* (*) This is an AP CLI setting: NOTE: set aaa auth-method pap|chap SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 211: Accounting
4. Configure the following: 1. General Options • Name: Type a name for the AAA server that you are creating. • Description: Type a short description of the AAA server. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 212: Creating Proxy Accounting Aaa Servers
2. Select the Proxy tab, and then select the zone for which you want to create the AAA server. 3. Click Create. The Create Accounting Service page appears. Figure 89: Creating an Accounting Service SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 213: Bonjour
This is by design to prevent flooding a large network with multicast traffic. However, in some situations, a user may want to offer Bonjour services from one VLAN to another. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 214: Bonjour Gateway
2. Select the Gateway tab, and then select the zone for which you want to create the policy. 3. Click Create. The Create Bonjour Policy page appears. Figure 90: Creating a Bonjour Gateway Policy SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 215 You may now continue to apply this Bonjour gateway policy to an AP or AP group, as described Applying a Bonjour Gateway Policy to an AP or AP Group. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 216: Bonjour Fencing
1. Go to Services & Profiles > Bonjour. 2. Select the Fencing tab, and then select the zone for which you want to create the policy. 3. Click Create. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 217 1. Name: Type a name for the policy. 2. Description: Type a description for the policy. 3. Fencing Rule: Create the policy rule by configuring the following: Figure 92: Fencing Rule SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 218 You have created a Bonjour fencing policy. You can also edit, clone and delete the policy by selecting the options Configure, Clone NOTE: and Delete respectively, from the Fencing tab. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 219: Working With Tunnels And Ports
• GRE + UDP: Select this option to allow APs behind a NAT server to tunnel WLAN traffic back to the controller. • GRE: Select this option to tunnel regular WLAN traffic only. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 220: Creating A Soft Gre Profile
2. Select the Soft GRE tab, and then select the zone for which you want to create the profile. 3. Click Create. The Create Soft GRE Profile page appears. Figure 94: Creating a Soft GRE Profile SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 221: Creating An Ipsec Profile
2. Select the IPsec tab, and then select the zone for which you want to create the profile. 3. Click Create. The Create IPsec Profile page appears. Figure 95: Creating an IPsec Profile SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 222 • Pseudo-Random Function: Options include Use integrity ALG, PRF-MD5, PRF-SHA1, PRF-AES-XCBC, PRF-AES-CMAC, PRF-SHA256, and PRF-SHA384. • DH Group: Options for Diffie-Hellman groups for IKE include modp768, modp1024, modp1536, modp2048, modp3072, modp4096, modp6144, and modp8192. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 223 (day, hour, or minute) from the drop-down list, and then type a number in the box. To disable IKE rekey, select the Disable check box. SmartZone 100/Virtual SmartZone Essentials for Release 3.4 Administrator Guide 82 Configuring the Wireless Network Configuring Access Points.
Page 224: Creating An Ethernet Port Profile
1. Go to Services & Profiles > Tunnels and Ports. 2. Select the Ethernet Port tab, and then select the zone for which you want to create the profile. 3. Click Create. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 225 VLAN Untag ID: Type the ID of the native VLAN (typically, 1), which is the VLAN into which untagged ingress packets are placed upon arrival. If your network uses a different SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 226 You have created the Ethernet Port profile. You can also edit, clone and delete the profile by selecting the options Configure, Clone NOTE: and Delete respectively, from the Ethernet Port tab. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 227: Creating A Tunnel Diffserv Profile
Set Uplink DiffServ: Select the check box if you want to set the Differentiated Services field for uplink user traffic from Ruckus Wireless APs towards either the controller or a third SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide 92 Managing Ruckus Wireless AP Zones Creating a DiffServ Profile party gateway via SoftGRE.
Page 228: Dhcp Relay
1. Go to Services & Profiles > Tunnels and Ports. 2. Select the Forwarding Rule (vSZ-D) tab. The page with Flexi-VPN and L3 Roaming settings appears. Figure 98: Enabling Flexi-VPN SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 229: Enabling L3 Roaming Criteria For Vdps
