Ruckus Wireless Virtual SmartZone Administrator's Manual

Ruckus Wireless Virtual SmartZone Administrator's Manual

High-scale for release 3.4.1
Table of Contents

Advertisement

SmartCell Gateway 200/Virtual SmartZone
High-Scale for Release 3.4.1
Administrator Guide
Part Number: 800-71377-001
Published: 31 January 2017

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Virtual SmartZone and is the answer not in the manual?

Questions and answers

Summary of Contents for Ruckus Wireless Virtual SmartZone

  • Page 1 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide Part Number: 800-71377-001 Published: 31 January 2017...
  • Page 2: Table Of Contents

    Cloning an AP Zone from the Domain Tree............42 Cloning an AP Zone from the AP Zone List............42 Viewing Existing AP Zones.................43 Viewing the AP Zone Configuration..............43 Deleting an AP Zone..................44 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 3 Creating a Bonjour Gateway Rule on the AP............89 Applying a Bonjour Policy to an AP..............91 Creating a DiffServ Profile....................92 Creating an Ethernet Port Profile.................93 Important Notes About Ethernet Port Profiles............96 Working With Dynamic PSKs..................97 Viewing Dynamic PSKs..................97 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 4 5 Managing Access Points Overview of Access Point Configuration..............143 Viewing Managed Access Points................143 Provisioning and Swapping Access Points..............144 Options for Provisioning and Swapping APs............145 Understanding How Swapping Works.............146 Editing AP Configuration....................146 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 5 Working with User Traffic Profiles..............185 Working with DNS Server Services..............188 Working with Forwarding Profiles..............189 7 Configuring the System Settings Overview of the System Settings................203 Configuring General System Settings................203 Setting the System Time..................203 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 6 Assigning an Administrator Account to a Role............247 9 Managing Administrator Accounts Overview of Administrator Accounts and Roles............250 Viewing a List of Administrator Accounts, Roles, and RADIUS Servers......250 Creating an Administrator Account................252 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 7 Adding a RADIUS Server to the Controller............278 Creating a Hotspot WLAN................279 Creating a WLAN.....................280 Downloading Captive Portal and Subscriber Portal Logs...........281 12 Monitoring AP Zones, Access Points, and Wireless Clients SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 8 Acknowledging Alarms..................307 Viewing Events......................307 Using the Search Criteria Section..............309 Exporting the Event List to CSV...............310 Viewing Administrator Activity..................311 Using the Search Criteria Section..............312 Exporting the Administrator Activity List to CSV..........313 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 9 Viewing a List of Subscription Packages............338 Creating a Subscription Package..............338 Editing a Subscription Package...............339 Deleting a Subscription Package..............340 16 Performing Administrative Tasks Backing Up and Restoring Clusters................341 Creating a Cluster Backup................341 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 10 Exporting AP Certificate Requests..............372 Requesting AP Certificate Renewal..............374 Importing AP Certificate Responses..............375 Confirming AP Certification Status..............378 Managing Licenses....................379 Default Licenses....................380 Viewing Installed Licenses................381 Viewing License Summary................381 Configuring the License Server................382 Importing License Files..................383 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 11 Data Plane Ethernet Port Statistics..............420 AP SoftGRE Tunnel Statistics................421 SoftGRE Gateway Statistics................422 Tenant Time Radio Statistics................423 Tenant Time WLAN Statistics................424 Tenant Zone Statistics..................425 Tenant Zone Radio Statistics................427 Tenant Inventory File..................428 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 12 Step 4: Restoring the Cluster Backup to the Controller........454 Backing Up and Restoring Configuration..............457 Backed Up Configuration Information..............457 Backing Up Configuration................458 Restoring Configuration...................458 Appendix G: SCG SSID Syntax SSIDs Supported in Release 1.1.x................462 SSIDs Supported in Release 2.1.x................463 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 13 SSIDs Supported in Release 3.0 and Above..............464 ZoneDirector SSID Syntax..................464 SSIDs Supported in Releases 9.8 and 9.7............464 Supported SSIDs in ZoneFlex Release 9.6............465 ZoneFlex AP SSID Syntax..................465 Supported SSIDs in Releases 9.8, 9.7, and 9.6..........465 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 14 No part of this documentation may be used, reproduced, transmitted, or translated, in any form or by any means, electronic, mechanical, manual, optical, or otherwise, without prior written permission of Ruckus Wireless, Inc. ( Ruckus”), or as expressly provided by under license from Ruckus.
  • Page 15 Notice type Description Information that describes important features NOTE: or instructions Information that alerts you to potential loss of CAUTION: data or potential damage to an application, system, or device SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 16 Document Conventions Notice type Description Information that alerts you to potential personal WARNING: injury SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 17 Documentation Feedback Ruckus Wireless is interested in improving its documentation and welcomes your comments and suggestions. You can email your comments to Ruckus Wireless at: docs@ruckuswireless.com When contacting us, please include the following information: • Document title • Document part number (on the cover page) •...
  • Page 18 Online Training Resources Online Training Resources To access a variety of online Ruckus Wireless training modules, including free introductory courses to wireless networking essentials, site surveys, and Ruckus Wireless products, visit the Ruckus Wireless Training Portal at: https://training.ruckuswireless.com. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 19: Navigating The Web Interface

    To ensure that you can view and configure all new features that are available in this release, Ruckus Wireless recommends upgrading the AP firmware to the latest version.
  • Page 20: Web Interface Features

    (not http) to the management interface IP address to connect to the web interface. If a browser security warning appears, this is because the default SSL certificate (or security certificate) that the controller is using for HTTPS communication is signed by Ruckus Wireless and is not recognized by most web browsers.
  • Page 21: Main Menu

    300 • Configuration: Contains options for managing AP zones, access points, system settings, management domains, administrator accounts and mobile virtual network administrator accounts. For more information, see the following topics: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 22: Submenu

    Administration Domain to display all of the existing management domains, and then click the management domain to which you want to switch the web interface. Refer to the following sections for more information: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 23: Using Widgets On The Dashboard

    The client count summary widget requires two widget slots. You can display client count based on the management domain, AP zone, or SSID. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 24: Widget Slots

    Note that some widgets are wider (for example, the client count summary and data throughput widgets) and require two widget slots. Make sure that there are enough empty slots on the dashboard before you add or move a widget. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 25: Adding A Widget

    Adding a Widget Follow these steps to add a widget to the dashboard. Click the icon in the upper-left corner of the page (below the Ruckus Wireless icon). The icons for adding widgets appear (see Table 3: Icons for adding widgets on page 25).
  • Page 26: Adding A Widget To A Widget Slot

    4. Configure the information that you want the widget to display and the interval at which to refresh the information on the widget. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 27: Displaying A Widget In A Widget Slot

    3. Click the name of the widget that you want to display. The widget slot refreshes, and the widget that you clicked appears. You have completed displaying a widget in a widget slot. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 28: Moving A Widget

    3. Click OK to confirm. The dashboard refreshes, and then the widget that you deleted disappears from the page. 4. Click OK to confirm that you want to delete this widget. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 29: Changing The Administrator Password

    5. Click Change. You have completed changing your administrator password. The next time you log on to the controller, remember to use your new administrator password. Figure 8: The Change Password form SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 30: Logging Off The Web Interface

    Ruckus Wireless logo: Log off successful You have completed logging off the web interface. Figure 9: The message Log off successful indicates that you have successfully logged off the web interface SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 31: Managing Ruckus Wireless Ap Zones

    • Working With Dynamic PSKs An AP zone functions as a way of grouping Ruckus Wireless APs and applying a particular set of settings (including WLANs and their settings) to thise group of Ruckus Wireless APs. Each AP zone can include up to 27 WLAN services.
  • Page 32: Creating An Ap Zone

    Creating an AP Zone An AP zone functions as a way of grouping Ruckus Wireless APs and applying settings including WLANs to these groups of Ruckus Wireless APs. Each AP zone can include up to six WLAN services.. Follow these steps to create an AP zone.
  • Page 33 Location Type a location name (for example, Ruckus Wireless HQ) for this AP zone. Location Type additional information about the AP zone (for example, 350 W Additional Java Dr, Sunnyvale, CA 94089, United States).
  • Page 34 • TX Power Adjustment: Select the preferred TX power, if you want to manually configure the transmit power on the 2.4GHz radio. By default, TX power is set to Full on the 2.4GHz radio SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 35 * indicates that tunneling over IPv6 is supported only in AP zones supporting IPv6. NOTE: Dual-stack zones will not tunnel with IPv6. ** indicates that SoftGRE tunneling over IPv6 is supported in AP zones with IPv6 and NOTE: dual-stack AP zones. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 36 2.4GHz and 5GHz radios. By default, background scanning is enabled on both radios and is configured to run every 20 seconds. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 37 Select the Report rogue access points check box to enable rogue device detection in logs and email alarm event notifications. • Report all rogue devices: Send alerts for all rogue AP events. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 38 To enable LBS service for this AP zone, select the Enable LBS Service check box, and then select an LBS server to use from the drop-down list. For information on how to add SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 39 11. Click Yes to view the AP zone details, or click No to close the confirmation message and return to the AP zone list. You have completed creating an AP zone. You can create additional AP zones as needed. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 40 The 802.11h channel change announcements affect both wireless clients and Ruckus mesh nodes in the 2.4 GHz and/or 5 GHz bands. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 41 SSID. As the client device joins the Wi-Fi network, the VLAN is assigned based on a hash of the client’s MAC address (by default). SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 42: Cloning An Ap Zone From The Domain Tree

    4. A form appears and prompts you for the name that you want to assign to the cloned zone. The default name is Clone_of_{Original Zone Name}. 5. Edit the AP zone name or leave it as is. 6. Click Apply. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 43: Viewing Existing Ap Zones

    2. On the AP Zone List page, click the name of the AP zone that you want to view. The Zone Configuration page for the AP zone appears and displays as summary of the AP zone configuration. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 44: Deleting An Ap Zone

    Deleting an AP zone that contains managed devices will automatically move those devices to the Staging Zone (default zone). Before deleting an AP zone, Ruckus Wireless recommends moving devices that belong to that zone to another zone. Follow these steps to delete an AP zone.
  • Page 45: Working With Ap Groups

    • Name: Type a name for this AP group. • Description: Type a description for this AP group. • Location: Type a location name (for example, Ruckus Wireless HQ) for this AP group. • Location Additional Information: Type additional location information for the AP group, if any (for example, 350 W Java Dr, Sunnyvale, CA 94089, United States).
  • Page 46 2.4GHz radio. By default, TX power is set to Full on the 2.4GHz radio • WLAN Group: Specify to which WLAN group this AP group belongs. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 47 • Client Admission Control: Set the load thresholds on the AP at which it will stop accepting new clients. See Configuring Client Admission Control. 11. Click OK. You have completed creating an AP group. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 48 11n/11ac APs. Enabling this option allows the use of restricted C-band channels. These channels are disabled by default and should only be enabled by customers with a valid license to operate on these restricted channels. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 49 If you recently created an Ethernet port profile and it does not appear NOTE: on the drop-down menu, click Reload on the drop-down menu to refresh the Ethernet port profile list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 50 Supported LLDP Attributes The Link Layer Discovery Protocol (LLDP) is a vendor-neutral Layer 2 protocol that allows a network device (for example, a Ruckus Wireless AP) to advertise its identity and capabilities on the local network. LLDP information is sent by devices from each of their interfaces at a fixed interval (default is 30 seconds), in the form of an Ethernet frame.
  • Page 51 • For all other APs, you can configure each port individually as either a Trunk Port, Access Port, or General Port. See Designating an Ethernet Port Type on page 52 for more information. Figure 17: The Port Settings section SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 52 VLAN ID in the VLAN ID field (valid VLAN IDs are 2-4094). The following table describes the behavior of incoming and outgoing traffic for Access Ports with VLANs configured. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 53 • Minimum client count • Maximum radio load • Minimum client throughput Client admission control is implemented on a per radio basis and is currently only supported on 802.11n APs. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 54 • You can only set Community max count and Users max count values up to 3. • The Read, Write and Notification privileges for communities and users must be different. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 55: Working With Aaa Servers

    • Port: Type the port number of the AAA server. The default RADIUS server port number is 1812 and the default RADIUS Accounting server port number is 1813. • Shared Secret: Type the AAA shared secret. • Confirm Secret: Retype the shared secret to confirm. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 56 • Shared Secret: Type the AAA shared secret. • Confirm Secret: Retype the shared secret to confirm. 6. Click Create New. You have completed creating an AAA server for the AP zone. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 57: Testing An Aaa Server

