topic Re: Ruckus ZD1200 Guest using external captive portal with Cisco ISE in ZoneDirector

Ruckus ZD1200 Guest using external captive portal with Cisco ISE

roy_cheng — Wed, 18 Aug 2021 04:06:25 GMT

Hi All

ZD1200 ver 10.5.0.0 build 190 (ip:10.1.100.30)

cisco ISE : 3.0.0.458 (ip:10.1.100.29)

I want to use Cisco ISE captive portal for guest login. The device cannot redirect to URL when access the guest SSID.

Ruckus ZD1200 config:

Wan type: Standard Usage

Authentication Method: MAC Address

Authentication Server: 10.1.100.29

Encryption: None

Advanced Options: dynamic vlan, dynamic role base

I capture device tcpdump in ISE for your reference. I don't which one party have issue. Please help on it

Best regards

Roy

Re: Ruckus ZD1200 Guest using external captive portal with Cisco ISE

syamantakomer — Mon, 13 Sep 2021 20:36:37 GMT

Hi Roy,

Do you want to use MAC auth or captive portal/wispr auth?

If it is radius, I don't see radius request or response on the capture. It is just showing accounting.

Please provide more information like what controller version you have, screenshots of the WLAN settings, radius settings, etc.

Re: Ruckus ZD1200 Guest using external captive portal with Cisco ISE

roy_cheng — Tue, 14 Sep 2021 02:17:24 GMT

Hi Syamantak

ZD1200 version10.5.0.0 build 190 (ip:10.1.100.30)

cisco ISE : 3.0.0.458 (ip:10.1.100.29)

I wants the guest user redirect captive portal when access the gest ssid. In my configuration, devices can redirect to portal and login successfully, but cannot access the internet.

I am screenshots of the configuration setting. Do you have experience on ruckus integration with cisco ISE. Can you share your configuration setting if you successfully integration of it? Thanks

Best regards

Roy

Re: Ruckus ZD1200 Guest using external captive portal with Cisco ISE

syamantakomer — Tue, 14 Sep 2021 12:41:47 GMT

@roy_cheng configuration looking good to me.

Cisco ISE has Ruckus as pre defined vendor so please check if ISE policy is configure correctly or not.

Try to run troubleshooting utility on ZD to trace a client connection and see where it is dropping.

ZD debug logs will also help to understand why client is not able to authenticate.

I also suggest you to open a case with support for advance level troubelshooting, if you are not able to fix it.