Ruckus Wireless™ ZoneFlex™ Outdoor Access Point Release 9.4 User Guide For the following ZoneFlex outdoor AP models: ■ ZoneFlex 2741 802.11g Outdoor Access Point ■ ZoneFlex 7762 Dual Band 802.11n Outdoor Access Point ■ ZoneFlex 7762-S Dual Band 802.11n Outdoor Access Point with Sector Antenna ■ ZoneFlex 7762-T Dual Band 802.11n Outdoor Access Point with Omni Antenna ■ ZoneFlex 7762-AC Dual Band 802.11n Outdoor Access Point ■ ZoneFlex 7762-S-AC Dual Band 802.
Contents About This Guide Document Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . i Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .ii Documentation Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .ii 1 Introducing the ZoneFlex Access Point Overview of the ZoneFlex Access Point . . . . . . . . . . . . . . . . . . . . . . .
Obtaining and Assigning an IP Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Configuring L2TP Connection Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Configuring Local Subnets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .44 Configuring Wireless Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46 Configuring Common Wireless Settings . . . . . . . . . . . . .
Running Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98 Where to Find More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
iv
About This Guide About This Guide This guide describes how to install, configure, and manage the Ruckus Wireless™ ZoneFlex™ Access Point. This guide is written for those responsible for installing and managing network equipment. Consequently, it assumes that the reader has basic working knowledge of local area networking, wireless networking, and wireless devices.
About This Guide Table 2.
1 Introducing the ZoneFlex Access Point In This Chapter Overview of the ZoneFlex Access Point . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Getting to Know the Access Point Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Getting to Know the Access Point Features This section identifies the physical features of each ZoneFlex Access Point model that is discussed in this guide. Before you begin the installation process, Ruckus Wireless recommends that you become familiar with these features.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features ZoneFlex 2741 Access Point Figure 1 and Figure 2 identify the Access Point external features. Figure 1. Table 3. 2471 Access Point LEDs and bottom connectors 2471 LEDs and bottom panel connectors No Label Description 1 LEDs See “LED Colors and What They Mean” below for more information.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Table 3. 2471 LEDs and bottom panel connectors No Label Description 3 Reset Using a pointed object (for example, a pen), press this button to restart the Access Point or to restore it to factory default settings: • To restart the Access Point, press the Reset button once. • To restore the Access Point to factory default, press the Reset button for six (6) seconds.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Table 4. 2471 LED states and behaviors LED Meaning WLAN • Green: The wireless LAN (WLAN) service is up and at least one wireless client is associated with it. If mesh networking is enabled, there are no downlink MAPs connected to this Access Point. • Fast flashing green (two flashes every second): The WLAN service is up and at least one wireless client is associated with it.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Figure 2.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features ZoneFlex 7762 Access Point Figure 3 and Figure 4 identify the Access Point external features. Figure 3. 7762 Access Point parts DC Connector RJ-45/PoE Connectors 5GHz External Antenna Connectors Ground Screw Power LED Table 5. Status LED LEDs and connectors on the 7762 AP Label Description Power LED • Off: No power is available, or the Access Point is not connected to a power source.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Table 5. LEDs and connectors on the 7762 AP Label Description Status LED If the Access Point is operating in standalone mode: • Amber: The WLAN service is up and at least one wireless client is associated with the AP. • Flashing amber: The WLAN service is up and no wireless clients are currently associated with the AP.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Figure 4.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features ZoneFlex 7762-S Access Point Figure 5 shows the Access Point LEDs and connectors, and Table 6 describes them. Figure 5. 7762-S Access Point LEDs and connectors DC Connector PoE IN RJ-45/PoE Connectors 5GHz External Antenna Connectors PoE OUT Ground Screw Power LED Table 6.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Table 6. LEDs and connectors on the 7762-S Access Point Label Description Status LED If the Access Point is operating in standalone mode: • Amber: The WLAN service is up and at least one wireless client is associated with the AP. • Flashing amber: The WLAN service is up and no wireless clients are currently associated with the AP.