SZ vSZ Admin Logon with Radius and Default Role Mapping Disabled

[ganesh_balarama]

Configuration for SZ administrator log in using Radius Server (without default role mapping )

STEP-1

Create the Administrator account in SZ under Administration > Admin & Roles > Administrator > Create

The username will be the Vendor Attribute value (RadiusAdmin) configured in AAA under NPS Policy and the Password is the Shared secret used when adding the radius client

STEP-2

Create a new group in the following format: Ruckus-WSG-User-User1 under Administration > Admin & Roles > Groups > Create > Ruckus-WSG-User-User1

NOTE: Permissions can be set only at the group level and not user basis.

>Now map the RadiusAdmin administrator to the group

STEP-3: AAA Configuration for RADIUS Type with Default Role Mapping disabled:

STEP-4: Configuration in AD

Create a User Group in the AD with the Group name: Ruckus-WSG-User-User1

NOTE: The Group name created in the AD must be as same as the Group Name created in vSZ/SZ.

STEP-5: Create a new user in the AD and add it to the above user Group

STEP-6:  Configuration in NPS

Add vSZ/SZ as the Radius Client in AAA

STEP-7: Creating Network Policy

Map the User Group,

>Select the Authentication method,

>In Settings, add the below

In Vendor-Specific Attribute, add  Vendor Code as 25053 & AttributeValue as RadiusAdmin

>Review your NPS policy

STEP-8: Perform AAA Test from the Controller

STEP-9: Test SZ login and should be allowed access to the Controller 

[jp1174]

Good one Ganesh!