NOTE: Enabling WPA2 enables Dynamic PSK under Options.
• WPA-Mixed: Allows mixed networks of WPA and WPA2 compliant devices. Use this setting
if your network has a mixture of older clients that only support WPA and TKIP, and newer
client devices that support WPA2 and AES.
• WEP-64 (40 bits): Provides a lower level of encryption, and is less secure, using 40-bit
WEP encryption.
• WEP-128 (104 bits): Provides a higher level of encryption than WEP-64, using a 104-bit
key for WEP encryption. However, WEP is inherently less secure than WPA.
• None: No encryption; traffic is sent in clear text.
NOTE: If you set the encryption method to WEP-64 (40 bit) or WEP-128 (104 bit) and you
are using an 802.11n AP for the WLAN, the AP will operate in 802.11g mode.
• Passphrase: Enter the passphrase to access the WLAN.
• 802.11r Fast Roaming: Select the check box to enable 802.11r Fast BSS Transition.
Selecting this option allows you to enter the Mobility Domain ID. Enter a value within the
range provided (1 to 65535).
9. In Hotspot Portal, configure the following options.
NOTE: This section only appears if you clicked Hotspot (WISPr) in WLAN
Usage>Authentication Type.
• Hotspot (WISPr) Portal: Select the hotspot that you want this WLAN to use. This option
appears only when Hotspot (WISPr) is selected as the WLAN usage type. This hotspot
portal may be the hotspot that you created in Creating a Hotspot Portal.
• Bypass CNA: Select the Enable check box if you want to bypass the Apple CNA feature
on iOS and OS X devices that connect to this WLAN. See Bypassing Apple CNA for more
information.
• Authentication Service: Select the authentication server that you want to use for this WLAN.
Options include Local DB, Always Accept, and any AAA servers that you previously added
(see Working with AAA Servers). Additionally, if you want the controller to proxy
authentication messages to the AAA server, select the Use the Controller as Proxy check
box.
• Accounting Service: Select the RADIUS Accounting server that you want to use for this
WLAN. You must have added a RADIUS Accounting server previously (see Working with
AAA Servers). Additionally, if you want the controller to proxy accounting messages to the
AAA server, select the Use the Controller as Proxy check box.
NOTE: Ensure that the dictionary.ruckus file in the AAA server at usr/local/share/freeradius/
is the same as the one in SCG-200 or SZ100 at
/opt/ruckuswireless/wsg/conf/ttg_pdg/share.
10. In Guest Access Portal, configure the following options:
SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide
71
Managing Ruckus Wireless AP Zones
Working with WLANs and WLAN Groups