topic Re: disable https on ap's managed by ZD in ZoneDirector

disable https on ap's managed by ZD

mikelis_druviet — Fri, 23 Mar 2018 11:37:35 GMT

Hi,

I'm running multiple ZD's on 10.x tree and found out that all AP's have https access enabled. Going via AP and AP group settings in ZD, I cannot find any way to disable https access for all AP's besides ssh'ing to each one separately and executing 'set https disable'.. but this doesn't scale very well.

I read in forums that before on 9.x this was disabled by default, wondering why its turned back on now and how to disable it.

Thanks

Re: disable https on ap's managed by ZD

monnat_systems — Fri, 23 Mar 2018 12:33:07 GMT

there is a remote AP cli command in ZD through which u can enable/disable or run commands which will get applied to all AP's in one shot. see example below:

ruckus> enable
ruckus#debugruckus(debug)# remote_ap_cli -A "set http enable"
ruckus(debug)# remote_ap_cli -A "set https enable"

Re: disable https on ap's managed by ZD

mikelis_druviet — Fri, 23 Mar 2018 12:55:50 GMT

Hi,

Thanks for help, but this won't work:
ruckus(debug)# remote_ap_cli -A "set https disable"
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:2b:f9:b0
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:28:05:c0
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:2b:f8:60
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:2c:98:d0
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:2c:95:60
---- Command Execution Summary:
         success: 0
         failure: 5
           total: 5
remote_ap_cli "-A" ""set" "https" "disable""
ruckus(debug)#

is it trying to do it over some L2 broadcast? All AP's are connected via L3 ipv4.

Re: disable https on ap's managed by ZD

shaun_van_tond1 — Fri, 23 Mar 2018 13:48:41 GMT

Hi there. If I may ask what do you mean https enabled. Is this when logging into the device or used when accessing the logon page portal for the guest landing page or custom landing page with AD authentication ?

Thanks.

Re: disable https on ap's managed by ZD

mikelis_druviet — Fri, 23 Mar 2018 13:53:26 GMT

I mean when I access its management ip over 443 port, it promts for user login and would like to disable this www access entirely. 'set https disable' achieves it, but only way to get it working I found is by ssh'ing to ap separately, but I have few hundred ap's under 10+ zd's, so I'm searching way to apply this on group of AP's from ZD.

Re: disable https on ap's managed by ZD

mikelis_druviet — Mon, 26 Mar 2018 08:00:18 GMT

Is ruckus really missing such function ?

Re: disable https on ap's managed by ZD

dragos_dimitriu — Mon, 05 Nov 2018 13:26:43 GMT

ruckus(debug)# remote_ap_cli -A "set https disable" works for ZD 1200, firmware : 10.2.0.0 build 189