    6. Click Test. NOTE: If the AP and RADIUS server are behind the NAT server, Testing AAA Servers fails as the controller is unable to access the AAA server you created. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 58: Deleting An Aaa Server

    This section describes the basic settings that you need to configure to include a hotspot service in the zone template. If you need more information about hotspots, including third party prerequisites, see Creating and Managing Hotspots on page 267. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 59: Creating A Hotspot Portal

    • Location ID: Type the ISO and ITU country and area code that the AP includes in accounting and authentication requests. The required code includes: • isocc (ISO-country-code): The ISO country code that the AP includes in RADIUS authentication and accounting requests. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 60 You have completed configuring a hotspot portal of the AP zone. For additional steps that you need to perform to ensure that the hotspot portal works, see Creating and Managing Hotspots on page 267. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 61: Deleting A Hotspot Portal

    Select the check boxes before the hotspots that you want delete. d) Click Delete Selected. A confirmation message appears. e) Click Yes. The page refreshes and the hotspot portals that you deleted disappear from the list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 62: Working With Guest Access Portals

    • Web Portal Logo: By default, the guest hotspot logon page displays the Ruckus Wireless logo. To use your own logo, click the Upload button, select your logo (recommended size is 138 x 40 pixels, maximum file size is 20KB), and then click Upload.
  • Page 63: Viewing Guest Access Portals

    3. On the sidebar, click Guest Access. The Guest Access Portal page appears and displays all existing guest access portals and their basic settings are shown, including the following: • Name SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 64: Deleting Guest Access Portals

    WLAN, and requires them to log on before granting access to use the WLAN. Creating and configuring a web authentication portal requires the following steps: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 65: Adding An Aaa Server For The Web Authentication Portal

    • Grace Period: Set the time period (in minutes) during which disconnected users are allowed access to the hotspot service without having to log on again. 8. Click OK. You have completed creating a web authentication portal. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 66: Creating A Wlan For The Web Authentication Portal

    Creating a Web Authentication Portal. This service contains, among others, the start page where users will be redirected when they associate with this WLAN. 7. Configure the remaining WLAN options as desired. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 67: Working With Hotspot 2.0 Services

    Hotspot 2.0 aims to improve the experience of mobile users when selecting and joining a Wi-Fi hotspot by providing information to the station prior to association. This information can then be SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 68: Working With Wlans And Wlan Groups

    Creating a WLAN An AP zone functions as a way of grouping Ruckus Wireless APs and applying settings including WLANs to these groups of Ruckus Wireless APs. Each AP zone can include up to six WLAN services. Follow these steps to create a WLAN for an AP zone.
  • Page 69 APs on different subnets. If the WLAN has clients that require uninterrupted wireless connection (for example, VoIP devices), Ruckus Wireless recommends enabling tunnel mode. When you enable this option, you need to select core network for tunneling WLAN traffic back to the controller.
  • Page 70 WPA and WPA2 are both encryption methods certified by the Wi-Fi Alliance and are the recommended encryption methods. The Wi-Fi Alliance will be mandating the removal of WEP due to its security vulnerabilities, and Ruckus Wireless recommends against using WEP if possible.
  • Page 71 Ensure that the dictionary.ruckus file in the AAA server at usr/local/share/freeradius/ NOTE: is the same as the one in SCG-200 or SZ100 at /opt/ruckuswireless/wsg/conf/ttg_pdg/share. 10. In Guest Access Portal, configure the following options: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 72 Enabling the check-box displays the DPSK Type and DPSK Expiration settings NOTE: to configure. • DPSK Type: select the type of DPSK (Secure or Keyboard-friendly) that you want to use to secure the network SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 73 • Proxy ARP: Select this check box to enable proxy ARP. When proxy ARP is enabled on a WLAN, the AP provides proxy service for stations when receiving neighbor discovery SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 74 (CCK rates for 2.4G or OFDM rate – 6Mbps for 5G] to the desired rates. By default, BSS Min Rate is disabled. OFDM-only takes higher priority than BSS-minrate. However, OFDM-only relies NOTE: on BSS-minrate to adjust its rate for management frames. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 75 DNS Server profile for the WLAN service. 15. Click OK at the bottom of the form. You have completed creating and configuring a WLAN service of the AP zone. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 76 1. When a client’s signal is so weak that it may not be able to support a link with another AP 2. When a client’s signal is so strong that it really belongs on this AP. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 77 With CNA bypass enabled, captive portal (web-based authentication) logon must be performed by opening a browser to any unauthenticated page (HTTP) to get redirected to the logon page. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 78 • Hotspot (WISPr) WLAN Internal Portal • Provides and option to modify the portal elements such as the logo, Terms and Conditions, title etc • Allows redirecting user web pages SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 79 For example, typing 31.50 Mbps maps to the closest predefined rate value, so 31.50 Mbps will be rendered as 40 Mbps. Any rate greater than 50.00Mbps would be mapped to the maximum rate which is 50.00Mbps. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 80: Working With Wlan Groups

    1st floor, you can do the following: 1. Create a WLAN service (for example, Guest Only Service”) that provides guest-level access only. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 81 • No Change: Click this option if you want the WLAN to keep the same VLAN tag (default: • Tag: Click this option to override the VLAN configured for the WLAN service. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 82 3. In the AP Zones submenu, click WLAN. The WLAN Services & Groups page appears. 4. Scroll down to the WLAN Group Configuration section. 5. Locate the WLAN group or groups that you want to delete. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 83: Working With Wlan Schedules

    A single square represents 30 minutes (two-15 minute blocks). Blue-colored cells indicate the hours when the WLAN is enabled. Clear (or white) cells indicate the hours when the WLAN is disabled. 5. Click Create New. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 84: Working With Device Policies

    VLAN tagging based on the device type. Once a device access policy has been created, you can apply SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 85: Creating A Device Access Policy

    11. When you finish creating all the rules that you want to add to the policy, click OK at the bottom of the form. The page refreshes, and then the policy that you created appears under the Device Policy Services section. You have completed creating a device access policy. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 86: Viewing Device Access Policies

    If you are deleting a single policy, you can also click the icon (under the Actions column) NOTE: that is in the same row as the policy that you want to delete. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 87: Working With L2 Access Control Policies

    11. When you have finished adding all the MAC addresses that you need to add, click OK. The page refreshes, and then the L2 access policy that you created appears in the L2 Access Control Services section. You have completed creating an L2 access policy. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 88: Viewing L2 Access Policies

    4. In the L2 Access Control Services section, locate the policy or policies that you want to delete. 5. Select the check boxes (first column) for the policies that you want to delete. 6. Click Delete Selected. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 89: Working With Bonjour Policies

    • Some APs of one local area link must be on one subnet. The switch interfaces connected to these APs in a local area link to must be configured in VLAN-trunk mode. Only by doing so SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 90 11. After you finish creating all rules that you require, click OK to close the Create Bonjour Policy form. 12. Select the Enable Bonjour gateway on the AP check box. ® You have completed creating a Bonjour gateway policy. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 91: Applying A Bonjour Policy To An Ap

    4. Select the Enable as bonjour gateway with policy check box, and then select the Bonjour policy that you want to apply to the AP. 5. Click Apply. ® You have completed applying a Bonjour gateway policy to an AP. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 92: Creating A Diffserv Profile

    • Set Uplink DiffServ: Select the check box if you want to set the Differentiated Services field for uplink user traffic from Ruckus Wireless APs towards either the controller or a third SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 93: Creating An Ethernet Port Profile

    Managing Ruckus Wireless AP Zones Creating an Ethernet Port Profile party gateway via SoftGRE. Configure the desired value to be set by the Ruckus Wireless • Set Downlink DiffServ: Select the check box if you want to set the Differentiated Services field for downlink user traffic from the controller towards the AP, and then configure the desired value to be set by the Ruckus Wireless AP.
  • Page 94 Available options include: • MAC-based Authenticator: If you select this authenticator, each MAC address host is individually authenticated. Each newly-learned MAC address triggers an EAPOL request-identify frame. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 95 The page refreshes, and then the profile you created appears on the list of Ethernet port profiles. You can now use this profile to configure the port settings of specific AP models. See Configuring Model Based Settings on page 48. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 96: Important Notes About Ethernet Port Profiles

    • 802.1x options are only supported when the AP’s mesh mode is Root, Mesh, or Disable. • At least one trunk port must be enabled on the AP for the Ethernet port profile to work. • The AP can only have a supplicant port. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 97: Working With Dynamic Psks

    The Dynamic PSK page appears listing the PSKs that were generated. The following information about dynamic PSKs are available: • User Name • MAC Address • WLAN (SSID) • VLAN ID • Created Date SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 98: Generating Dynamic Psks

    You have completed creating the dynamic PSK. Importing Dynamic PSKs You can import CSV files to create DPSKs to secure the WiFi network. Follow these steps to import dynamic PSKs (DPSKs): SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 99 Importing a CSV file to a WLAN containing the same UeMac value as the existing NOTE: DPSKs in the WLAN, replaces the old DPSKs within the data base. Figure 37: Importing a CSV file SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 100 Figure 38: New DPSKs generated 7. Click Download CSV to download the DPSKs soon after the DPSKs are generated. The CSV file appears in the following format. Figure 39: New CSV format SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 101: Managing Global Configuration, Ap Tunnel Profiles, Templates, And Ap Registration Rules

    Make sure that you open this port number on the network firewall to ensure that a NOTE: GRE tunnel can be established successfully. After you type the new tunnel port number, the Apply and Cancel buttons become active. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 102: Creating Ap Tunnel Profiles

    The Create Ruckus GRE Profile form appears. 4. Configure the following options. Option Description Name Type a name for the profile that you are creating. Description Type a short description of the profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 103: Creating A Softgre Tunnel Profile

    1. Go to Configuration > AP Zones. 2. On the sidebar, click AP Tunnel Profiles > SoftGRE. The SoftGRE page appears. 3. Click Create New. The Create SoftGRE Profile form appears. 4. Configure the following options: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 104: Creating An Ipsec Profile

    Figure 42: Creating a SoftGRE profile Creating an IPsec Profile AP tunnel profiles configuration includes the procedures for IPsec tunnel profiles. 1. Go to Configuration > AP Zones > AP Tunnel Profiles. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 105 • Integrity Algorithm: Options include MD5, SHA1, AES-XCBC, SHA256, SHA384, and SHA512 • DH Group: Options for Diffie-Hellman groups for ESP include None, modp768, modp1024, modp1536, modp2048, modp3072, modp4096, modp6144, and modp8192. 7. In Rekey Options, configure the following: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 106 The default subcode is 5. • Subject Name of CA/RA: Type an ASCII string that represents the subject name of the CA/RA server. Figure 43: AP discovery with DHCP Option 43 Sub Codes SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 107 • Retry Mode: If you want APs to fall back to the specified primary security gateway, click Revertive. If you want APs to maintain connectivity with the security gateway to which they are currently connected, click Non-revertive. 10. Click . SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 108 Identifier (VCI). The VCI is a text string that identifies a vendor/type of a DHCP client. All Ruckus Wireless Access Points are configured to send Ruckus CPE” as the Vendor Class Identifier in SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 109 0 to 255). Sub-options are embedded in option 43 as TLV (type, length, value) blocks. Ruckus Wireless Access points support non-TLV format option 43 values with comma separated IP address strings for discovering SmartZones, and also TLV based option 43 encapsulation as specified in RFC 2132.
  • Page 110: Working With Zone Templates

    AP zone. Applying a zone template to an AP zone will overwrite all settings on all access points that belong that the AP zone. This section describes the following topics: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 111: Creating And Configuring A Zone Template

