topic Re: Regarding certificate base authentication in ZoneDirector

Regarding certificate base authentication

nadun_gayashan — Thu, 21 May 2020 00:08:35 GMT

Hi,

I want to understand about (802.1x) certificate based wireless authentication with ruckus without domain user or machine authentication.

Q 1, can do it?
Q 2, if can do it, how to authenticate domain and non-domain
computers?
Q 3, how to configure ruckus ZD WLC and windows NPS &
Certificate server? (If anyone has the guide. please share)

Re: Regarding certificate base authentication

syamantakomer — Thu, 21 May 2020 15:04:27 GMT

Hi Nad,

Please find the response below.

Q 1, can do it?
Ans: Yes you can configure ZD with NPS for cert based authentication (EAP-TLS)

Q 2, if can do it, how to authenticate domain and non-domain
computers?
Ans:

For domain users you have to push the certificate using windows server Group Policy.
For non domain users you have to find a way to push the certificate using onboarding SSID. This will still require a server which can provide a package file including WLAN profile and client certificate for authentication. I recommend using Cloudpath for this. For more info refer below link.
https://www.commscope.com/product-type/enterprise-networking-carrier-wi-fi-cbrs/network-access-polic...

Q 3, how to configure ruckus ZD WLC and windows NPS &
Certificate server? (If anyone has the guide. please share)

Ans: Yes, please refer the article

https://support.ruckuswireless.com/articles/000002109

Note: Not all the details given in above article but major part of the configuration is covered.

Regards,
Syamantak Omer

Re: Regarding certificate base authentication

nadun_gayashan — Mon, 25 May 2020 12:48:09 GMT

Thanks for the reply. I think it's helpful to me.