External captive portal in smartzone

[supunit21]

I'm trying to setup an external captive portal for our guest users. This is my first time setting up this kind system, so need someone's support to understand the connection flow and the process.

I followed guide: RUCKUS SmartZone (LT-GA) Hotspot WISPr Interface Reference Guide, 6.1.1

1. Guest user connects to SSID and receive IP config via DHCP

2. Client initiates first web request

3. External portal URL returned to the user

4. User enters login credentials

5. External portal validates the credentials and connect back to smartzone via northbound interface and send JSON request for user logon

6. Smartzone receives the logon request from the external portal and then smartzone or AP (based on the AAA config) initiates authentication request to AAA server

7. If successful response received, AP permits user to connect. 

[James]

Hi,

Please refer to pages 23-37 for the steps showing the creation of WISPr hotspot profile and associated WLAN and page 61 onwards for NBI configuration.

https://support.ruckuswireless.com/documents/4366-smartzone-6-1-1-lt-ga-hotspot-wispr-interface-refe...

[supunit21]

Hi James,

Thanks for providing the KB. 

Is my understanding correct on the connection flow?

User device > AP > External Portal > NBI of SZ > AAA server > User authentication completed  

[James]

Hi,

Small correction on step 5. The user credentials is not validated by the external captive portal page, rather the user's login credentials is sent back by the external portal to the controller's NBI as a logon request.

Step 6 is again correct: Smartzone receives the logon request from the external portal and then smartzone or AP (based on the AAA config) initiates authentication request to AAA server.

Step 7: Once auth request is approved by the AAA server, the controller moves user to authorized state, allowing them access to the network