    In Syslog Options, if you have a syslog server on the network and you want the controller to send syslog data to it, select the Enable external server for APs in this zone check box. 5. Configure Radio Options. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 112 By default, background scanning is enabled on both radios and set to run every 20 seconds. 9. Click Create New to create the zone template. 10. Continue to Step 2: Configure the AP Model-Specific Configuration. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 113 • External Antenna (2.4GHz): To enable the external 2.4GHz antenna on the AP model, select the Enable external antenna with [x] dBi (0-90) check box, and then a value for the dBi. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 114 • Port: Type the port number of the AAA server. The default RADIUS server port number is 1812 and the default RADIUS Accounting server port number is 1813. • Shared Secret: Type the AAA shared secret. • Confirm Secret: Retype the shared secret to confirm. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 115 • Only Smart Client Allowed: Select this option to allow only Smart Clients to connect to the hotspot portal. For more information, see Configuring Smart Client Support on page 279. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 116 You can add up to 128 network destinations to the walled garden. Network destinations can be any of the following: • IP address (for example, 10.11.12.13) • Exact website address (for example, www.ruckuswireless.com) • Website address with regular expression (for example, *.ruckuswireless.com, *.com, *) SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 117 BSSIDs in the homogeneous ESS. • Description: Type a brief description of the qualifications/purpose for this WLAN (for example, Engineering or Voice). 7. In WLAN Usage, configure the following: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 118 APs on different subnets. If the WLAN has clients that require uninterrupted wireless connection (for example, VoIP devices), Ruckus Wireless recommends enabling tunnel mode. When you enable this option, you need to select core network for tunneling WLAN traffic back to the controller.
  • Page 119 WPA and WPA2 are both encryption methods certified by the Wi-Fi Alliance and are the recommended encryption methods. The Wi-Fi Alliance will be mandating the removal of WEP due to its security vulnerabilities, and Ruckus Wireless recommends against using WEP if possible.
  • Page 120 Threshold (50dB for the 2.4GHz radio and 43dB for the 5GHz radio). • Proxy ARP: When enabled on a WLAN, the AP provides proxy service for stations when receiving neighbor discovery packets (e.g., ARP request and ICMPv6 Neighbor Solicit SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 121 Click on a day of the week to enable/disable this WLAN for the entire day. Colored cells indicate WLAN enabled. Click and drag to select SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 122: Exporting A Zone Template

    4. When the Edit Zone Template form appears, edit the template name, and then click Apply. 5. Go to Configuration > AP Zones. 6. On the sidebar, click Zone Templates. 7. Click Import. The Importing Zone Template form appears. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 123: Deleting A Zone Template

    (and any other access point that belongs to the same AP zone) will be overwritten by the settings from the WLAN template. The settings of the Ruckus2 WLAN, however, will remain the same. This section covers: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 124: Creating And Configuring A Wlan Template

    Follow these steps to create and configure an AAA server for the WLAN template. 1. Click Configuration > AP Zones. 2. On the sidebar, click WLAN Templates. The WLAN Templates page appears. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 125 9. Click Create New to create the AAA server for the WLAN template. 10. Continue to Step 3: Configure the Hotspot (WISPr) Services of the WLAN Template on page 126. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 126 4. On the sidebar, click Hotspot (WISPr). The Hotspot (WISPr) Portal page appears. 5. Click Create New. The Create New Hotspot Portal form appears. 6. In the General Options section, configure the following options: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 127 The following is an example of what the Location ID entry should look like: isocc=us,cc=1,ac=408,network=RuckusWireless • Location Name: Type the name of the location of the hotspot portal. 10. In Walled Garden, click Create Newto add a walled garden. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 128 • Name/SSID: Type a short name (two to 32 alphanumeric characters) for this WLAN. In general, the WLAN name is the same as the advertised SSID (the name of the wireless network as displayed in the client’s wireless configuration program). However, you can SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 129 APs on different subnets. If the WLAN has clients that require uninterrupted wireless connection (for example, VoIP devices), Ruckus Wireless recommends enabling tunnel mode. When you enable this option, you need to select core network for tunneling WLAN traffic back to the controller.
  • Page 130 WPA and WPA2 are both encryption methods certified by the Wi-Fi Alliance and are the recommended encryption methods. The Wi-Fi Alliance will be mandating the removal of WEP due to its security vulnerabilities, and Ruckus Wireless recommends against using WEP if possible.
  • Page 131 • Client Load Balancing: To disable client load balancing on this WLAN, select the Do not perform client load balancing for this WLAN service check box. For more information, see Client Load Balancing. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 132 BSS-minrate to adjust its rate for management frames. • Mgmt Tx Rate: To set the transmit rate for management frame, select a value (in Mbps) from the drop-down list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 133: Viewing Existing Wlan Templates

    WLAN templates. 1. Go to Configuration > AP Zones. 2. On the sidebar, click WLAN Templates. The WLAN Templates page appears. 3. To delete a single WLAN template, follow these steps: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 134: Working With Registration Rules

    Registration rules enable the controller to assign an AP to an AP zone automatically based on the rule that the AP matches. Follow these steps to create a registration rule. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 135 A progress bar appears as the controller saves the AP registration rule. When the process is complete, the page refreshes, and then registration rule that you created appears on the AP Registration Rules page. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 136: Configuring Registration Rule Priorities

    1. On the AP Registration Rules page, select the check box that is in the same row as the registration rule that you want to delete. Click A confirmation message appears. 3. Click Yes to confirm that you want to delete the registration rule. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 137 Managing Global Configuration, AP Tunnel Profiles, Templates, and AP Registration Rules Working with Registration Rules The AP Registration Rules page refreshes, and then the registration rule that you deleted disappears from the list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 138: Working With 3Rd Party Ap Zones

    Deleting a 3rd Party AP Zone The controller connects to 3rd party AP zones the same way as it does to Ruckus Wireless AP zones. The controller receives RADIUS messages directly from 3rd party APs and supports multiple 3rd party AP zones.
  • Page 139: Adding A 3Rd Party Ap Zone

    Access Network Q-in-Q VLAN Tags Adding a 3rd Party AP Zone The controller connects to 3rd party AP zones the same way as it does to Ruckus Wireless AP zones. Follow these steps to add a 3rd Party AP zone service.
  • Page 140 The share secret for each IP range is not required. 13. Click Create New. You have completed adding a new 3rd party AP zone service. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 141: Viewing Existing 3Rd Party Ap Zones

    To view a list of 3rd party AP zones that have been created, go to Configuration > 3rd Party AP Zones. The 3rd party AP zones that have been configured on the controller appear on the list. Figure 53: The 3rd Party AP Zone List page SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 142: Deleting A 3Rd Party Ap Zone

    3. Click Yes. The page refreshes, and the AP zone that you deleted disappears from the 3rd Party Zone List page. You have completed deleting a 3rd party AP zone. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 143: Managing Access Points

    The list of managed access points displays details about each access point, including its: • AP MAC address • AP name • Zone (AP zone) • Model (AP model) • AP firmware • IP address (internal IP address) • External IP address SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 144: Provisioning And Swapping Access Points

    • Manually enter the AP swap pair • Delete the swap configuration if AP fails to contact the controller • Monitor the status and stage of the swapping AP pairs SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 145: Options For Provisioning And Swapping Aps

    • Swap In AP Model • Swap Out AP MAC The exported CSV file for batch swapping APs only contains swapping APs. It NOTE: does not contain pre-provisioned APs or auto discovered APs. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 146: Understanding How Swapping Works

    2. Click the MAC address of the access point. The AP configuration form appears. 3. Update the access point configuration by modifying the options in the form. 4. Click OK. You have completed editing the AP configuration. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 147: Editing Swap Configuration

    2. Click the AP MAC address of the access point. 3. Click the Swap Configuration tab. 4. Update the access point configuration by modifying the options in the form. 5. Click OK. You have completed editing the swap configuration. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 148: Moving A Single Access Point To A Different Ap Zone

    The Select a Destination AP Zone form appears. 3. Select the AP zone to which you want to move the access point. 4. Click OK. You have completed moving an access point to a new AP zone. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 149: Moving Multiple Access Points To A Different Ap Zone

    1. On the AP List page, locate the access point that you want to delete. 2. Once you locate the access point, click the icon that is under the Actions column. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 150 Staging Zone again (if the access point does not match an existing AP registration rule). After the access point appears in the Staging Zone, it may continue to broadcast the previous SSID for the next five minutes, after which it will stop. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 151: Configuring Services And Profiles

    Clicking Configuration > Services & Profiles on the main menu displays a sidebar on the left side of the page, which includes GGSN Services. Figure 59 shows the GGSN Service configuration page. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 152 5. In the APN Resolution section, click Create New to define the IP address of the GGSN that should serve the AP. 6. Configure the following options: • Domain Name: Type the GGSN domain name. • IP Address: Type the GGSN IP address. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 153: Configuring Authentication Services

    User Traffic Profiles mapped under Authentication services are not supported for NOTE: WLANs except Hotspot 2.0 WLANs. 9. Click OK. The page refreshes and the authentication service you have added appears on the list of existing authentication services. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 154 • RFC 5580 Out of Band Location Delivery: If you want out-of-band location delivery (RFC 5580) to apply only to Ruckus Wireless APs, select the Enable for Ruckus AP Only check box. • Primary Server: Configure the primary RADIUS server settings.
  • Page 155 Response Window is always higher than the value for RADIUS NAS request timeout multiplied by the value for RADIUS NAS max number of retries. For SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 156: Testing The Aaa Server Configuration

    The test AAA server holds the information of authentication or accounting server, including the server IP, service port, shared secret and other settings of the current user. If the requested service is successful, the API will display the information. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 157 If both primary and secondary servers exist, the requested service will be interrupted when controller meets a failure and an error message is displayed. Figure 61: The Test AAA Servers form SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 158: Viewing Radius Services

    Figure 62: Viewing a list of RADIUS services Deleting a Single RADIUS Service You can delete a single or multiple RADIUS services simultaneously. To delete a single RADIUS service, follow these steps: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 159: Deleting Multiple Radius Services

    HLRs, the route to the home HLR is selected based on the realm information. The following configuration settings apply to all the HLR services configured on the controller. Follow these steps to configure a MAP gateway settings for the HLR service. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 160: Mnc To Ndc Mapping

    1. Go to Configuration > Services & Profiles. 2. On the sidebar under Services, click HLR. 3. Click MNC to NDC Mappings on the sidebar under HLR. The MNC to NDC Mapping page appears. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 161 • MNC • NDC • Actions: Displays the trash bin icon, which you can click to delete the mapping You have completed viewing a list of existing MNC to NDC mappings. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 162 Click Delete Selected. A confirmation message appears. d) Click Yes. The page refreshes and the mappings that you deleted disappears from the list. You have completed deleting MNC to NDC mappings. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 163: Configuring Diameter Services

    • Connection Retry Timeout (in seconds) • Device Watchdog Timeout (in seconds) 4. Click Apply. You have completed configuring the system wide settings for Diameter services. Figure 68: The System Wide Settings page SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 164: Configuring Remote Peer Settings

    8. Click Create New at the bottom of the page to create the remote peer configuration. You have completed configuring the remote peer settings for the Diameter services. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 165: Configuring Ftp Services

    9. To verify that the FTP server settings and logon information are correct, click Test. If the server and logon settings are correct, the following message appears: Test completed successfully. 10. Click Create New. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 166: Important Notes When Adding Ftp Servers

    FTP servers, then after upgrading to 2.5 (or later version), the controller will automatically create entries for those four FTP servers on the Configuration > Services & Profiles > FTPpage. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 167: Configuring Location Services

    Configuring Location Services If your organization purchased the Ruckus Wireless SmartPositioning Technology (SPoT) location service, the controller must be configured with the venue information that is displayed in the SPoT Administration Portal. After completing purchase of the SPoT location service, you will be given account login information that you can use to log into the SPoT Administration Portal.
  • Page 168: Configuring The Controller To Use The Lbs Server

    • Set an AP group to override the LBS settings of a zone For information on configuring and managing the Ruckus Wireless SmartPositioning NOTE: Technology (SPoT) service, refer to the SPoT User Guide, which is available for download from https://support.ruckuswireless.com. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 169 For information on configuring AP groups, see Creating an AP Group on page 45. 9. Click OK. You have completed setting an AP group to override the LBS settings of its zone. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 170: Configuring An Sms Server

    3. Under Twilio Account Information, configure the following: • Server Name • Account SID • Auth TokenSCG • From (phone number) 4. Click Apply. You have completed configuring the external SMS gateway for the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 171: Working With Profiles

    6. To enable hosted AAA support, select the Enable Hosted AAA Support check box, and then configure the options under Hosted AAA Server RADIUS Settings and PLMN Settings. a) Under Hosted AAA Server RADIUS Settings: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 172 Create New, and then configure the following: • Realm • Auth Service • Authorization Method • Dynamic VLAN ID 9. Click Create New. You have completed adding an authentication profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 173 The Authentication Profiles page appears and displays the authentication servers that have been added to the controller. For each authentication profile, the following details are displayed: • Profile Name • Description • Last Modified By • Last Modified On SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 174 Click Delete Selected. A confirmation message appears. d) Click Yes. The page refreshes and the profiles that you deleted disappears from the list. You have completed deleting authentication profiles. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 175: Working With Accounting Profiles