1. Go to Services & Profiles > Tunnels and Ports. 2. Select the Forwarding Rules (vSZ-D) tab. The page with options to configure the Flexi-VPN and L3 Roaming features appears. Figure 99: Enabling L3 Roaming SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 230 5. Based on the Roaming Criteria that you set, you will be able to add a UE subnet or a VLAN ID to the selected vDP. Click Create to add a UE Subnet or VLAN ID to the vDP. The UE SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 231: Tunnel Encryption
Ruckus GRE tunnel is configured in the vDP. This feature is only available in SZ100. 1. Go to Services & Profiles > Tunnels and Ports. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 232: Location Services
You have successfully enabled multicast forwarding for data packets in the tunnel mode. Location Services If your organization purchased the Ruckus Wireless Smart Positioning Technology (SPoT) location service, the controller must be configured with the venue information that is displayed in the SPoT Administration Portal.
Page 233 3. Port: Type the port number to communicate with the server. Default is 8883. 4. Password: Type the password to access the server. 5. Click OK. You have created the location-based service on the controller. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 234: Dhcp
• Application Recognition and Control • IPv6 • WeChat WLANs • Mesh (irrelevant for single-AP scenarios, configurable but with limitations for multi-AP scenarios) • DVLAN • VLAN Pooling SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 235: Creating A Dhcp Pool
2. Select the Pool tab, and then select the zone for which you want to create the pool. 3. Click Create. The Create DHCP Pool page appears. Figure 105: Creating a DHCP Pool SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 236 • Pool Start Address: Type the first IP address to be allocated to clients from the pool (e.g., 192.168.0.1). • Pool End Address: Type the last IP address to be allocated to clients from the pool (e.g., 192.168.0.253). SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 237: Configuring Dhcp Service Settings
3. Select a Zone from the zone list on the left side of the screen, and click Enable DHCP Service on AP. Figure 106: Enabling DHCP Service 4. Click Edit DHCP Service on AP. The DHCP Settings wizard appears. Figure 107: DHCP Settings wizard SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 238 DHCP service. 6. On the next wizard screen, (Select Pools), select up to four DHCP pools from which to assign client IP addresses. Figure 108: Selecting Pools SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 239 10. On the Review screen, review your settings to make sure everything is correct. Once you are satisfied with your settings, click OK to confirm. Figure 110: Review DHCP settings SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 240 You have configured the DHCP server settings and applied them to an AP (or multiple APs). These APs will now provide DHCP/NAT functionality and assign IP addresses to wireless clients from the DHCP address pools you specified. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 241: Working With Reports
The New Client Associations report shows a historical view of the number of new client associations. New client Associations can be shown in different time intervals for a specified duration. The report can be generated based on a specific AP, SSID, or radio. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 242: System Resource Utilization Report
Figure 111: Report Generation Screen on page 242 appears. Figure 111: Report Generation Screen 2. Click Create, Figure 112: Create Reports Screen on page 242 appears. Figure 112: Create Reports Screen SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 243 Resource Filter Criteria Device Indicates the level of resource Select Device and choose the filtering for which you want to option. generate the report. For example: AP Zone or Access Point. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 244: Generating Reports
1. From the left pane, select Report > Report Generation. Figure 111: Report Generation Screen on page 242 appears. 2. Select the required report from the list and click Generate. The Report Generated form appears. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 245: Rogue Access Points
AP and connects it to the LAN, to gain wireless access to other LAN resources. This would potentially allow even more unauthorized users to access your corporate LAN - posing a security risk. Rogue APs also interfere with nearby Ruckus Wireless APs, thus degrading overall wireless network coverage and performance.
Page 246: Viewing Ap Client Statistics
Indicates the session creation time. Long Indicates the session end time. Client MAC String Indicates the Mac address of the client. Client IP Address String Indicates the IP address of the client. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 247: Ruckus Ap Tunnel Stats
Table 35: Ruckus GRE Report Parameters on page 248. 3. Click: • Load Data— To view the report in the workspace. • Export CSV—To open or save the report in CSV file format. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 248: Viewing Statistics For Softgre Tunnels
