You can confirm your environment under Operator Customizations.
The following instructions outline how to setup a Ruckus SmartZone network for the Marketing4WiFi Platform. This guide covers details such as configuring RADIUS, walled garden entries, and captive portals. This guide assumes that your SmartZone is already operational and on a live network. Please make sure any firewall rules, web content filters, and other security measures have been configured to interface with the platform.
Checklist before proceeding with the Smartzone configuration
- Please ensure the necessary ports are open to the controller per Ruckus SmartZone documentation, including port 9080 both directions or guest devices will be unable to load the splash page.
- The Northbound interface must be enabled on the Smartzone and the password set used as the NBI Password when adding SmartZone gateways to hotspots in the dashboard.Follow these steps to enable the Northbound interface if it is not already done.
- Using the navigation panel to the left open System and click General Settings
- Click the Northbound Interface tab at the top
- Check the box to ‘Enable Northbound Interface support’
- Set a username and password of your choice and press ‘Ok’ to save
- If the SmartZone is not publically accessible you will need to enable NBI Mapping on each gateway in use by this SmartZone. The NBI Private IP in the gateway details should be the SmatZone cluster management IP and the NBI Public IP should be the public IP of the SmartZone.
- The MAC of all APs that will be broadcasting the Guest WiFi signal need to be properly added to the hotspot as gateways or guests could receive a hotspot deactivated message.
- Login to your SmartZone
- Using the navigation panel to the left open Services & Profiles and click Authentication
- Click Create New and configure with the following settings
- Name: Smart WiFi
- Service Protocol: RADIUS
- Backup Radius: Enabled
- Primary Server
- IP Address:
- Port: 1812
- Shared Secret:
- Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS secret
- Confirm Secret:
- Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS secret
- IP Address:
- BackUp Server
- IP Address:
- Port: 1812
- Shared Secret:
- Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS secret
- Confirm Secret:
- Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS secret
- IP Address:
- Click ‘Ok’ to save
- Using the navigation panel to the left under Services & Profiles click Accounting
- Click Create New and configure with the following settings
- Name: Smart WiFi
- Service Protocol: RADIUS Accounting
- Backup Radius: Enabled
- Primary Server
- IP Address:
- Port: 1813
- Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS secret
- Confirm Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS secret
- IP Address:
- BackUp Server
- IP Address:
- Port: 1813
- Shared Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS secret
- Confirm Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS secret
- IP Address:
- Click the “OK” button to save.
- Using the navigation panel to the left under Services & Profiles click Hotspots & Portals
- Click the Hotspot (WISPr) tab at the top
- Click ‘+ Create’ and configure with the following settings
- Portal Name: Smart WiFi
- Login URL: External
- Redirect unauthenticated user to the URL for authentication:
- Redirect MAC Format: AA:BB:CC:DD:EE:FF
- Start Page: Redirect to the following URL:
- HTTPS Redirect: disabled
- Grace Period: Maximum value is suggested, please see this article from Ruckus support for more details.
- Click the plus sign ‘+’ to expand the ‘Walled Garden’ section-
- Add the wildcard walled garden entries following Ruckus specifications
If you’re a white label client and you have your own splash hostname, be sure to include it in the walled garden.
- Click ‘Ok’ to save the Hotspot (WISPr) profile
- Using the navigation panel to the left click Wireless LANs
- Click ‘+ Create’ and configure with the following settings
- Name: Smart WiFi
- SSID: !SmartWiFi-FREE! (Or your choice of SSID broadcast)
- Authentication Type: Hotspot (WISPr)
- Expand the Hotspot Portal section and configure with
- Hotspot (WISPr) Portal: Smart WiFi
- Authentication Service: Smart Wifi
- Accounting Service: Smart Wifi
Set the value for ‘Send interim update every N minutes’ to: 5
- Expand the RADIUS options and configure with
- Set ‘NAS ID’ to: User-defined
- User-defined: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called SWS/Hotspot/NAS-ID
- Set the ‘Called Station ID’ to: AP MAC
- NAS IP: Disable
- Single Session ID: ON
- Set ‘NAS ID’ to: User-defined
- Click ‘Ok’ to save the WLAN profile
Troubleshooting Splash page
- If devices are redirected but a bad gateway error message is displayed please ensure port 9080 is open to the SmartZone
- If devices are redirected but the page fails to load please ensure the walled garden configuration of the Hotspot (WISPr) profile has been completed.
- If devices are redirected but the page fails to load you can use a laptop to check if the SmartZone is using a public IP for the nbiIP by following these steps
- Using a laptop with no LAN connection associate to the Guest WiFi SSID
- Once the device attempts to redirect check the URL the browser is currently at, it should match the Redirect unauthenticated user to the URL for authentication value you received as part of your configuration details with some additional attributes at the end.
- If the browser has not made it to the splash page url you may need to disassociate from the Guest WiFi before the page will time out on the splash page URL
- Looking at the URL in your browser look for this section and confirm what IP is in use.
/hotspotlogin.php?nbiIP=xxx.xxx.xxx.xxx&client_mac=
- If the IP is the Cluster management IP of your SmartZone please complete step three of the configuration checklist at the top of this article.
- If devices present a ‘Login failed Wrong request password’ message please ensure the NBI is enabled on the SmartZone and the password properly set for the gateways in the dashboard.
- If devices load the splash page properly but after pressing connect the splash page is loaded again please ensure the RADIUS secret was correct applied for the Authentication profile
- If devices load the splash page properly but after pressing connect the page hangs for 30seconds+ and then presents a 302 bad gateway error please ensure your controller is using a valid DNS provider that has not blocked your IP
- If Apple devices are not triggering the captive portal assistant but other devices are please see this article on Bypass Apple CNA
- If devices are receiving a SSL Certificate error please see this article regarding Manufacturer SSL
Disclaimer on hardware configuration guides in the KB:
This equipment has been integrated and tested in our labs with the Smart WiFi Platform using the firmware versions below.
SmartZone Version 5.2.1.0.515
LIMITED HARDWARE SUPPORT: Hardware manufacturers frequently make changes to firmware, controllers and GUI’s. The information below may be out of date or images may be different and is to be used as a general reference guide. We do offer additional limited support to help with trouble-shooting and we highly recommend that you have a hardware support agreement and/or access to a hardware support engineering representative from the manufacturer.