How to create walled garden on 7055 solo ap.

wes_hall_jazva8

Hi all,  Please bear with me I'm new to the Ruckus wireless line.   We've recently become owners of a small multi unit residence building using Ruckus 7055 APs.  I'm assuming there is no controller since I've found none on-site at this time.  The present setup does use a homegrown portal login based on their email addresses.  So I'm assuming these are standalone Ap's.  
I'm stuck rebuilding this from scratch since the previous management company left without passwords, documentation, or any contractual requirements.  I'd like to integrate this residence into our present Clearpass portal/802.1x system.  I've gotten most of this to work with a couple exceptions. 

1.  Is there a way to backup the config of the AP. 
--I saw a couple backup options but when I tried to restore after a factory reset the restore failed to set some values.  This would be a timesaver if I screwup the config again.
 
2.   Is a walled garden/portal setup possible with this model AP?  
--I got it close to working once then lost connection when I changed a setting.  I've never been able to get back that close.  I've tried a couple version of software but I'm not sure which is the best for hotspot.  

3.  How does whitelisting walled garden work?
-- I've whitelisted our dns,dhcp,and portal servers but this doesnt seem to allow traffic to these servers.  At least pings and dns lookups fail, packet captures show no corresponding traffic at the switchports.

3.  On the SSID screen there is an access vlan field.  Is this an actual untagged vlan on the switchport or can I just trunk all vlans to the AP? 
--I'd like to have vlan 1 as management for ap, vlan 2 for portal, vlan 3 for 802.1x, vlan 4 for mac-auth or no auth (I'll deal with this after I get above working).


I realize the 7055 is EOL but there were no funds dedicated to upgrade till next year.  The AP's will also be connected to ICX7450's, if this makes a difference int the conversation.

Thank you
gus

roberto_flores_

Hello Gus,

 

I’m in Ruckus support and will provide you with best effort
as the product is EOL and there is no support entitlement.  However, you can still purchase support for
the product for a full suite of support options.  See EOL doc, https://support.ruckuswireless.com/documents/1060-zoneflex-zf7055-end-of-life-eol-notification,
for your purchasing support options.  The
product is EOL but you can still purchase support till 2021.  I will also suggest upgrading the AP to the
last stand-alone available SW = 104.0.0.0.1347 = https://support.ruckuswireless.com/software/1017-zoneflex-solo-access-point-104-0-0-0-1347-ga-software-release

Answer to your questions:

1.  Is there a way to
backup the config of the AP. 

--I saw a couple backup options but when I tried to restore
after a factory reset the restore failed to set some values.  This would be a timesaver if I screwup the
config again.

Answer = there is
no way to do a straight backup of the APs. 
You can do screen caps, of course, get the support info file (under
Maintenance / Support Info) and see the configuration from the RPM keys within
the support info file for future configuration reference.

2.   Is a walled
garden/portal setup possible with this model AP? 

--I got it close to working once then lost connection when I
changed a setting.  I've never been able
to get back that close.  I've tried a
couple version of software but I'm not sure which is the best for hotspot.  

Answer = you can
definitely use Radius and Clearpass for the 802.1x certification.  As you know, you have to create the 802.1x
WLAN and work with a Hotspot configuration. 
Within the hotspot, you can definitely create a walled garden and allow
your network elements for pre-authentication access.  This with accordance of having the latest SW
running in the AP(s).  Also, would
recommend to use Firefox or Chrome.

3.  How does
whitelisting walled garden work?

-- I've whitelisted our dns,dhcp,and portal servers but this
doesnt seem to allow traffic to these servers. 
At least pings and dns lookups fail, packet captures show no corresponding
traffic at the switchports.

Answer =  you also have to define the radius
server, the clearpass cert server, gateway, etc (any elements that your AP will
need to communicate to on behalf of your client for authentication).  Also, you will need to ping the gateway,
clearpass server, radius server from the AP (unless you have statics routes defined within your network).

4.  On the SSID screen
there is an access vlan field.  Is this
an actual untagged vlan on the switchport or can I just trunk all vlans to the
AP? 

--I'd like to have vlan 1 as management for ap, vlan 2 for
portal, vlan 3 for 802.1x, vlan 4 for mac-auth or no auth (I'll deal with this
after I get above working).

Answer = under Configure
/ Internet is where you find the AP management VLAN.  AP Management VLAN is for AP access.  By default, management VLAN is 1.  For client traffic VLAN assignments, you do
that at the WLAN/ SSID configuration option (Configuration / Radio 2.4G,
Configuration / Radio 5G), the access vlan fill in within the WLAN configuration.

Thank you,

-Roberto Flores.