Hello,
I have a ZoneDirector 1200 (Version: 10.3.1.0 build 45) and Ruckus R610 access points broadcasting two SSIDs on my network. Below is the current configuration of my infrastructure:
SSID MyWIFI: Uses the DHCP server from the Active Directory (AD) domain controller, with MAC address filtering to assign IP addresses to connected users. These users have access to network resources (servers, applications, etc.).
SSID MyGuest: Should have its own DHCP server managed by the Ruckus ZoneDirector, with a separate addressing scheme (e.g., 192.168.100.0/24). This network is for guests, with restricted access to the internet via a captive portal and no MAC address filtering required.
Network Architecture
- The Ruckus ZoneDirector controller has a static IP address, and its DHCP server is currently disabled.
- The Ruckus R610 APs are connected to a secondary switch, which is in turn connected to the main switch, where the domain controller is also connected.
Issue Encountered
The SSID MyWIFI works correctly thanks to the MAC filtering on the domain DHCP server. However, the SSID MyGuest is not functioning as expected because:
- Clients must be manually authorized through MAC filtering on the domain DHCP server, which is inconvenient.
I want ZoneDirector to handle DHCP only for the SSID MyGuest, but I cannot find the DHCP/NAT option in the advanced settings of the Guest WLAN.
Questions
How can I enable the DHCP server only for the Guest SSID, while allowing the primary SSID (MyWIFI) to use the DHCP server from the domain controller with MAC filtering?
Why is the DHCP/NAT option not visible on my Ruckus controller when configuring the Guest SSID? Is this option tied to a specific firmware version?
What is the best approach to separate VLANs so that:
Users on the Guest SSID only have access to the internet, without requiring MAC address authorization on the domain DHCP server.
Both SSIDs can be broadcast by the same Ruckus APs, while ensuring guests cannot access local network resources or communicate with each other.
I appreciate your help and guidance.
Best regards,
