Unleashed: How to limit GuestPass generation using Active Directory Group

[vijaykuniyal]

This article explains setting up a Ruckus Unleashed with Active Directory Group for limiting users to create GuestPass.

Table of Contents

• AD Configuration
• Unleashed Configuration
  

Note: We are assuming Customer have knowledge and understanding of Active Directory.

Verified Unleashed Version: 200.12, 200.14

AD Configuration

Create a User Group in Active Directory User and Computer (If desired group is already created, entire AD Configuration step can be skipped)

• Open Active Directory User and Computer from the Windows search.
  
• once open Right Click on Users>>>New>>>Group

• Name the Group as required.
  
  
  
  
• Once Group is created, Right Click on Group>>>>Select Properties.
  
• Click on Members>>>Add.
  
  
  search for user from AD users, which is allowed to create GuestPass (in this example I am searching for my user)
  
  
• Enter the Name in the box >>> Click on Check Name.
  
  
  
  
• Select the name required and Click OK.
  
  
• Name will appear in the members.
  

Unleashed Configuration

• Login to unleashed GUI from any browser and Select Admin and Services.
  
  
• Select System>>>Roles>>>Create
  
  
  
• Update the details as mentioned below.
  1: Name - As required.
  2: Description - As required.
  3: Group Attribute - Same as AD Group(GuestPass in our example)
  4: Select Specify WLAN  access
  5: Select the GuestPass SSID. (assuming its already created under Wi-Fi Networks)
  6: Tick the checkbox for Allow guest pass generation.
  
  and Click OK
  
• Select Default Role and Click Edit.
  
  
• Uncheck Allow guest pass generation and Click OK.
  
  
• Select Services >>> AAA servers.
  
  
• Update the details as mentioned below.
  1: Name - As required.
  2: Server Address - As required.
  3: Port - 389
  4: Windows Domain Name - Actual AD domain name.
  
• Select Services >>> Guest Access Service>>>Guest Pass Generation>>>Authentication Server >>> Windows AD
  
  and Click Apply.
  

Once done only users from the defined AD group will be able to create Guestpass.