    If you set the accounting service for a particular realm to NA-Disabled, then the accounting request is rejected. To create a new service click, Create New, and then configure the following: • Realm • Accounting service 8. Click Create New. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 176 Click the clone icon to create a copy of the profile. You have completed viewing a list of accounting profiles. Figure 79: The Accounting Profiles page lists the profiles that have been created on the controller SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 177: Working With Hotspot Profiles

    Creating a Hotspot Profile A hotspot profile defines the hotspot configuration used for 3rd party AP zones. Follow these steps to create a hotspot profile. 1. Go to Configuration > Services & Profiles. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 178 • cc (country-code): The ITU country code that the AP includes in RADIUS authentication and accounting requests. • ac (area-code): The ITU area code that the AP includes in RADIUS authentication and accounting requests. • network SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 179 URLs that are translated into many IP addresses (such as www.yahoo.com), as users may be redirected to re-authenticate when they navigate through the page. 10. Click Create New. You have completed creating a hotspot profile for 3rd party AP zones. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 180 • Actions: Displays the trash bin and clone icons. Click the trash bin icon to delete the profile. Click the clone icon to create a copy of the profile. You have completed viewing a list of hotspot profiles. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 181 A confirmation message appears. d) Click Yes. The page refreshes and the profiles that you deleted disappears from the list. You have completed deleting hotspot profiles. Figure 83: Deleting multiple profiles simultaneously SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 182: Working With Network Traffic Profiles

    Protocol: Select the protocol that you want to allow or deny. If you cannot find the protocol name, type the protocol number. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 183 • Actions: Displays the trash binand cloneicons. Click the trash binicon to delete the profile. Click the cloneicon to create a copy of the profile. You have completed viewing a list of network traffic profiles. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 184 A confirmation message appears. d) Click Yes. The page refreshes and the profiles that you deleted disappears from the list. You have completed deleting network traffic profiles. Figure 86: Deleting multiple profiles simultaneously SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 185: Working With User Traffic Profiles

    • Source port number (specific port or port range) • Destination IP address (specific IP address or IP address range) • Destination port number (specific port or port range) • Network protocol (TCP, UDP, etc.) • Traffic direction SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 186 To apply this rule to a single port number, clear the Range check box, and then enter the port number. 12. In Protocol, select the network protocol to which this rule will apply. Supported protocols include: • TCP • UDP • UDPLITE • ICMP (ICMPv4) • IGMP SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 187 If you are deleting a single profile, you can also click the icon (under the Actions column) NOTE: that is in the same row as the profile that you want to delete. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 188: Working With Dns Server Services

    Follow these steps to view a list of existing DNS server services profiles. Go to Configuration > Services & Profiles > Service Profiles > DNS Server Services. The DNS Server Services page appears and displays all existing DNS Server Services profiles. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 189: Working With Forwarding Profiles

    ICMP Keep-Alive Retry: Set the retry period to send messages to the keepalive IP address. The default value is 3 retries. 7. In DHCP Relay, configure the following options to enable the DHCP relay agent in the controller: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 190 • Subopt-150 with VLAN ID: This suboption encapsulates the VLAN ID. • Subopt-151 with format: This suboption can encapsulate either the ESSID or a configurable Area Name. 8. Click Create New. You have completed creating an L2oGRE profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 191 1. Go to Configuration > Services & Profiles. 2. On the sidebar under Profiles > Forwarding, click L2oGRE. The L2oGRE Forwarding Profiles page appears and displays the L2oGRE profiles that have been created. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 192 • Gateway Path MTU: Set the MTU value manually or use Auto (default). MTU is the size of the largest protocol data unit (in bytes) that can be passed on the controller network. 5. In DHCP Relay Options, configure the following: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 193 • Keep Alive Retry: Specify the retry period to send messages to the keepalive IP address. The default value is 3. 7. Click Create New to save the new configuration details. You have completed adding an L3oGRE profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 194 Adding an L3oGRE Profile. Figure 92: The L3oGRE Forwarding Profiles page lists the profiles that have been configured on the controller Deleting L30GRE Profiles Follow these steps to delete an L3oGRE profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 195 DHCP Option 82: Select this check box If you want the DHCP relay agent (in this case, the controller) to insert specific identification information into requests that are forwarded SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 196 • Profile Name 7. In Default APN Settings, configure the following: • No Matching Realm Found • No Realm Specified 8. Click Create New. You have completed adding a TTG+PDG profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 197 DHCP server. If option-82 is received from the AP, the data plane does not overwrite the configuration and sends a message to the server. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 198 A confirmation message appears. 3. Click Yes. The page refreshes, and the TTG+PDG Profile that you deleted disappears from the view list. You have completed deleting a TTG+PDG profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 199 7. In Secondary LMA IP, type the IP address of the secondary local mobility anchor. 8. In MN-ID Options, specify the identifier to use for the mobile node by selecting one of the following options: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 200 The Create New Mixed Mode Profiles form appears. 2. In Name, type a name for the mixed mode profile that you are adding. 3. In Description, type a brief description of the profile created. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 201 Follow these steps to view a list of mixed mode profiles that have been configured. 1. Go to Configuration > Services & Profiles. 2. On the sidebar, click Forwarding > Mixed Mode. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 202 A confirmation message appears. 5. Click Yes. The page refreshes, and the mixed mode profile that you deleted disappears from the list. You have completed deleting a mixed mode profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 203: Configuring The System Settings

    3. In NTP Server, type the server address that you want to use. The default NTP server address is pool.ntp.org. 4. In System Time Zone, select the time zone that you want the controller to use. The default time zone is (GMT +0:00) UTC. 5. Click Apply. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 204: Configuring The Syslog Server Settings

    IP address in Secondary Syslog Server Address. In Port, type the syslog port number on the secondary server. In Protocol, select the UDP or TCP protocol as appropriate. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 205 Local0 (default), Local1, Local2, Local3, Local4, Local5, Local6, and Local7. 8. In Priority, accept or change the default severity to priority mapping. Default Event Severity to Syslog Priority Mapping. 9. Click Apply. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 206 Warning message, not an error, but indication that an error will occur if action is not taken Informational Normal operational messages - may be harvested for reporting, measuring throughput, etc. - no action required. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 207: Configuring The Northbound Portal Interface

    If you want to receive copies of the reports that the controller generates, configure the SMTP server settings and the email address to which the controller will send the reports. Follow these steps to configure the SMTP server settings. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 208: Configuring The Ftp Server Settings

    Configuring the FTP Server Settings Follow these steps to configure the FTP server settings for uploading raw report data (in CSV format). 1. Go to the FTP Settings for Uploading Statistics section. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 209: Setting Critical Ap Auto Tagging Rules

    This value will be applied in conjunction with the data unit that you will select in the second box. 6. In the second box, select the data unit for the threshold – M for megabytes or G for gigabytes. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 210: Configuring Q-In-Q Ether Type

    2. On the sidebar, click Manage Global User Agent Black List to view the page. 3. Click Add New to enter the name, user agent pattern, and error. 4. Click Save. You have completed adding an agent to the black list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 211: Configuring Sci Settings

    5. In SCI Server Port, type the port number over which the SCI server and controller can communicate and transfer data. 6. Click Apply. You have completed configuring the SCI server settings for the controller. Figure 105: The SCI Setting section SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 212: Enabling And Configuring Node Affinity

    6. In the Zone Assignment section, set the node affinity profile that you want each zone to use. Do the following: a) Select the check box for the zone SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 213: Managing The Certificate Store

    The certificate store is the central storage for all the security certificates that the controller uses for its web interface, AP portal, and hotspots. By default, a Ruckus Wireless-signed SSL certificate (or security certificate) exists in the controller. However, because this default certificate is signed by Ruckus Wireless and is not recognized by most web browsers, a security warning appears whenever you connect to the web interface or users connect to the AP portal or a hotspot.
  • Page 214 Country: Select the country where your organization is location from the drop-down list. 7. Click OK. The controller generates the certificate request. When the certificate request file is ready, your web browser automatically downloads it. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 215 If you have an SSL certificate issued by an SSL certificate provider, you can import it into the controller and use it for HTTPS communication. To complete this procedure, you will need the following items: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 216 9. In Key Passphrase, enter the passphrase that has been assigned to private key file. 10. Click OK. The page refreshes and the certificate you imported appears in the Installed Certificate section. You have completed importing a signed SSL certificate to the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 217 The Certificate Store page appears. 3. In the Service Certificates section, select the certificate that you want to use for each service. 4. Click Apply. You have completed assigning certificates to services. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 218: Configuring Advanced Gateway Options

    In IMEI IE, the controller will send the MAC address of the UE appended with FFFE. NOTE: • Include SCG-RAI in GTPV2: This setting will only be used when the S5/S8 interface is used for GTPv2. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 219: Configuring Cluster Planes

    To view the cluster planes that exist in the cluster, go to Configuration > System > Cluster Planes. The Cluster Planes page appears and displays a summary of the data planes and control planes that belong to the cluster. This section covers: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 220: Setting The System Ip Mode

    3. In the System IP Mode section, select the system IP mode that you want to controller to use. Options include: • IPv4 Only • IPv4 and IPv6 4. Click Apply. You have completed setting the system IP mode. Figure 112: The System IP Mode section SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 221: Rebalancing Aps Across Nodes

    3. The controller regenerates the AP configuration settings based on the calculation result. 4. The web interface displays a message to inform the administrator that the controller has completed its calculations for rebalancing APs. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 222: Configuring Control Planes

    Failure to do so may result in loss of access to the web interface or failure of system functions and services. 1. Locate the interface settings that you want to update. You can update any of the following interfaces: • Control interface (IPv4 and IPv6) SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 223 (link-local address without a prefix length). • Auto: Click this if you want the interface to obtain its IP address from Router Advertisements (RAs) or from a DHCPv6 server on the network. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 224 Note that you can only create one user defined interface, and it must be for a service and must use the control interface as its physical interface. The user defined interface (UDI) is unavailable in Virtual SmartZone (High-Scale and NOTE: Essentials).
  • Page 225 You can also assign a metric (or priority) to help the controller determines the route to choose when there are multiple routes to the same destination. Follow these steps to configure a static route. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 226: Configuring A Data Plane

    3. Scroll down to the Data Planes section, and then click the name of the data plane that you want to configure. The Edit Data Plane Network Settings [{node name}] form appears. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 227 Secondary DNS: Enter the IP address of the secondary DNS server. 7. In the Secondary (Core) Interface section, configure the interface settings: a) IP Address: Enter the IP address of the core network interface. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 228 The static route settings are configured and displayed. You can delete a static route by selecting the check box and clicking the icon. 9. Click Apply. You have completed configuring the interface settings of a data plane. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 229: Configuring Cluster Redundancy

    • Only super administrators have the capability to configure the cluster redundancy settings. • To configure cluster redundancy, you will need to retrieve the IP addresses assigned to the control interfaces of all nodes on clusters that you want to configure. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 230 Repeat steps b to d for every node in the cluster. If this cluster has two nodes, for example, this cluster control IP list must have two IP addresses. You can add up to four control IP addresses to the list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 231 You can add up to four cluster control IP lists. 7. Click Apply on the Cluster Redundancy Settings page. You have completed configuring cluster redundancy. After configuring redundancy for a cluster, Ruckus Wireless strongly recommends backing NOTE: up the controller configuration.
  • Page 232: Rehoming Managed Aps

    SNMPv2 or SNMPv3. SNMPv3 mainly provides security enhancements over the earlier version, and therefore requires you to enter authorization passwords and encryption settings, instead of simple clear text community strings. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 233 Under Privilege, select the check boxes for the privileges that you want to grant to this community. A read-only community is typically granted the Read privilege. A read-write community is typically granted the Read and Write privileges. Available privileges include: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 234 AP list, AP zones, etc., and to set a number of system settings using a Network Management System (NMS) or SNMP MIB browser. Follow these steps to configure the SNMPv3 agent. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 235 8. Repeat the steps above to create as many SNMPv3 agent users are you require. 9. Click Apply. You have completed configuring the SNMPv3 agent settings. Figure 122: SNMPv3 Agent section SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 236: Sending Snmp Traps And Email Notifications For Events

    By default, the Events table displays up to 20 events per page. If you are enabling NOTE: SNMP traps and email notifications for 10 or more events, Ruckus Wireless recommends changing the number of events shown per page. To do this, scroll down to the bottom of the page, and then change the value for Show to 250 (maximum).
  • Page 237 5. Select the check box for a notification type to enable it, or clear the check box to disable it. Options include: • SNMP Notification • Email Notification • DB Persistence 6. Click Apply. You have completed enable or disabling notifications for a single event. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 238: Configuring Event Thresholds

