• Set device MAC address in 802.1x format 00-10-A4-23-19-C0. (The default is
0010a42319c0).
9. In Method under Encryption Options, select an encryption method to use.
WPA and WPA2 are both encryption methods certified by the Wi-Fi Alliance and are the
recommended encryption methods. The Wi-Fi Alliance will be mandating the removal of WEP
due to its security vulnerabilities, and Ruckus Wireless recommends against using WEP if
possible.
• WPA: Standard Wi-Fi Protected Access with either TKIP or AES encryption.
• WPA2: Enhanced WPA encryption using stronger TKIP or AES encryption algorithm.
• WPA-Mixed: Allows mixed networks of WPA and WPA2 compliant devices. Use this
setting if your network has a mixture of older clients that only support WPA and TKIP, and
newer client devices that support WPA2 and AES.
• WEP-64: Provides a lower level of encryption, and is less secure, using 40-bit WEP
encryption.
• WEP-128: Provides a higher level of encryption than WEP-64, using a 104-bit key for
WEP encryption. However, WEP is inherently less secure than WPA.
• None: No encryption; traffic is sent in clear text.
NOTE: If you set the encryption method to WEP-64 (40 bit) or WEP-128 (104 bit) and you
are using an 802.11n AP for the WLAN, the AP will operate in 802.11g mode.
10. In Authentication & Accounting Service, configure the following options:
• Authentication Service: This option appears only when 802.1x EAP is selected as the
authentication method. Select the authentication server that you want to use for this WLAN.
Only AAA servers that you previously added appear here.
• Accounting Service: Select the RADIUS Accounting server that you want to use as a
proxy for the controller from the drop-down list, You must have added a RADIUS
Accounting server previously (see Step 3: Configure the AAA Servers of the Zone Template).
11. In Hotspot (WISPr) Portal, select the hotspot that you want this WLAN to use.
This option appears only when Hotspot (WISPr) is selected as the WLAN usage type. This
hotspot portal may be the hotspot that you created in Step 5: Configure the Hotspot 2.0
Service of the Zone Template. Additionally, if you added a RADIUS accounting server to the
controller earlier, you can enable RADIUS proxy accounting by selecting the Enable RADIUS
Accounting Proxy check box.
12. In Options, configure the following options:
• Wireless Client Isolation: Wireless client isolation enables subnet restrictions for connected
clients. Click Enable if you want to prevent wireless clients associated with the same AP
from communicating with each other locally. The default value is Disable.
• Priority: Set the priority of this WLAN to Low if you would prefer that other WLAN traffic
takes priority. For example, if you want to prioritize internal traffic over guest WLAN traffic,
you can set the priority in the guest WLAN configuration settings to “Low.” By default, all
WLANs are set to high priority.
SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide
119
Managing Global Configuration, AP Tunnel Profiles, Templates, and AP Registration Rules
Working with Zone Templates
To Next Page
Loading...