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features 7762-S 5GHz Antenna Connectors The 7762-S requires customer-supplied external antenna(s) if you want to use 5GHz or want to use the mesh function. You can connect 5GHz external antennas to the standard N-type radio frequency (RF) antenna connectors on the AP. Figure 6. The 7762-S 5GHz antenna connectors are protected by metal caps Metal caps Before you install the AP, make a note of the MAC address on this label.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features ZoneFlex 7762-T Access Point Figure 7 and Figure 8 identify the Access Point external features. Figure 7.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Table 7. LEDs and connectors on the 7762-T AP Label Description Power LED • Off: No power is available, or the Access Point is not connected to a power source. • Red: The Access Point is powering on. • Green: The Access Point is connected to a power source and has completed its power-on sequence.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features NOTE: The maximum value for the antenna gain that you should set depends on the type of external antennas that you are connecting to the AP. Figure 8.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features ZoneFlex 7762-AC Access Point Figure 9 and Figure 10 identify the AP external features. Figure 9. 7762-AC Access Point parts RJ-45/PoE Connectors 5GHz External Antenna Connectors AC Power Connector Power LED Table 8. Status LED LEDs and connectors on the 7762-AC AP Label Description Power LED • Off: No power is available, or the AP is not connected to a power source. • Red: The AP is powering on.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Table 8. LEDs and connectors on the 7762-AC AP Label Description Status LED If the AP is operating in standalone mode: • Amber: The WLAN service is up and at least one wireless client is associated with the AP. • Flashing amber: The WLAN service is up and no wireless clients are currently associated with the AP.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Figure 10.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features ZoneFlex 7762-S-AC Access Point Figure 11 and Figure 12 identify the AP external features. Figure 11. 7762-S-AC Access Point parts RJ-45/PoE Connectors 5GHz External Antenna Connectors AC Power Connector Power LED Table 9. Status LED LEDs and connectors on the 7762-S-AC AP Label Description Power LED • Off: No power is available, or the AP is not connected to a power source. • Red: The AP is powering on.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Table 9. LEDs and connectors on the 7762-S-AC AP Label Description Status LED If the AP is operating in standalone mode: • Amber: The WLAN service is up and at least one wireless client is associated with the AP. • Flashing amber: The WLAN service is up and no wireless clients are currently associated with the AP.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Figure 12.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features ZoneFlex 7761-CM Cable Modem Access Point Figure 13 and Figure 14 identify the 7761-CM Cable Modem AP (CMAP) external features. Figure 13.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Table 10. Connector-side parts and connectors on the CMAP Label Description Ethernet Port RJ45 port that supports 10/100Mbps connections and provides Power over Ethernet (PoE) power to compliant devices. Antenna Connector One of the three connectors for the three 5GHz antennas supplied with the CMAP. The other two connectors are located on the other side of the unit (see Figure 14).
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Figure 14. CMAP parts and connectors (LED side) Antenna Connectors LEDs Vertically-polarized antennas Horizontally-polarized antenna Table 11. LED-side parts and connectors on the CMAP Label Description Antenna Connectors Two of the three connectors for the 5GHz antennas. The other connector is located on the other side of the unit (see Figure 13). LEDs Six LEDs that indicate the status of the CMAP and cable modem.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features Connectors The CMAP provides the following connectors: ■ ■ ■ ■ PoE-Out connector: RJ-45 port that can supply power to devices that support PoE. Three N-type antenna connectors: Connects to the three 5GHz antennas (not supplied, with the CMAP). DC power supply (Ruckus Wireless part number 705-60244-002): Connected through a 4-pin connector, which is normally unused.
Introducing the ZoneFlex Access Point Getting to Know the Access Point Features LEDs Use the six LEDs to check the status of the Access Point and cable modem. The LEDs behave differently when the Access Point is in standalone mode and when ZoneDirector is managing it. Upon bootup, the LEDs are in CM (Cable Modem) Mode. Once bootup is completed, the LEDs alternate between CM Mode and AP Mode. Refer to the ZoneFlex 7761CM Dual Band 802.
2 Connecting an Administrative Computer to a Standalone AP Ruckus Wireless Access Points can be configured and monitored in standalone mode using an administrative computer. This chapter contains instructions on how to connect an administrative computer to an AP. NOTE: To administer APs using ZoneDirector (ZD), refer to the ZoneDirector User Guide. To administer APs and ZDs using FlexMaster, refer to the FlexMaster User Guide. 1.