1. From the left pane, select Report > Ruckus AP Tunnel Stats. The Ruckus GRE tab appears by default. 2. Select SoftGRE. Update the parameters as explained in Table 37: SoftGRE Report Parameters on page 249. 3. Click: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 249 Indicates the number of packets dropped. TX Error Packets Long Indicates the number of packets with a header error. RX Error Packets Long Indicates the number of packets with a header error. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 250: Viewing Statistics For Softgre Ipsec Tunnels
Indicates the number of bytes sent. RXBytes Long Indicates the number of bytes received. TXPkts Long Indicates the number of packets sent. RXPkts Long Indicates the number of packets received. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 251 Working with Reports Ruckus AP Tunnel Stats Attribute Type Description TX Dropped Packets Long Indicates the number of packets dropped. RX Dropped Packets Long Indicates the number of packets dropped. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 252: Troubleshooting Troubleshooting Client Connections
1. Go to Troubleshooting. The Troubleshooting page appears. Figure 113: Troubleshooting - Client Connections SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 253 6. Click Stop to terminate connection between the AP and client. The following authentication types are supported: NOTE: • Open • PSK (WPA2-Personal) • 802.1X (PEAP, TTLS, TLS, SIM) • WISPr SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 254: Troubleshooting Through Spectrum Analysis
3. In AP MAC Address, select the AP that needs to be in the spectrum analysis-mode. 4. In Spectrum Capture, select the radio frequency values (2.4GHz or 5GHz) for the analysis from the Radio option. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 255 N. The amplitude threshold is configurable but the default is -85dBm. 5. After you select the parameters that you want to use to view the graphs, click Start. 6. Click Stop to terminate viewing spectrum analysis trends. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 256: Administering The Controller
You can also create Administrator accounts for the group from this page. 6. Click Next. 7. Review: Verify the user group's configuration that you have selected. 8. Click OK to confirm. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 257: Creating Administrator Accounts
1. Account Name: Type the name that this administrator will use to log on to the controller. 2. Real Name: Type the actual name (for example, John Smith) of the administrator. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 258: Creating A Radius Server For Administrator Authentication
3. Click Create. The Create Administrator RADIUS Server page appears. Figure 116: Creating an Administrator RADIUS Server 4. Configure the following: 1. Name: Type a name for the RADIUS server. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 259: Enabling The Access Control List
1. Go to Administration > Admins and Roles. 2. Select the Access Control List tab. 3. Select Enable. 4. Click Create. The Management Interface Access Control Rule page appears. Figure 117: Management Interface Access Control Rule SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 260: Backing Up And Restoring Clusters
Creating a Cluster Backup Backing up the cluster (includes OS, configuration, database and firmware) periodically enables you to restore it in the event of an emergency. Ruckus Wireless also recommends that you back up the cluster before you upgrade the controller software.
Page 261 7. Go to Diagnostics > Application Logs, and then under Application Logs & Status check the Health Status column and verify that all of the controller processes are online. You have completed restoring the cluster backup. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 262: Backing Up And Restoring The Controller's Network Configuration From An Ftp Server
Before continuing to the next step, verify that both the node and the cluster are in service. Figure 119: Verify that both the node and the cluster are in service SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 263 URL or IP address of the FTP server to which you want to back up the cluster configuration. The CLI prompts you to choose the number that corresponds to the backup file that you want to export to the FTP server. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 264 FTP back to the controller. 1. Log on to the controller from the CLI. For more information, see the corresponding Command Line Interface Reference Guide for your controller platform. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 265 Figure 125: Verify that the backup file was copied to the controller successfully 7. Run restore network to start restoring the contents of the backup file to the current controller. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 266 The controller deletes its previous network configuration, including static routes, name server, user defined interfaces, etc. 10. Restore the network configuration contained in the selected backup file. 11. Restart all services. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 267 Run show interface to verify that all of the network configuration settings have been restored. Figure 128: Verify that the node and cluster are back in service and that the network configuration has been restored successfully SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 268: Backing Up Cluster Configuration
