topic Re: Ruckus Smartzone Wireless LAN w/ AD authentication Issue in Community and Online Support Services

Ruckus Smartzone Wireless LAN w/ AD authentication Issue

justin_emmanuel — Tue, 18 Aug 2020 08:51:13 GMT

I have configured a WLAN in Smartzone with AD authentication. After connecting to the SSID and entering domain credentials in the WebAuth Portal. It fails with the following error "system is too busy"

Do I lack some configuration on my AD side or Smartzone? I tested AD authentication prior to this and was successful.

Re: Ruckus Smartzone Wireless LAN w/ AD authentication Issue

syamantakomer — Tue, 18 Aug 2020 12:42:47 GMT

Hi Justin,

Could you confirm below details.

1- How many v/SZs you have in this cluster?
2- Is it a single interface setup or three (check this using "show interface" command)?
2- What is the vSZ and AP firmware version?
3- WLAN type, encryption type and authentication type?
4- If authentication server is a radius server, make sure all vSZ nodes IPs are added to radius client in the radius server.

Regards,
Syamantak Omer

Re: Ruckus Smartzone Wireless LAN w/ AD authentication Issue

justin_emmanuel — Wed, 19 Aug 2020 03:22:08 GMT

Hi Syamantak,

Please see remarks below:

1- How many v/SZs you have in this cluster? 2 SZs in one cluster
2- Is it a single interface setup or three (check this using "show interface" command)? Single interface setup
2- What is the vSZ and AP firmware version? 3.6.2.0.222 | 3.6.2.0.695
3- WLAN type, encryption type and authentication type? Please see image below.
4- If authentication server is a radius server, make sure all vSZ nodes IPs are added to radius client in the radius server. AD server is used for authentication

Re: Ruckus Smartzone Wireless LAN w/ AD authentication Issue

syamantakomer — Wed, 19 Aug 2020 15:01:21 GMT

Hi Justin,

I can see that you are using AP as authenticator, means AP will send the auth request to AD server.

Could you make sure APs has reachability to AD server.

Also run troubleshoot utility in vSZ GUI and connect the test client. This will help us to understand at what point connection is failing.

Regards,
Syamantak Omer

Re: Ruckus Smartzone Wireless LAN w/ AD authentication Issue

justin_emmanuel — Sat, 22 Aug 2020 03:04:43 GMT

Hi Syamantak,

Yes, I can see that the Portal points to the APs IP address. Can we also use SZ for the web authentication portal? We have tested AD authentication in Smartzone and was successful. I don't know why it shows this error after entering credentials on portal.

Regards,
Justin

Re: Ruckus Smartzone Wireless LAN w/ AD authentication Issue

syamantakomer — Mon, 24 Aug 2020 18:08:25 GMT

No, portal is hosted from AP so you cannot change that but you can use authentication part proxied to SZ. Means authentication request will be sendout from SZ to AD server, rather than APs.

Please note that authentication should work irrespective of proxy or non-proxy, so I would suggest you open a case with support, if you can find a fix by your own.

Regards,
Syamantak Omer