    3. Locate the event threshold that you want to configure. 4. Click the event name under the Name column. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 239 Degree Celsius Temperature Range: 10 to 61 Chip Set Major Default: 5 Degree Celsius Temperature Range: -20 to 5 Front Panel Major Default: 44 Degree Celsius Temperature Range: 5 to 44 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 240: Controlling Access To The Management Interfaces

    • Subnet: Fill out the Network Address and Subnet Mask boxes. For example, you can type 192.168.1.1/255.255.255.0 or 192.168.1.1/24. 7. Click Create New. The page refreshes, and then the ACL that you created appears in the ACL list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 241: Configuring Hosted Aaa Services

    SIM authentication module extends mobile services over IP access networks for UMA environments, providing the same mobile identity on unlicensed wireless networks as on mobile networks, and enables roaming and handover between networks. This section covers: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 242: Eap-Sim Configuration

    In Cache History Length, set the maximum size of cache entries. The default it 256. 5. Click Apply. You have completed configuring EAP-SIM based authentication using AAA server. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 243: Eap-Aka Configuration

    4. In the EAP-AKA Cache Cleanup Configuration section, configure the cleanup time for the cache to be cleaned. At cleanup time, all the cache entries (except the ones which were used during the last history length) will be deleted. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 244 In Cache History Length, set the maximum size of cache entries. The default it 256. 5. Click Apply. You have completed configuring EAP-AKA based authentication using AAA server. Figure 128: Configuring EAP-AKA authentication SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 245: Working With Management Domains

    3. To view a list of subdomains that have been created, scroll down to the Subdomains section. The table in this section shows a list of existing subdomains, as well as the following information for each subdomain: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 246: Creating A New Management Domain

    3. In Description, type a short description for the management domain. 4. Click OK. 5. The page refreshes, and then the management domain that you created appears under the Subdomains table. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 247: Deleting A Management Domain

    You can create Administrator Accounts and assign it to a Role provided you associate the Role with a domain it must manage. Follow these steps to assign an Administrator Account to a Role. Before performing this task, ensue that you have: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 248 6. Login to the controller's management interface with the new account name, e.g. Test-Cust. After you login with the new account name, you will see the new user role and account as shown in the figure. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 249 Assigning an Administrator Account to a Role Figure 132: Controller screen after logging in with the new Administrator Account You have successfully added an Administrator Account to a Management Domain and assigned a Role to it. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 250: Managing Administrator Accounts

    2. Click the account name to view the account details or to edit the account. • Account Name • Real Name • # of Assigned Domains: The number of domains that this administrator account manages. • Job Title • Contact Phone SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 251 • Realms • Primary Server • Secondary Server • Created By • Created On • Actions that you can perform Figure 133: Administrator View of Accounts, Roles and RADIUS Servers SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 252: Creating An Administrator Account

    An administrator role defines the tasks that an administrator can perform. Follow these steps to create a new administrator role. 1. In the Administrator Roles section, click Create New. The Create New Administrator Role form appears. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 253: Editing An Administrator Role

    Remember to click the icon next to each folder to view all capabilities that are included. 4. To add a capability, select the check box next to it. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 254: Cloning An Existing Administrator Role

    If you want to use a primary and secondary RADIUS servers for authenticating NOTE: administrator, follow the steps in Using a Backup RADIUS Server for Authenticating Administrators. You have completed adding a RADIUS server for authenticating administrators. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 255: About Tacacs+ Support

    11. Click Create New. About TACACS+ Support Terminal Access Controller Access-Control System Plus (TACACS+) is one of the Authentication, Authorization and Accounting protocols that can be used to authenticate controller SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 256: Using A Backup Radius Server

    1. Select the check box next to Enable backup RADIUS support. 2. In the Primary Server section, fill out the IP address, port number, and shared secret as you did in the previous section. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 257 • Reconnect Primary: Type the number of minutes after which the controller will attempt to reconnect to the primary RADIUS server after failover to the backup server. 5. Click Apply. You have completed adding primary and secondary RADIUS servers for authenticating administrators. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 258 Managing Administrator Accounts Using a Backup RADIUS Server Figure 137: Enabling the backup RADIUS server SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 259: Testing An Aaa Server

    Testing an AAA Server To ensure that the controller administrators will be able to authenticate successfully with the RADIUS server type that you selected, Ruckus Wireless strongly recommends testing the AAA server after you set it up. The test queries the RADIUS server for a known authorized user and return groups associated with the user that can be used for configuring roles within the controller.
  • Page 260: Deleting An Administrator Account, Role, Or Radius Server

    You have completed deleting an administrator account, role, or RADIUS server used for authenticating administrators. The default administrator account and role, which exist on the controller by default, NOTE: cannot be deleted. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 261: Managing Mobile Virtual Network Operator Accounts

    Follow these steps to view a list of mobile virtual network operator (MVNO) accounts. • Go to Configuration > Mobile Virtual Network Operators. The MVNO table appears and displays a summary of mobile virtual network operator accounts that have been created. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 262: Creating A New Mvno Account

    You can only select a single AP zone at a time. If you want to grant the MVNO NOTE: account management privileges to multiple AP zones, select them one at time. b) Click Apply. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 263 The RADIUS Servers for Administrator Authorization and Authentication form appears. b) In Name, type a name for the RADIUS service. c) In Realm, type the realm or realms to which the RADIUS server belongs. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 264 263, click Create New to save the MVNO account. The page refreshes, and the MVNO account that you created appears on the list of existing MVNO accounts. Figure 140: The Create New Virtual Network Operator form SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 265: Using A Backup Radius Server For Authorizing And Authenticating Mvnos

    • WLAN services • Super Administrator (and Assign Capabilities to Administrator Role) • RADIUS Servers for Administrator Authorization and Authentication 4. Click Apply. You have completed editing the MVNO account. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 266: Deleting An Mvno Account

    A confirmation message appears. 4. Click Yes. The list of MVNO accounts refreshes, and then the MVNO account that you deleted disappears from the list. You have completed deleting an MVNO account. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 267: Creating And Managing Hotspots

    Hotspots are commonly available in public venues such as hotels, airports, coffee shops, and shopping malls. All Ruckus Wireless access points have a built-in hotspot module that can be enabled and deployed on available WLANs. In addition to the hotspot capability of Ruckus Wireless access points, the controller provides the Captive Portal and Subscriber Portal modules, which are required by a hotspot infrastructure.
  • Page 268: How Hotspot Authentication Works

    This section describes the steps that a hotspot user performs to gain access to the hotspot portal and how the controller handles the hotspot access request. Ruckus Wireless hotspot portals are based on the Wireless Internet Service Provider NOTE: roaming (WISPr) standards.
  • Page 269 URL. (2) The UEs and the controller must be associated with the same DNS server and the DNS server must resolve the subscriber portal URL. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 270 Creating and Managing Hotspots How Hotspot Authentication Works Figure 141: Basic flow of the hotspot authentication process for an HTTP-based request SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 271: Call Flow For Devices That Use A Web Proxy

    Non-Transparent proxy is an out-of-line proxy where the user device or browser (depending on the device OS) must be configured with the proxy settings for the proxy to receive requests. The call flow described in this section relates to Non-Transparent proxy deployments. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 272 Hotspot redirection will fail if the proxy is on the same subnet as the client, or if the client NOTE: proxy configuration is any port other than 8080 or 3128. Figure 143: Basic flow of the hotspot authentication process for an HTTP proxy-based request SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 273: Devices Using A Static Web Proxy

    The controller's built-in Web proxy application can establish a connection with the browser, assume the role of a proxy, and then redirect the user to the logon page for authentication and, after a successful authentication, to the requested page. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 274: Devices Using A Dynamic Web Proxy

    Windows Network Awareness, a feature that allows Windows services and applications to automatically select the network connection best suited to their tasks, from working properly. Microsoft NCSI has been removed from the user agent blacklist in release 3.1 and later. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 275: Notes On Using Ios Devices To Access The Hotspot

    HTTP requests from Kindle devices use a different URL: http://spectrum.s3.amazonaws.com/kindle-wifi/wifistub.html Ruckus Wireless has designed the Captive Portal to respond to the HTTP request sent by the Kindle Fire device with the following page: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN"...
  • Page 276: What You Will Need

    UE triggers this portal URL request, the AP lets the request through (without performing DNAT to the controller's captive portal), as it is configured as an ACL on AP, directly to the external portal server. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 277: Creating A User Defined Interface

    General System Settings page, and then enter the password in Step 10. 10. In the Northbound Portal Interface section, type the password for the northbound interface in the box provided. 11. Click Apply. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 278: Adding A Radius Server To The Controller

    RADIUS accounting to the controller. The form for adding a RADIUS accounting server is the same as for adding a RADIUS server – you only need to click RADIUS Accounting instead of RADIUS. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 279: Creating A Hotspot Wlan

    Hotspot (WISPr), and then complete the rest of the steps for creating a WLAN. Configuring Smart Client Support Ruckus Wireless hotspots support the WISPr Smart Client feature, which allows client devices to log on to a hotspot seamlessly without requiring the user to go through the logon page.
  • Page 280: Creating A Wlan

    4. Save the template. Hotspot creation requires that you select a hotspot portal to use. Make sure that you NOTE: already created a hotspot portal before you create a hotspot WLAN. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 281: Downloading Captive Portal And Subscriber Portal Logs

    Follow these steps to download the Captive Portal and Subscriber Portal logs from the controller. 1. Go to Administration > Diagnostics. The Diagnostics page appears. 2. On the sidebar, click Application Logs & Status. The Application Logs & Status page appears. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 282 SubscriberPortal to download its logs. Figure 151: Click the save to disk icon to download the Captive Portal logs SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 283: Monitoring Ap Zones, Access Points, And Wireless Clients

    Follow these steps to view a summary of existing AP zones. 1. Go to Monitor > AP Zones. The AP Zones in Management Domain page appears and displays a table of all existing AP zones. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 284 Clicking this link displays detailed information about the Administration domain or subdomain. Description Brief description of the AP zone AP Firmware Ruckus Wireless firmware version that is installed on the APs that belong to the zone SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 285: Exporting The Ap Zone List To Csv

    1. Go to Monitor > AP Zones. The AP Zone List page appears. 2. Click the Export CSV button in the content area. The following message appears: Downloading AP Zone Data. Please wait... SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 286: Viewing The Configuration Of An Ap Zone

    The page refreshes and displays the AP zone configuration details (shown in Figure 154: Page showing the AP zone configuration details on page 286). Figure 154: Page showing the AP zone configuration details SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 287: Viewing All Aps That Belong To An Ap Zone On Google Maps

    Figure 155: Page showing APs that belong to the AP zone on Google Maps Monitoring Managed Access Points This section provides information on how to monitor and view information about the access points (both Ruckus Wireless access points and 3rd party access points) that you are managing using the controller. Topics covered include:...
  • Page 288 Model Model number of the Ruckus Wireless access point AP Firmware Firmware version that is installed on the access point SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 289 Downloading the Support Log from an Access Point on page 291. – Click to run network connectivity tests (PING and traceroute) on this access point. – Click to restart the access point. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 290: Exporting The Access Point List To Csv

    • Outstanding alarmsFor information on how to clear or acknowledge alarms, see Clearing Alarms on page 307. • Events 4. To edit the AP configuration details, click View AP Configuration. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 291: Downloading The Support Log From An Access Point

    ® The support log contains important technical information that may be help Ruckus Wireless Support troubleshoot the issue with the access point. Follow these steps to download the support log from an access point.
  • Page 292: Restarting An Access Point Remotely

    AP? 4. Click OK. The controller sends a restart command to the access point, and then the access point restarts itself. You have completed restarting an access point remotely. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 293: Running Ping And Traceroute On An Access Point

    5. Click either Ping or Trace Route (depending on which test you want to run). The blank box below is populated with the test results. You have completed running a ping or traceroute test. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 294: Monitoring Wireless Clients

    Go to Monitor > Clients. The Associated Clients List page appears and displays a table that lists all access points that are currently associated with the managed access points. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 295 Configuration of an Access Point on page 290. WLAN (SSID) Name of the WLAN service or SSID with which the wireless client is associated. VLAN VLAN ID assigned to the wireless client SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 296: Exporting The Wireless Client List To Csv

    3. When the message disappears, check the default download folder for your web browser and look for a file named clients.csv. ® 4. Use a spreadsheet application (for example, Microsoft Excel ) to view the contents of the CSV file. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 297: Viewing Information About A Wireless Client

