Ruckus vSZ integration

This article will describe the configuration to enable the Cloudi-Fi Captive Portal.

You will require Ruckus vSZ Controller v5.x to continue. There is a separate documentation for v6.x

Integration tested on a vSZ controller 5.2.1.0.515

1. Get Cloudi-Fi required URL and RADIUS secret

Go to your Cloudi-Fi administration interface and get the URL for external authentication

Go to Locations Menu

Click on the menu button of the location and select "Copy Splash page URI"

• Copy the URI

• Change the URI just like this :

  

Then Go to Settings :

• Copy your Cloudi-Fi Company Key

Go to the chat interface and ask for your Radius secret

• Copy the secret as well

,

2. Create Hotspot WISPr Service

Go to Services & Profiles > Hotspots & Portals > Hotspot (WISPr) > Create

• Portal Name : Cloudi-FI Captive Portal

• Logon URL : External

• Redirect unauthenticated user, Primary : <Cloudi-FI Redirect URL>

• Start Page : Redirect to the following URL : https://login.cloudi-fi.net/success.php

• HTTPS Redirect : ON

• Session Timeout : Same valueas CLoudi-Fi Session lifetime

• Grace Period : Same value as Cloudi-Fi Session Lifetime

• Walled Garden : Add only below URL (Additional URL may be added in case of Social Media connector on your caprive portal)

*.cloudi-fi.net
*.cloudi-fi.com

• Save

3. Create Authentication Service

Go to Services & Profiles > Authentication > Proxy (SZ Authenticator)

• Name : Cloudi-FI Radius

• Service Protocol : Radius

• IP Address, Port and Secret will be provided by Cloudi-FI Support team

• Save

4. Create the Guest WLAN

Go to Wireless LANs > Select the correct Zone/WirelessGroup > Create

• Name : Your Guest SSID Name

• SSID : Your Guest SSID Name

• Authentication Type : Hotspot (WISPr)

• Method : Open

• Encryption Options : None

• Hotspot WISPr Portal : Cloudi-Fi Captive Portal

• Bypass CNA : OFF

• Authentication Service : Use the controller as proxy and Select Cloudi-FI Radius

• Radius Option NAS-ID : Select Custom : <Cloudi-Fi Company Key>

• Called Station ID : AP MAC

5. Disable MAC-Address Encryption

By default, Ruckus vSZ controller will encrypt the device's mac-address.

Cloudi-Fi needs to see the actual mac-address of the client's device.

To disable this feature, connect in CLI to your vSZ controller and run the following command in config mode :

no encrypt-mac-ip

Save the configuration.

6. Configure the Northbound Interface (NBI) credentials

To allow Cloudi-Fi to communicate with your vSZ controller, we use the NBI.

It allow us to avoid redirection issues (Security Warning to due HTTP Redirection or Certifcate warning with HTTPS redirection).

Go to System > General Settings > WISPr Northbound Interface

• Enable Northbound Portal Interface Support : ON

• Then configure you Username and password

7. Provide NBI credentials to Cloudi-Fi

Go to Cloudi-Fi Admin interface > Settings > Integrations > Ruckus SmartZone

And fill out the username and password fields

If you have any questions, please contact us at support@cloudi-fi.com