This will help ensure that you can restore the system configuration settings easily if the database becomes corrupted for any reason. The following are backed up in the system configuration backup file: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 269 Options include: Daily, Weekly and Monthly. 3. Hour: Select the hour of the day when the controller must generate the backup. 4. Minute: Select the minute of the hour. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 270 5. Log on to the controller web interface. Check the web interface pages and verify that the setting and data contained in the backup file have been restored successfully to the controller. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 271: Upgrading The Controller
Although the software upgrade process has been designed to preserve all controller CAUTION: settings, Ruckus Wireless strongly recommends that you back up the controller cluster before performing an upgrade. Having a cluster backup will ensure that you can easily restore the controller system if the upgrade process fails for any reason.
Page 272: Performing The Upgrade
FTP server. ® 1. Copy the software upgrade file that you received from Ruckus Wireless to the computer where you are accessing the controller web interface or to any location on the network that is accessible from the web interface.
Page 273: Verifying The Upgrade
CLI. If you have a two-node controller cluster, you must have cluster backup on both of the nodes. ® To ensure that you will be able to roll back to a previous version, Ruckus Wireless strongly recommends the following before attempting to upgrade the controller software: •...
Page 274: Uploading An Ap Patch File
Upgrading the Data Plane You can view and upgrade the virtual data plane version using patch files. This feature is only applicable for vSZ-H and vSZ-E. 1. Go to Administration > Upgrade. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 275 • Registration State: This field displays whether all licenses pertaining to the data plane are approved. • Upgrade Status: Displays the completion stats of the patch file upgrade for the virtual data plane. You have successfully upgarded the virtual data plane. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 276: Managing Licenses
1. Obtain the license file. You can do this by logging on to your Ruckus Wireless Support account, going to the license management page, and then downloading the license file (the license file is in .bin format).
Page 277 5. When the download is complete, go to the default download folder that you have configured for your web browser, and then verify that the binary copy of the license files (with .bin extension) exists. You have completed downloading copies of the controller licenses. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 278: Configuring The License Server
Managing Licenses Configuring the License Server Ruckus Wireless provides two options for managing the licenses that you have purchased for the controller - Cloud License Server and Local License Server (LLS). Cloud License Server also known as the SmartLicense server, this a cloud-based server that stores all of the licenses and support entitlements that you have purchased for the controller.
Page 279: Zonedirector To Smartzone Migration
1. Go to Administration > Admin Activities. 2. Select the Admin Activities tab. the Admin Activities page displays the administrator actions. The following information is displayed: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 280 CSV file named clients.csv. Use a ® ® spreadsheet application (for example, Microsoft Excel ) to view the contents of the CSV file. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 281: Managing Events And Alarms
SNMP traps and email notifications for specific events whenever they occur. Verify that global SNMP traps are enabled to ensure that the controller can send SNMP traps for alarms. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 282: Configuring Event Threshold
4. Click the event name under the Name column. The threshold value for the event becomes editable. Next to the threshold value, the acceptable range is displayed. 5. Edit the threshold value. 6. Click OK. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 283: Configuring Alarms
To acknowledge an alarm: 1. Select the alarm from the list and click Acknowledge Alarm. This message appears: Are you sure you want to acknowledge the selected alarms? SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 284: Applying Filters