    MAC address, IP address, authentication method, encryption method, connection details, operating system, and traffic statistics, among others. Recent connectivity events that occurred on the wireless client are displayed in the Events section at the bottom of the page. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 298: Measuring Wireless Network Throughput With Speedflex

    1. Find out the MAC address of the AP that you want to use for this test procedure. 2. Log on to the controller web interface. 3. If you want to test AP throughput, click Monitor > Access Points. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 299 When the tests are complete, the results appear below the Start button. Information that is shown includes the downlink/uplink throughput and the packet loss percentage during the tests. Figure 165: The SpeedFlex page SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 300: Monitoring The System, Alarms, Events, And Administrator Activity

    <new cluster name> command. However, you can change the cluster name in stand alone, two node, three node and four node clusters on SCG-200 and vSZ-H. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 301: Displaying The Chassis View Of Cluster Nodes

    • To view the chassis of the cluster node, click Cluster Chassis View on the System Cluster Overview page. The information on the chassis view updates automatically every 30 seconds. This polling NOTE: frequency is not configurable. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 302: Starting The Cluster Real-Time Monitor

    • Control Tx (Port0, Port 3) • Cluster Tx (Port1, Port 4) • Management Tx (Port2, Port 5) • Control Rx (Port0, Port 3) • Cluster Rx (Port1, Port 4) SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 303: Monitoring Rogue Access Points

    AP and connects it to the LAN, to gain wireless access to other LAN resources. This would potentially allow even more unauthorized users to access your corporate LAN - posing a security risk. Rogue APs also interfere with nearby Ruckus Wireless APs, thus degrading overall wireless network coverage and performance.
  • Page 304: Viewing Alarms

    10 to 250 entries per page. Alternatively, you can click the >> (next) link to display the next 20 alarms on another page. Figure 170: The Alarm page, displaying alarms in the DataPlane category SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 305: Using The Search Criteria Section

    Alarms page. If you want to filter the alarms that are displayed on the page (for example, you want to display only critical alarms), use the Search Criteria section. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 306: Exporting The Alarm List To Csv

    ® 4. Use a spreadsheet application (for example, Microsoft Excel ) to view the contents of the CSV file. You have completed exporting the alarm list to CSV. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 307: Clearing Alarms

    An event is an occurrence or the detection of certain conditions in and around the network. An AP being rebooted, an AP changing its IP address, and a user updating an AP's configuration are all examples of events. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 308 Event Type Type of event that occurred (for example, AP configuration updated) Severity Severity level assigned to the event. Possible values include (from most severe to least severe): Critical Major SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 309: Using The Search Criteria Section

    Source, leave Search Plane by blank, and then select Critical in Severity. 5. Click Search. The page refreshes and displays the events that match the search criteria that you defined. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 310: Exporting The Event List To Csv

    4. Use a spreadsheet application (for example, Microsoft Excel ) to view the contents of the CSV file. You have completed exporting the event list to CSV. Figure 174: Exporting the event list to CSV SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 311: Viewing Administrator Activity

    Figure 175: The Administrator Activity List displays the most recent administrator actions Table 19: Administrator activity details on page 312 lists the administrator activity details that are displayed on the Administrator Activity List page. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 312: Using The Search Criteria Section

    For example, if you want to view all actions performed by a particular administrator for the past month, define the date and time, and then select the name of the administrator in Administrator. 4. Click Search. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 313: Exporting The Administrator Activity List To Csv

    ® 4. Use a spreadsheet application (for example, Microsoft Excel ) to view the contents of the CSV file. You have completed exporting the administrator activity list to CSV. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 314 Monitoring the System, Alarms, Events, and Administrator Activity Viewing Administrator Activity Figure 177: Click the Export CSV button to download a CSV file that contains details of administrator activity SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 315: Working With Reports

    Client number and airtime can be shown in different time intervals for a specified duration. The report can be generated based on a specific management domain, AP zone, AP, SSID, or radio type. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 316: Continuously Disconnected Aps Report

    317 Step 2: Define the Resource Filter Criteria on page 317 Step 3: Define the Time Filter on page 318 Step 4: Define the Report Generation Schedule on page 319 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 317: Step 1: Define The General Report Details

    AP zones from the drop-down list one at a time. To delete an AP zone that you selected previously, click the icon next to the management domain name. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 318: Step 3: Define The Time Filter

    The controller uses this time interval-time filter combination to determine the period NOTE: from which to generate the report and how often to generate it. Continue to Step 4: Define the Report Generation Schedule on page 319. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 319: Step 4: Define The Report Generation Schedule

    Note, though, that you must only type a single email address in each text box. Continue to Step 6: Export the Report to an FTP Server (Optional) on page 320. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 320: Step 6: Export The Report To An Ftp Server (Optional)

    To download and view a comma-separated value (CSV) version of the report, click the CSV link that is in the same row as the version that you want to view. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 321: Deleting A Report

    Actions column. A confirmation message appears. 4. Click OK. The list of reports refreshes, and then the report that you deleted disappears from the list. You have completed deleting a report. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 322: Working With Local, Guest, And Remote Users

    • Last Name • Email • Phone • Country • City • Street • Zip Code • State: Select Enabled to enable this user profile or select Disabled. • Remark SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 323 2. Locate the user account that you want to edit, and then click the user name. The Edit User: [{User Name}] form appears. 3. Edit the user account by updating the fields in the Contact Details and Login Details sections. 4. Click OK. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 324: Working With Guest Users

    Follow these steps to create a guest access portal. 1. Create an AP zone that you want to use to provide hotspot access to guest users. For more information, see Creating an AP Zone on page 32. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 325 ® c) Web Portal Logo: By default, the guest hotspot logon page displays the Ruckus Wireless logo. To use your own logo, click the Upload button, select your logo (recommended size is 138 x 40 pixels, maximum file size is 20KB), and then click Upload.
  • Page 326 Step 3: Generate a Guest Pass Follow these steps to generate a guest pass. 1. Click Identity > Users. The Users page appears. 2. Click Guest Pass > Guest Pass Service. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 327 In Remarks (optional), type your notes about this guest pass, if any. 6. Click Generate. The page refreshes, and then the guest pass you generated appears in a table, along with other guest passes that exist on the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 328 (See Figure 182: Options for delivering guest passes to guest users on page 328). These delivery options include: Figure 182: Options for delivering guest passes to guest users SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 329 1. Select the guest passes that you want to export to CSV by selecting the check boxes before them. 2. Click Export CSV. Your web browser downloads the CSV file to its default download location. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 330 A dialog box appears and informs you that the emails have been sent to the message queue successfully 7. Click OK to close the dialog box. You have completed sending guest passes via email. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 331 A dialog box appears and informs you that the SMS messages have been sent to the message queue successfully 8. Click OK to close the dialog box. You have completed sending guest passes via SMS. Figure 186: Options for sending guest passes via SMS SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 332 • Effective from the creation time: This type of guest pass is valid from the time it is first created to the specified expiration time, even if it is not being used by any end user. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 333 CSV file appears below the Browse button. 12. Click Generate. The page refreshes, and then the guest pass you generated appears in a table, along with other guest passes that exist on the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 334 2. Select the check boxes before the guest user accounts that you want to delete. 3. Click Delete Selected. A confirmation message appears. 4. Click Yes to confirm. The page refreshes, and the guest user accounts that you deleted disappears from the list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 335 3. Using an HTML editor, create a new HTML or text file. 4. Add content to the file. Typically, a printout template contains instructions for connecting to the controller hotspot. Figure 187 for the content of the default printout template. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 336 An information message box appears and informs you that the template file has been uploaded successfully. 10. Click OK. The template file you uploaded now appears on the list of templates. Figure 191: The Upload a Template File form SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 337: Working With User Roles

    If the user is connected at the time when his or her subscription expires, the user will get NOTE: disconnected from the AP and any attempts to reauthenticate will fail. This section covers: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 338: Viewing A List Of Subscription Packages

    Options available include: • Hour • Day • Week • Month • Year • Never 6. In Expiration Value, set the actual value to use in combination with the Expiration Time. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 339: Editing A Subscription Package

    4. Edit the profile by changing any of the following options: • Name • Description • Expiration Interval • Expiration Value 5. Click Save. You have completed editing a package. Figure 195: Editing a subscription package SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 340: Deleting A Subscription Package

    4. Click Yes. The page refreshes, and the package that you deleted disappears from the table. You have completed deleting a package. Figure 196: Deleting a subscription package SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 341: Performing Administrative Tasks

    The following confirmation message appears: Are you sure you want to back up the cluster? 4. Click Yes. The following message appears: The cluster is in maintenance mode. Please wait a few minutes. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 342: Restoring A Cluster Backup

    Please try again in a few minutes. appears after you log on to the controller web interface, wait for about three minutes. The dashboard will appear shortly. The message appears because the controller is still initializing its processes. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 343 8. Check the Health Status column and verify that all of the controller processes are online. (See #unique_407/unique_407_Connect_42_ID-2649-00000068 on page 344). You have completed restoring the cluster backup. Figure 198: Under Actions, click the calendar icon to start the cluster restore process SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 344: Deleting A Cluster Backup

    The following confirmation message appears: Are you sure you want to delete the selected resource? 4. Click Yes. The page refreshes and the row is deleted from the Cluster Backups list. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 345: Backing Up And Restoring The Controller's Network Configuration From An Ftp Server

    1. Log on to the controller from the controller's command line interface (CLI). For more information, see the corresponding Command Line Interface Reference Guide for your controller platform. 2. At the prompt, enter en to enable privileged mode. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 346 Verify that the Created On column displays an entry that has a time stamp that is approximate to the time you started the backup. Figure 204: Enter the show backup-network command SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 347: Restoring From An Ftp Server

    Restoring a backup file to the controller requires restarting all of the controller CAUTION: services. Follow these steps to restore a backup file of the controller's network configuration that you previously uploaded to an FTP back to the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 348 7. Run restore network to start restoring the contents of the backup file to the current controller. The CLI displays a list of backup files, and then prompts you to select the backup file that you want to restore to the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 349 10. Restore the network configuration contained in the selected backup file. 11. Restart all services. When the restore process is complete, the following message appears on the CLI: All services are up! SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 350 Run show cluster-state to verify that the node and the cluster are back in service. b) Run show interface to verify that all of the network configuration settings have been restored. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 351 Figure 211: Verify that the node and cluster are back in service and that the network configuration has been restored successfully You have completed importing and applying the network configuration backup from the FTP server to the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 352: Backing Up And Restoring System Configuration

    The following confirmation message appears: Are you sure you want to back up the controller’s configuration? 3. Click OK. A progress bar appears as the controller creates a backup of the its database. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 353: Exporting The Configuration Backup To An Ftp Server Automatically

    The controller attempts to establish connection to the FTP server using the user name and password that you supplied. If the connection attempt is successful, the following message appears: FTP server connection established successfully. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 354: Scheduling A Configuration Backup

    • Minute: Select the minute of the hour. 6. Click Apply. You have completed configuring the controller to create a backup automatically. When a scheduled configuration backup is generated, it appears in the System Configuration Backups section. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 355: Downloading A Copy Of The Configuration Backup

    For example, if the controller cluster is named ClusterA and you created the configuration backup on September 7 at 11:08 AM, the backup file name will be: ClusterA_BackupConf_0907_db_09_07_11_08.bak You have completed downloading a copy of the configuration backup. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 356: Restoring A System Configuration Backup

    6. Check the web interface pages (for example, Configuration, Report, and Identity) and verify that the setting and data contained in the backup file have been restored successfully to the controller. You have completed restoring a system configuration backup file. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 357: Deleting A Configuration Backup

    The page refreshes, and the backup file that you deleted disappears from the System Configuration Backups section. You have completed deleting a backup file. Figure 218: Under the Actions column, click the trash bin icon SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 358: Resetting A Node To Factory Settings

    Resetting a node to factory settings will erase all of its system configuration settings, NOTE: backup files, and cluster settings. Before resetting a node to factory settings, Ruckus Wireless strongly recommends that you export all of the backup files on the controller to an FTP server using either the web interface or CLI.
  • Page 359: Using The Cli

    This command is required to trigger the factory reset process. A confirmation message appears. 4. Enter yes to confirm. The controller reboots, and then triggers the factory reset process. Figure 221: Enter reload to trigger the factory reset process SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 360: Upgrading The Controller

