cancel
Showing results for 
Search instead for 
Did you mean: 

Unleashed: How to limit GuestPass generation using Active Directory Group

vijaykuniyal
RUCKUS Team Member

This article explains setting up a Ruckus Unleashed with Active Directory Group for limiting users to create GuestPass.

Table of Contents

  • AD Configuration
  • Unleashed Configuration

Note: We are assuming Customer have knowledge and understanding of Active Directory.

Verified Unleashed Version: 200.12, 200.14

AD Configuration

Create a User Group in Active Directory User and Computer (If desired group is already created, entire AD Configuration step can be skipped)

  • Open Active Directory User and Computer from the Windows search.
    vijaykuniyal_1-1687990652903.png

     

  • once open Right Click on Users>>>New>>>Group

vijaykuniyal_2-1687990902995.png

  • Name the Group as required.

    vijaykuniyal_2-1687985131117.png

  • Once Group is created, Right Click on Group>>>>Select Properties.
    vijaykuniyal_3-1687985432963.png

     

  • Click on Members>>>Add.
    vijaykuniyal_5-1687986012027.png

    search for user from AD users, which is allowed to create GuestPass (in this example I am searching for my user)

  • Enter the Name in the box >>> Click on Check Name.

    vijaykuniyal_4-1687985919180.png

  • Select the name required and Click OK.

    vijaykuniyal_7-1687986399076.png
  • Name will appear in the members.
    vijaykuniyal_8-1687986429723.png

Unleashed Configuration

  • Login to unleashed GUI from any browser and Select Admin and Services.

    vijaykuniyal_10-1687986927035.png
  • Select System>>>Roles>>>Create
    vijaykuniyal_12-1687987225523.png

  • Update the details as mentioned below.
    1: Name - As required.
    2: Description - As required.
    3: Group Attribute - Same as AD Group(GuestPass in our example)
    4: Select Specify WLAN  access
    5: Select the GuestPass SSID. (assuming its already created under Wi-Fi Networks)
    6: Tick the checkbox for Allow guest pass generation.

    and Click OK
    vijaykuniyal_13-1687987426703.png
  • Select Default Role and Click Edit.

    vijaykuniyal_14-1687988164405.png
  • Uncheck Allow guest pass generation and Click OK.

    vijaykuniyal_15-1687988529834.png
  • Select Services >>> AAA servers.

    vijaykuniyal_17-1687988811354.png
  • Update the details as mentioned below.
    1: Name - As required.
    2: Server Address - As required.
    3: Port - 389
    4: Windows Domain Name - Actual AD domain name.
    vijaykuniyal_19-1687989200668.png
  • Select Services >>> Guest Access Service>>>Guest Pass Generation>>>Authentication Server >>> Windows AD

    and Click Apply.
    vijaykuniyal_20-1687989390606.png

Once done only users from the defined AD group will be able to create Guestpass.


Vijay Kuniyal

Staff Technical Support Engineer

CCNA RnS | CCNA Wireless | CWNA | RASZA | Meraki CMNO | RACPA
0 REPLIES 0