All the alarms that meet the filter criteria are displayed on the Alarms page and the display changes to Filter On. You can export the alarms into a CSV file by clicking the icon. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 285: Diagnostics
3. From Select AP Zone, choose the AP zone for which you want to apply the script. 4. Click Browse to select an AP CLI script that you want to upload. 5. Click Upload. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 286: Viewing And Downloading Logs
Go to your browser's default download folder, and then verify that the snapshot log file or files have been downloaded successfully. Extract the contents of the tar file. You have successfully completed downloading log files/snapshot logs from the controller. SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 287: Available System Logs For Sz100
SNMP. SubscriberManagement A process for maintaining local user credentials for WISPr authentication SubscriberPortal Internal portal page for WISPr (hotspot) System Collects and sends log information from all processes SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 288: Viewing Radius Proxy Settings
You must be aware of the RADIUS proxy settings on the controller to monitor the health of the controller. Go to Administration > Diagnostics > RADIUS. The Proxy page appears displaying the RADIUS settings. Figure 131: Diagnostics - RADIUS Proxy SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 289: Appendix A: Ports To Open For Ap-Scg/Sz/Vsz/Vsz-D
AP firmware and later) downloads has also been changed from port 91 to 11443 to distinguish between the two methods. To ensure that all APs can SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 290 UDP and TCP. 12222/12223 vSZ control LWAPP discovery plane NOTE: If your AP is within the same subnet as the controller, disable nat-ip-translation to establish a connection SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 291 Northbound Portal Interface plane for hotspots 9443 HTTPS vSZ control Northbound Portal Interface plane for hotspots 9998 vSZ control Hotspot WISPr subscriber plane portal login/logout over HTTPSl SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 292 The destination interfaces are meant for three interface deployments. In a single interface NOTE: deployment, all the destination ports must be forwarded to the combined management/control interface IP address. Communication between APs is not possible across NAT servers. NOTE: SmartZone 100 and Virtual SmartZone Essentials Administrator Guide for Release 3.5.1...
Page 293 Index 802.11 application policies (continued) 802.11w MFP creating 187, deleting 187, editing 187, application policy creating aaa server 196, 201–202 applications testing 196, control AAA server authentication monitoring Access Point Configuration recognition administration 256–259 Applying a WLAN Template access control Applying WLAN Template creating Applying Zone Template...
Page 294 Chassis View Critical AP Tagging Client Admission Control client isolation whitelist cloning creating Data Planes deleting dhcp pool editing cloning Client Load Balancing creating Client Number Report deleting Client Number vs Airtime Report editing cluster backup dhcp relay creating dhcp service cluster configuration 268–271 dhcp settings...
Page 295 Failed Client Associations Report L2 access control Fast BSS Transition cloning Filtering Events creating firewall ports deleting flexi vpn editing enabling layer 3 roaming 229–230 forwarding enabling multicast packets roaming criteria legal license 276–278 downloading importing Generating Reports license bandwidth Global Filters license server guest access portal...
Page 296 non-proxy auth server ruckus gre (continued) testing creating non-proxy authentication server deleting cloning editing creating Ruckus GRE Tunnels deleting editing notifications Setting Filters Setting the Northbound Portal Password Setting Up the Controller OS policy severity cloning Signature Package creating soft gre deleting cloning editing...
Page 297 TX/RX Bytes Report web auth portal Types of Reports cloning configuring creating deleting Web Interface Features ua blacklist wechat portal cloning cloning configuring configuring creating creating deleting deleting upgrading 271–274 wifi operator profile ap patch file creating controller wired clients 130–131 pre-upgrade check deauthenticating...
Page 298 Zones and AP groups (continued) Zones and AP groups (continued) deleting managing editing...

Ruckus Wireless SmartZone 100 Administrator's Manual

1 Navigating the Dashboard

2 Configuring System Settings

3 Working with Access Points

4 Working with Wlans and WLAN Groups

5 Managing Clients

6 Application Recognition and Control

7 Services and Profiles

8 Working with Reports

9 Troubleshooting Troubleshooting Client Connections

10 Administering the Controller

11 Managing Events and Alarms

12 Diagnostics

Appendix A: Ports to Open for AP-Scg/Sz/Vsz/Vsz-D

Quick Links

Troubleshooting

Need help?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Ruckus Wireless SmartZone 100

Summary of Contents for Ruckus Wireless SmartZone 100