RUCKUS Cloud controller and Cloudpath integration for Guest MAC Based authentication in a Workflow

[sagar_kuber]

Background: 

MAC based authenticataion in a Cloudpath workflow had required the end user device to POST
to a network controller to be moved out of a walled garden. Using Ruckus.cloud, that
functionality is now available. In a workflow, you can now add the workflow step “Register the
device for MAC-based Authentication” in Cloudpath. A modification to the URL that the client
will POST to is available in this article.

Requirements:

Ruckus Cloud Tenant ID
This is in the URL of your Ruckus.Cloud account. Once you log into Ruckus.Cloud, in the URL
you will see the Tenant ID number after /t/. These characters represent the Tenant ID in
Ruckus Cloud.

You will require to copy and paste this into Cloudpath

                                                       Fig2. Drop down list showing Region

                                                    Fig3. Cloudpath Workflow for mac-auth

Create a workflow that uses MAC registration; in the example below, I have created a very
simple one that:
1. Prompts the user for accepting the AUP
2. Asks the user to enter in an email or SMS to receive a voucher
3. End user’s device’s MAC address is added to RADIUS + POSTS to Ruckus.Cloud for
authentication
4. End user’s device is redirected to https://www.ruckusnetworks.com

In step 3 of the Workflow, we need to edit the step so that it POSTS to Ruckus.Cloud:

1. In HTTPS Config Shortcuts: click on Ruckus SZ HTTPS, this will auto fill the form out for
you below:

                                                             Fig4. Auto fill form for SZ HTTPS

2. Modify the redirect URL: for Ruckus.Cloud; each region has a slightly different URL:
• If AP is in USA Region of Ruckus.Cloud, the URL that you must use is:
o https://*TENANT-ID_HERE*.wispr.ruckus.cloud/SubscriberPortal/hotspotlogin
• If AP is in EU Region of Ruckus.Cloud, the URL that you must use is:
o https://*TENANT-ID_HERE*.wispr.eu.ruckus.cloud/SubscriberPortal/hotspotlogin
• IF AP is in ASIA Region of Ruckus.Cloud, the URL that you must use is:
o https://*TENANT-ID_HERE*.wispr.asia.ruckus.cloud/SubscriberPortal/hotspotlogin
Replace *TENANT-ID_HERE* with your Tenant ID (see requirements on how to get it)

Example, My AP is in USA Region, I would change the REDIRECT URL in Cloudpath to:

                                     Fig5. Redirect URL for Ruckus.cloud in USA Region

3. Click Save
4. Publish Workflow