nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Use Ruckus AP on remote site

bicky_budha

Hi, We have Ruckus vSZ with R510 AP on main site. We have a school play field few miles away. Over there we have business broadband connection with ISP supplied router that has built-in WiFi. Users visiting there use WPA key to connect to the WiFi to use the internet.

Is there a way I can use the Ruckus AP over there to connect to the vSZ on the main site?

Can I connect Ruckus AP over the internet to connect to the main site vSZ?

Any help would be much appreciated, thank you.

Find more posts tagged with

Accepted answers

All comments

toomas_kadarpik

Yes you can do that, if your vSZ is behind nat you need to open few TCP ports at main sites and you can connect AP-s everywhere and behind NAT. You can even tunnel your data to central site using may be better firewall or providing better local security , in this case you need virtual dataplane license and virtual machine.

syamantakomer

Hi Bicky,

As long as AP can reach vSZ's control plane IP (for remote site, you have to use a site to site VPN or public IP should be configured on vSZ's Control NAT settings), you can connect the AP from any site.

List of ports which should be allowed in the network path (on firewall/router/gateway) can be found on below link.

https://docs.commscope.com/bundle/sz-600-adminguide-sz100vsz/page/GUID-078C00BE-7543-4439-9326-F6509EA404A0.html

Note: vSZ-Dataplane (vDP) is only required if you want to tunnel the user traffic from remote site to main site. If you just need to bridge the traffic, vDP is not required.

bicky_budha

thank you.

Our vSZ is behind the NAT. Is there a guide somewhere which I can read on setting up the remote AP behind NAT?

DarrelRhodes

Hi Bicky,

For configuring NAT, most of the work will be done on your firewall/router.

On the SmartZone configuration there is a single field in the 'Control Plane IP' settings where your enter the public IP of the SmartZone so this detail can be pushed out as part of the config to all APs. N.B. you will need a public IP for each controller in the cluster, so they can all be reached by APs on the external network.

https://docs.commscope.com/bundle/sz-511-sz100-vsze-administrator-guide/page/GUID-29918B8E-B41E-4E34-BA7F-54F7EC302E40.html

We have a Best Practice Guide for 'behind NAT' deployments avialable here: https://support.ruckuswireless.com/documents/1336-smartzone-network-design-with-nat

I suspect you will need an active support contract in order to access this document on the Ruckus support site.

Hope that helps,
Darrel.

bicky_budha

In the past we used to have Aruba wireless with the portable device called Remote Access Point. RAP can be plugged into the internet from anywhere and it will tunnel back to the main site controller. RAP then provides same ssid + vlan that is available on the main site. Can I do something like this with Ruckus?