    Ruckus Wireless may periodically release controller software updates that contain new features, enhancements, and fixes for known issues. These software updates may be made available on the Ruckus Wireless support website or released through authorized channels. Although the software upgrade process has been designed to preserve all controller...
  • Page 361 The controller uploads the file to its database, and then performs file verification. After the file is verified, the Upgrade Pending Patch Information section is populated with information about the upgrade file. The Upgrade and Backup & Upgrade buttons also appear in this section. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 362 The controller starts the process that you selected. The screens that appear next will depend on the process that you selected to upgrade immediately or to back up and then upgrade the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 363 When the controller log on page appears again, you have completed upgrading the controller. Continue to Verifying the Upgrade on page 364 to check if the upgrade was completed successfully. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 364: Verifying The Upgrade

    2. You prefer a previous software version to the newer version to which you have upgraded successfully. For example, you feel that the controller does not operate normally after you SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 365: Recovering A Cluster From An Unsuccessful Upgrade

    CLI. If you have a two-node controller cluster, you must have cluster backup on both of the nodes. ® To ensure that you will be able to roll back to a previous version, Ruckus Wireless strongly recommends the following before attempting to upgrade the controller software: •...
  • Page 366: Uploading Ap Patch Files

    Uploading AP Patch Files New AP models and firmware updates are supported without the need to upgrade the controller image by using the AP patch files supplied by Ruckus Wireless. Follow these steps to upload the patch file: 1. Go to Administration > Upload AP Patch.
  • Page 367: Working With Logs

    DBlade The data plane application and data core logs are sent to the control plane through the syslog. DBlade lists the logs on the control plane. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 368 Uses the STa/Gx interface for authentication through the Diameter Protocol. Diagnostics An interface that can be use to upload Ruckus Wireless scripts (.ksp files) for troubleshooting or applying software patches. This interface displays the diagnostic scripts and system patch scripts that are uploaded to a node.
  • Page 369: Downloading All Logs

    7. When the log files are extracted (for example, adminweb.log, cassandra.log, communicator.log, etc.), use a text editor to open and view the log contents. You have completed downloading all the controller logs. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 370: Downloading Snapshot Logs Generated From The Cli

    6. Go to your browser's default download folder, and then verify that the snapshot log file or files have been downloaded successfully. 7. Extract the contents of the tar file. You have completed downloading snapshot logs from the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 371: Managing Ap Certificate Replacement

    The system generates an apCertificateExpireSystem alarm and event when an AP certificate expires. To renew the AP certificate, you must perfom the following tasks (listed in order): Viewing AP Certificate Status on page 372. Exporting AP Certificate Requests on page 372 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 372: Viewing Ap Certificate Status

    You can export certificate requests for a new AP that is managed by the controller. Follow these steps to export AP certificate requests. 1. Go to Administration > AP Certificate Replacement. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 373 To manage multiple export request files, change the filename before uploading it to uniquely identify the file. For example: cert-scg-cluster5f6433ef-711b-4f44-b38a-ddd485ee2c37-R500.req You have successfully exported the AP certificate request file. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 374: Requesting Ap Certificate Renewal

    2. Click Browse to select the .req file exported from Certificate Refresh page. 3. Enter the e-mail address for communication. 4. Click Upload. You will receive an e-mail acknowledgment from Ruckus Wireless as shown in the figure. Figure 234: Sample e-mail acknowledgment SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 375: Importing Ap Certificate Responses

    5. View the status of your request from the Certificate Renewal Request page as shown. Figure 235: Certificate Renewal Request page 6. After the request is processed, you will receive the following response from Ruckus Wireless, with a link to the .res response file for Import on the Certificate Refresh page.
  • Page 376 Certificate Status section displays APs for which certificate refresh is in progress or have failed. You can also view other AP certificate refresh statuses from the Updating, Update Pending and Update Failed counters. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 377 Performing Administrative Tasks Managing AP Certificate Replacement Figure 238: The number after "Updating" indicates the number of APs on which the certificate is being updated SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 378: Confirming Ap Certification Status

    1. Go to Administration > AP Certificate Replacement. The AP Certificate Replacement page appears 2. In Certificate Status section, view the status of the certification update from the Status column. Figure 240: Certificate status SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 379: Managing Licenses

    Use the Search terms option to look for APs by name, model, serial number, or description. Managing Licenses Depending on the number of Ruckus Wireless APs that you need to manage with the controller, you may need to upgrade the controller license as your network expands.
  • Page 380: Default Licenses

    AP using the controller. Default Support License The default support license (SUPPORT-EU-DEFAULT)default SCG 200 support license (SUP-SCG200-EU-DEFAULT) is same as the end user support license, but with a 90-day SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 381: Viewing Installed Licenses

    Description License Type The type of license file Total The maximum number of access points that can be supported by all the licenses that have been uploaded to the controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 382: Configuring The License Server

    Available field will show 4997. Figure 243: The License Summary section Configuring the License Server Ruckus Wireless provides two options for managing the licenses that you have purchased for the controller: Cloud License Server Also known as the SmartLicense server, this a cloud-based server that stores all of the licenses and support entitlements that you have purchased for the controller.
  • Page 383: Importing License Files

    Follow these steps to import a license file into the controller. 1. Obtain the license file. You can do this by logging on to your Ruckus Wireless Support account, going to the license management page, and then downloading the license file (the license file is in .bin format).
  • Page 384: Downloading Licenses

    6. When the download is complete, go to the default download folder that you have configured for your web browser, and then verify that the binary copy of the license files (with .bin extension) exists. You have completed downloading copies of the controller licenses. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 385: Synchronizing Controller With The License Server

    If the previously saved license data are different the latest license data on the server, the information in the Installed Licenses section refreshes to reflect the latest data. You have completed manually synchronizing the controller with the license server. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 386: Appendix A: Overview Of The Captive Portal

    To establish data traffic tunnel to core network (GGSN/PGW), the controller receives associated IMSI and MSISDN user identities from the AAA server preconfigured with the required credentials to map following identifiers: • User name • MAC address • IMSI value • MSISDN value SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 387: Configuring The Captive Portal

    MAC address. This functionality is supported as part of the MAC bypass feature with Ruckus Wireless APs. When a user reconnects to a WLAN, the Ruckus Wireless AP triggers MAC-based authentication. Upon a successful authentication, the AAA server returns the associated identifiers of IMSI and MSISDN...
  • Page 388 Up and Move Down buttons. DNS servers that are higher up on the list of servers are given higher priority. 5. In the APN Resolution section, click Create New to define the IP address of the GGSN that should serve the AP. 6. Configure the following options: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 389: Configuring An Authentication Profile

    This is the default setting. 8. RFC 5580 Out of Band Local Delivery: Select the Enable for Ruckus APs Only is check box if you want AP location information for Ruckus Wireless APs to be included in RADIUS accounting messages.
  • Page 390 Revive Interval, or make sure that the value for Response Window is always higher than the value for RADIUS NAS request timeout multiplied by the value for RADIUS NAS max number of retries. For information on configuring SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 391 Enter the User Group name here. Active Directory/LDAP users with the same group attributes are automatically mapped to this user role. 14. Click OK at the bottom of the form. You have completed adding an authentication profile. Figure 248: The Authentication Profile form SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 392: Configuring An Accounting Profile

    Response Set the time (in seconds) after which, if the AAA server does not respond to Window a request, the controller will initiate the "zombie period" (see below). If the SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 393 For example, if the MOR is set to 1000 and the threshold is set to 50%, the controller will generate an event when the number of outstanding requests reaches 500. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 394: Configuring Ttg+Pdg Forwarding Profiles

    • PDG UE Session Idle Timeout (secs): Type the timeout period (in seconds) after which an expected response message is considered to have failed. 5. In DHCP Relay, configure the following options to enable the DHCP relay agent in the controller: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 395 • Profile Name 7. In Default APN Settings, configure the following: • No Matching Realm Found • No Realm Specified 8. Click Create New. You have completed adding a TTG+PDG profile. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 396: Configuring The Wispr (Hotspot) Services Of An Ap Zone

    6. In the Redirection section, configure the following options: Option Description Smart Client Select one of the following options: Support • None: Select this option to disable Smart Client support on the hotspot service. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 397 9. In Walled Garden, click Create New to add a walled garden. A walled garden is a limited environment to which an unauthenticated user is given access for the purpose of setting up an account. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 398: Ap Zone Wlan Services & Group

    3. In WLAN Usage options: • Access Network - Enable Tunnel WLAN traffic through Ruckus GRE. • Core Network - Enable Bridge option • Authentication Type - Enable Hotspot (WISPr) 4. In Authentication options: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 399 • User Traffic Profile - Choose the forwarding policy as Bridge. • Enable WISPr TTG support 8. Click Apply. You have completed configuring WLAN for Captive Portal. With this you have completed configuration for Captive Portal. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 400 Overview of the Captive Portal Configuring the Captive Portal Figure 252: Configuring WLAN SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 401: Captive Portal Workflows And Vsa

    8. The UE re-associates to the AP. 9. MAC authentication is triggered by the controller. The AAA server responds with access accept with IMSI, MSISDN, QoS (optional) and APN (optional). SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 402: Successful Gtp Tunnel Establishment

    8. The UE re-associates to the AP. 9. MAC authentication is triggered by the controller. The AAA server responds with access accept with IMSI, MSISDN, QoS (optional) and APN (optional). SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 403: Ruckus Wireless Vsas For The Captive Portal

    12. The controller also triggers the accounting message towards the AAA accounting server. Figure 254: Successful GTP tunnel establishment Ruckus Wireless VSAs for the Captive Portal Ruckus Wireless vendor-specific attributes (VSAs) are values included in Radius access accept messages by the AAA server. The following table lists the Ruckus Wireless VSAs.
  • Page 404 GTPv2 - Non-TTG session or VANILLA-REDIRECT - No Ruckus VSA Ruckus-Session-Type (125) in Access Accept VANILLA-REDIRECT - Non-TTG session or VANILLA-REDIRECT - No Ruckus VSA Ruckus-Session-Type (125) in Access Accept SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 405: Appendix B: Statistics Files The Controller Exports To An Ftp Server

    FTP. The default AP inventory file name format is: ap_YYYY_MM_DD_hh_mm_ss_ms.csv where ms stands for three-digit milliseconds. The following table lists the attributes in the AP inventory file. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 406 Time AP heartbeat was lost (if any). If heartbeat has not been lost, the value is "FALSE." meshSSID Mesh SSID used by the AP to form the mesh extPort External port SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 407 Registration state of the AP. Possible values include: • 0: Pending • 1: Approved • 2: Rejected adminstrativeState AP WLAN state. Possible values include 0 (unlocked) and 1 (locked). SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 408: Control Plane Statistics

    Column Name Description ID assigned to the zone mobilityZoneName Name assigned to the zone description Description of the zone createdDatetime Date and time (in Unix timestamp) when the zone was created SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 409: Zone Statistics

    Average number of concurrently connected clients during the period failedAssoc Number of failed associated clients during the period maxNumClients Maximum number of concurrently connected clients during the period SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 410: Ap Statistics

    Number of clients that failed to associate with the AP during the period maxNumClients Maximum number of concurrently connected clients during the period timestamp Data aggregation time (in Unix timestamp) SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 411: Zone Time Radio Statistics

    Number of clients that failed to associate with the AP during the period maxNumClients Maximum number of concurrently connected clients during the period phyError Number of PHY errors during the period SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 412: Zone Time Wlan Statistics

    Total number of management bytes received during the period rxDataBytes_r Total number of data bytes received during the period wlanId Identifies the specific WLAN ID on the AP SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 413: Ap Time Radio Statistics

    Total number of data frames received during the period newAssoc Number of newly associated clients during the period timestamp Data aggregation time txFrames_r Total number of data frames transmitted during the period SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 414: Ap Time Wlan Statistics

    Total number of data frames received during the period txRateKbps Transmit data rate in kilobits per second during the period newAssoc Number of newly associated clients during the period timeStamp Data aggregation time SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 415: Control Plane Statistics

