Ruckus ZD1200 Guest using external captive portal with Cisco ISE

[roy_cheng]

Hi All

ZD1200  ver 10.5.0.0 build 190  (ip:10.1.100.30)

cisco ISE : 3.0.0.458 (ip:10.1.100.29)

I want to use Cisco ISE captive portal for guest login. The device cannot redirect to URL when access the guest SSID.

Ruckus ZD1200 config:

Wan type: Standard Usage

Authentication Method: MAC Address

Authentication Server: 10.1.100.29

Encryption: None

Advanced Options: dynamic vlan, dynamic role base

I capture device tcpdump in ISE  for your reference. I don't which one party have issue. Please help on it

Best regards

Roy

[syamantakomer]

Hi Roy,

Do you want to use MAC auth or captive portal/wispr auth?

If it is radius, I don't see radius request or response on the capture. It is just showing accounting.

Please provide more information like what controller version you have, screenshots of the WLAN settings, radius settings, etc.

[roy_cheng]

Hi Syamantak

ZD1200  version10.5.0.0 build 190  (ip:10.1.100.30)

cisco ISE : 3.0.0.458 (ip:10.1.100.29)

I wants the guest user redirect captive portal when access the gest ssid. In my configuration, devices can redirect to portal and login successfully, but cannot access the internet. 

I am screenshots of the configuration setting. Do you have experience on ruckus integration with cisco ISE. Can you share your configuration setting if you successfully integration of it?  Thanks

Best regards

Roy

[syamantakomer]

@roy_cheng configuration looking good to me.

Cisco ISE has Ruckus as pre defined vendor so please check if ISE policy is configure correctly or not.

Try to run troubleshooting utility on ZD to trace a client connection and see where it is dropping.

ZD debug logs will also help to understand why client is not able to authenticate.

I also suggest you to open a case with support for advance level troubelshooting, if you are not able to fix it.