NOTE: This section only appears if you clicked Guest Access in WLAN Usage>Authentication
Type.
• Guest Access Portal: Select the guest access portal that you created earlier for this
onboarding WLAN.
• Bypass CNA: Select the Enable check box if you want to bypass the Apple CNA feature
on iOS and OS X devices that connect to this WLAN. See Bypassing Apple CNA for more
information.
• Guest Authentication: Select Guest to require users to enter their guest credentials, or
select Always Accept to allow users without guest credentials to authentication.
• Guest Accounting: Select the RADIUS Accounting server that you want to use for this
WLAN. You must have added a RADIUS Accounting server previously (see Working with
AAA Servers). Additionally, if you want the controller to proxy accounting messages to the
AAA server, select the Use the Controller as Proxy check box.
11. In the Authentication & Accounting Service section, configure the following options:
• Web Authentication Portal: Select the web authentication portal that you created previously.
See Working with Web Authentication Portals for more information.
• Bypass CNA: Select the Enable check box if you want to bypass the Apple
®
CNA feature
on iOS and OS X
®
devices that connect to this WLAN. See Bypassing Apple CNA for more
information.
• Authentication Service: Select the authentication server that you want to use for this WLAN.
Options include Local DB, Always Accept, and any AAA servers that you previously added
(see Working with AAA Servers). Additionally, if you want the controller to proxy
authentication messages to the AAA server, select the Use the Controller as Proxy check
box.
• Accounting Service: Select the RADIUS Accounting server that you want to use for this
WLAN. You must have added a RADIUS Accounting server previously (see Working with
AAA Servers). Additionally, if you want the controller to proxy accounting messages to the
AAA server, select the Use the Controller as Proxy check box.
12. In Options, configure the following options:
• Wireless Client Isolation: Wireless client isolation enables subnet restrictions for connected
clients. Click Enable if you want to prevent wireless clients associated with the same AP
from communicating with each other locally. The default value is Disable.
• Priority: Set the priority of this WLAN to Low if you would prefer that other WLAN traffic
takes priority. For example, if you want to prioritize internal traffic over guest WLAN traffic,
you can set the priority in the guest WLAN configuration settings to "Low." By default, all
WLANs are set to high priority.
• Dynamic PSK: select the Enable Dynamic PSK check-box and enter the passphrase
length to secure the WiFi network. The passphrase length is between 8 to 62 characters.
NOTE: Enabling the check-box displays the DPSK Type and DPSK Expiration settings
to configure.
• DPSK Type: select the type of DPSK (Secure or Keyboard-friendly) that you want to use
to secure the network
SmartCell Gateway 200/Virtual SmartZone High-Scale for Release 3.4.1 Administrator Guide
72
Managing Ruckus Wireless AP Zones
Working with WLANs and WLAN Groups
To Next Page
Loading...