    Traffic received (in bytes) on bond0 eth1_txBpsMin Minimum transmitted throughput (in bits per second) on eth1 eth1_txPackets Number of packets transmitted on eth1 eth2_txBytes Transmitted traffic (in bytes) on eth2 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 416 Minimum transmitted throughput (bps) on eth2 eth5_txBpsMin Minimum transmitted throughput (bps) on eth5 memoryPercMax Maximum memory percentage bond2_rxDropped Dropped received packet on bond2 memoryPercMin Minimum memory percentage eth3_txPackets Transmitted packet count on eth3 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 417 Maximum received throughput (bps) on eth1 bond2_txBytes Transmitted traffic bytes on bond2 eth3_rxPackets Received packet count on eth3 diskTotalMax Maximum total disk volume diskTotalMin Minimum total disk volume bond2_rxBpsMax Maximum received throughput (bps) on bond2 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 418 Maximum transmitted throughput (bps) on eth0 memoryPerc Memory usage percent eth1_rxBpsMin Minimum transmitted throughput (bps) on eth1 bond2_txPackets Transmitted packet count on bond2 eth2_rxBytes Received traffic bytes on eth2 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 419 Received traffic bytes on eth0 eth3_txDropped Dropped transmitted packet on eth3 bond2_rxBpsMin Minimum transmitted throughput (bps) on bond2 eth1_txBps Transmitted throughput (bps) on eth1 bond2_rxPackets Received packet count on bond2 SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 420: Data Plane Statistics

    15-minute intervals (for example, 10:00, 10:15. 10:30). txRate The rate at which the data plane was transmitting data at the time the controller generated this report SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 421: Ap Softgre Tunnel Statistics

    RX packet count of GRE interface rxBytes RX byte count of GRE interface txErrPkts TX error packet count of GRE interface rxErrPkts RX error packet count of GRE interface SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 422: Softgre Gateway Statistics

    RX byte count of GRE interface cICMP TX Error packet count of GRE interface cNonICMP RX Error packet count of GRE interface cDisconnect TX Drop packet count of GRE interface SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 423: Tenant Time Radio Statistics

    Total number of data bytes received during the period rxFrames_r Total number of data frames received during the period rxRateKbps Received data rate expressed in kilobits per second for the period SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 424: Tenant Time Wlan Statistics

    Data aggregation time txFrames_r Total number of data frames transmitted during the period wsgWlanId Represents the WLAN in the controller system rxBytes_r Total number of bytes received during the period SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 425: Tenant Zone Statistics

    • If the statistics file is exported daily: statsTenantZoneDay_YYYY_MM_DD_hh_mm_ss_ms.csv • If the statistics file is exported hourly: statsTenantZoneHour_YYYY_MM_DD_hh_mm_ss_ms.csvwhere ms stands for three-digit milliseconds. The following table lists the attributes in the tenant zone statistics file. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 426 Number of newly associated clients during the period txMgmtFrames_r Total number of management frames transmitted during the period txMgmtBytes_r Total number of management bytes transmitted during the period zoneUUID Zone identity SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 427: Tenant Zone Radio Statistics

    Total number of data bytes received during the period radioId Denote the specific radio within the AP maxNumClients Maximum number of connected clients (concurrent) during the period SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 428: Tenant Inventory File

    City where the tenant is located address Address of the tenant email Email address of the tenant description Description of the account modifiedDatetime Unix timestamp when the account was last updated SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 429 Statistics Files the Controller Exports to an FTP Server AP Inventory Column Name Description name Name of the tenant SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 430: Appendix C: Ap-Scg/Sz/Vsz/Vsz-D Communication

    Not required in 2.1.2, 2.1.3, 2.5.1, 2.6, 3.0 Required in1.x, 2.1, 2.1.1, • AP vSZ control Access to the SCG/vSZ/SZ plane control plane over secure • vSZ-D HTTPS 6868 vSZ-D Internal communication port SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 431 NAT server and if the NAT server does not support PASV-Mode FTP, enable nat-ip-translation. If the NAT server supports PASV-Mode FTP, then disable nat-ip-translation for AP firmware upgrade to progress SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 432 9999 Client Controller HotSpot 2.0 trust CA interface verification 8200 Client Controller HotSpot 2.0 Oauth in HTTP interface 8222 Client Controller HotSpot 2.0 Oauth in interface HTTPS SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 433 The destination interfaces are meant for three interface deployments. In a single interface NOTE: deployment, all the destination ports must be forwarded to the combined management/control interface IP address. Communication between APs is not possible across NAT servers. NOTE: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 434: Appendix D: Softgre Support

    The controller does not play any role in the control and data path functions (see Figure 255: The controller as a pure AP controller on page 435). SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 435: Softgre Packet Format

    Figure 255: The controller as a pure AP controller SoftGRE Packet Format Configuring SoftGRE on page 436 displays a screen shot of SoftGRE packet capture data. Figure 256: Example of SoftGRE packet format SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 436: Configuring Softgre

    Figure 257: Change the tunnel type from SoftGRE to GRE or GRE+UDP If you attempt to change the tunnel type when a tunneled WLAN exists within the zone, the following error message appears:Unable to update the configuration of the AP SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 437: Monitoring Softgre

    3. Click the MAC address of an AP whose SoftGRE traffic statistics you want to view. 4. On the AP Status tab, scroll down to the AP SoftGRE Tunnel Statistics section to view the AP SoftGRE statistics. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 438 The number of oversized Tx packets. Packets ICMP Requests The total number of ICMP requests Failed ICMP Requests The total number of failed ICMP requests You have completed viewing the AP SoftGRE statistics. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 439: Softgre Snmp Mibs

    If it receives a response from either WLAN gateway, the AP restores all tunneled WLAN services automatically. There are four types of events that APs send to the controller: • Failover from primary GRE remote peer to secondary GRE remote peer SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 440 Code: 613 Severity: Informational Attributes: • "apMac"="xx:xx:xx:xx:xx:xx" • "softgreGW"="primaryGRE" • "softgreGWAddress" = "xxx.xxx.xxx.xxx" apSoftGREGatewayNotReachable AP [{apname@apMac}] is able to reach [{softgreGW}] [{softgreGWAddress}] successfully. Code: 614 Severity: Critical Attributes: • apMac"="xx:xx:xx:xx:xx:xx" SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 441 Severity: informational Attributes: • "apMac"="xx:xx:xx:xx:xx:xx" • "softgreGW"="primaryGRE" • "softgreGWAddress"="xxx.xxx.xxx.xxx" apSoftGREGatewayNotReachable AP [{apname@apMac }] is unable to reach the following gateways: [{gateway list}] Code: 614 Default to Trap: true Severity: major Attributes: SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 442 SoftGRE Support Overview of SoftGRE Support • apMac"="xx:xx:xx:xx:xx:xx" • "softGREGatewayList"="xxx.xxx.xxx.xxx, yyy,yyy.yyy.yyy" SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 443: Appendix E: Replacing Hardware Components

    Ordering a Replacement Hard Disk To order a replacement hard disk for the controller, contact your Ruckus Wireless sales representative and place an order for FRU part number 902-0188-0000 (Hard Drive, 600GB, 10K RPM, 64MB Cache 2.5 SAS 6Gb/s, Internal).
  • Page 444: Removing An Hdd Carrier From The Chassis

    3. Remove the drive carrier by pressing the green button to open the lever. (See A in Figure 261: Removing the drive carrier on page 445). 4. Pull the drive carrier out of the chassis. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 445: Installing A Hard Drive In A Carrier

    446). Set the screws aside for use with the new drive. 2. Lift the drive out of the carrier (see B in Figure 262: Removing the hard drive on page 446). SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 446 3. Install the new drive in the drive carrier (see A in Figure 263: Installing the hard drive on page 447), and then secure the drive with the four screws that come with the carrier (see B). SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 447 4. With the drive carrier locking lever fully open, push the hard drive carrier into the drive bay in the chassis until it stops (see A in Figure 264: Inserting the carrier back into the chassis page 448). SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 448: Reinstalling The Front Bezel

    2. Move the bezel toward the right of the front panel and align it on the front panel pins. 3. Snap the bezel into place and tighten the retention screw to secure it. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 449: Replacing Psus

    60mm fans). There are also two fans located inside the power supply units. Redundancy for the two PSU fans is only achieved when both PSUs are installed. If any of the system fans requires replacement, the replacement procedure is identical. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 450 Electrostatic discharge (ESD) can damage internal components such as printed circuit boards and other parts. Ruckus Wireless recommends that you only perform this procedure with adequate ESD protection. At a minimum, wear an anti-static wrist strap attached to the ESD ground strap attachment on the front panel of the chassis.
  • Page 451 Replacing Hardware Components Installing or Replacing Hard Disk Drives Figure 266: Replacing a system fan SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 452: Appendix F: Replacing A Controller Node

    Follow the steps to back up the cluster from the controller CLI. 1. Log on to the controller CLI as a system administrator. 2. Run the enable command to enable privileged mode on the CLI. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 453: Step 3: Transfer The Cluster Backup File To An Ftp Server

    Step 3: Transfer the Cluster Backup File to an FTP Server 1. Log on to the controller CLI as a system administrator. 2. Enable privileged mode on the CLI. ruckus> enable Password: ******** ruckus# SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 454: Step 4: Restoring The Cluster Backup To The Controller

    To make it easy for you to identify the backup files, Ruckus Wireless strongly recommends moving each node's backup file to its own directory on the FTP server (for example, //ftp/node1) after the backup process is completed.
  • Page 455 On the node that you want to replace, log on to the CLI as a system administrator. b) Run the enable command to enable privileged mode on the CLI. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 456 ------------------------------------------ 1 1.1.0.0.207 2012-10-16 06:46:07 GMT 2 1.1.0.0.209 2012-10-17 05:20:51 GMT Please choose a backup version to get from remote FTP:2 Remote restore process starts Remote restore process completed SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 457: Backing Up And Restoring Configuration

    The following list show which configuration information will be backing up. • AP zones • AP zone global configuration • Zone templates • WLAN templates • AP registration rules • Access point information • General system settings • Web certificate SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 458: Backing Up Configuration

    Restoring the configured backup in a single node environment. Follow the steps below to restore configuration to a single node environment. 1. Prepare the new controller to which you will restore the cluster backup. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 459 Please choose a backup version to restore (ex: 1, 2, ...):2 c) Follow the prompts (if any) to complete the restore process. You have completed restoring the configuration to a single node controller. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 460 1. Prepare the new controller nodes and factory reset all of the existing nodes in the cluster. 2. Complete the setup procedure for one of the controller nodes. For instructions, see the SmartCell Gateway 200 Getting Started Guide for this release. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 461 When the configuration restore process on this node is complete, set up the next node and configure it to join the existing cluster. You have completed restoring configuration backup to multiple nodes in a cluster. SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 462: Ssids Supported In Release 1.1.X

    (ASCII characters space (32) to ~ (126) Supported • A-Z Characters • a-z • 0-9 • _space_!"#$%&'()*+,-./ • :;<=?@ • [\]^_` • {|} Length Unsupported Supported Unsupported Characters SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 463: Ssids Supported In Release 2.1.X

    (32) to ~ (126) Supported • A-Z Characters • a-z • 0-9 • _space_!"#$%&'()*+,-./ • :;<=?@ • [\]^_` • {|} Length Between 2 and 32 characters Supported All characters Characters SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 464: Ssids Supported In Release 3.0 And Above

    Between one and 32 characters Supported All printable ASCII characters from space (32) to Characters ~(126) Exceptions The space character (32) can be placed anywhere in the SSID (including the beginning or end) SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 465: Supported Ssids In Zoneflex Release 9.6

    Table 55: Supported SSID syntaxes in ZoneFlex AP 9.8, 9.7, and 9.6 Web Interface Length Between one and 32 characters Supported All printable ASCII characters from space (32) to Characters ~(126) Length Between one and 32 characters SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 466 For example, if you run the command "set ssid wlan0 ruckus-ap 123", the controller CLI will run the command as "set ssid wlan0 ruckus-ap 123". SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide...
  • Page 467 Index access point backing up rebooting restarting remotely backup 352, 356–357 access points 287, 290–291 deleting downloading support log restoring exporting to CSV monitoring viewing a summary viewing configuration Captive Portal account client admission control accounting profile Client admission control allows APs to adaptively allow or acknowledge deny the association of clients based on the administrative tasks 352,...
  • Page 468 dynamic psk (continued) license 379, 381, 383, viewing importing managing summary synchronizing server electrostatic discharge licenses 381, Ethernet port profiles downloading important notes viewing exporting 285, 290, LLDP access points attributes alarms location information AP zones logging off external portal logging on logon page logon url...
  • Page 469 The Link Layer Discovery Protocol (LLDP) is a vendor-neutral portal-based Layer 2 protocol that allows a network device (for types example, a Ruckus Wireless AP) to advertise its wlan usage identity and capabilities on the local network. To delete multiple RADIUS services simultaneously, follow...
  • Page 470 zombie period 389, zone template...

This manual is also suitable for:

Smartcell gateway 200

Table of Contents

Save PDF