Connecting an Administrative Computer to a Standalone AP NOTE: Make sure that you configure the Local Area Connection properties, not the Wireless Network Connection properties. 3. When the Local Area Connection Properties dialog box appears, select Internet Protocol (TCP/IP) from the scrolling list, and then click Properties. The Internet Protocol (TCP/IP) Properties dialog box appears. 4. Write down all of the currently active network settings.
Connecting an Administrative Computer to a Standalone AP 6. Click OK to save your changes and close the TCP/IP Properties dialog box. 7. Click OK again to close the Local Area Connection Properties dialog box. Windows saves the IP address settings that you have configured. Continue with Connecting the Administrative Computer to the Access Point. Connecting the Administrative Computer to the Access Point 1. If you are powering the AP with PoE, then continue with Step 2.
Connecting an Administrative Computer to a Standalone AP 30
3 Navigating the Web Interface In This Chapter Logging In to the ZoneFlex Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Navigating the Web Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Logging In to the ZoneFlex Web Interface If you need to manage your AP, you do it with the features of the ZoneFlex Web interface (which you already used to set up the AP for use).
Navigating the Web Interface Navigating the Web Interface Navigating the Web Interface You manage the Access Point through a Web browser-based interface that you can access from any networked computer. Table 13 lists the Web interface features that are identified in Figure 16. Figure 16. Elements of the ZoneFlex AP Web Interface Tabs LOGOUT Button Help Button Menu Workspace Table 13. ZoneFlex AP Web interface elements Element Description Menu Under each category (Status, Configuration, etc.
Navigating the Web Interface If You Are Using a Dual Band ZoneFlex Access Point If You Are Using a Dual Band ZoneFlex Access Point When your ZoneFlex AP model is dual band (all outdoor APs other than ZF 2741), note that elements on the Web interface menu are slightly different from the other (single band) ZoneFlex AP models. Dual band ZoneFlex APs have one 2.4GHz radio (for 802.11b/g/n clients) and one 5GHz radio (for 802.11a/n clients).
Navigating the Web Interface If You Are Using a Dual Band ZoneFlex Access Point 34
4 Configuring the Access Point In This Chapter Configuring Device Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Configuring Internet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 Configuring Local Subnets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Configuring Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Configuring the Access Point Configuring Device Settings Configuring Device Settings Device settings refer to the device name, temperature update, location and service provider login settings. (Temperature update is only available on certain ZoneFlex models.) Figure 18. The Configuration > Device page To configure the device settings 1. Go to Configuration > Device. The Configuration > Device page appears. 2.
Configuring the Access Point Configuring Internet Settings • • • Current Password: When you are entering a New Password, type the new existing password. The default password is sp-admin. New Password: Type the new password that you want to use. The password must consist of six to 32 alphanumeric characters only. Confirm New Password: Retype the new password to confirm. 5. Click Update Settings to save and apply your changes.
Configuring the Access Point Configuring Internet Settings VLAN Settings Overview A Ruckus Wireless Access Point is essentially a network switch with the capability to service Wi-Fi connections. As such, like many advanced switches, Ruckus APs conform to the IEEE 802.1Q standard -- the standard that defines virtual LANs. In an 802.1Q switch, the concept of VLANs is always present. If a packet arrives without an 802.1Q header, it is assigned to the “native VLAN” or “untag VLAN.
Configuring the Access Point Configuring Internet Settings Default IP Addressing Behavior By default, the Access Point is configured to automatically obtain an IPv4 address from a DHCP server on the network. If the Access Point does not detect a DHCP server, it automatically assigns itself the static IP address 192.168.0.1 to make it easier for you to preconfigure and deploy it on your network. For IPv6, the Auto Configuration setting serves the same purpose as DHCP.
Configuring the Access Point Configuring Internet Settings Figure 20. Renew or Release DHCP To renew or release the DHCP server-assigned IP address 1. Go to Status > Internet. 2. Review the current settings. 3. If the current Connection Type is DHCP, you will be able to see the currentlyassigned IP address and subnet mask listed below. • • To force the AP to release its DHCP-assigned IP address, click Release DHCP.
Configuring the Access Point Configuring Internet Settings Static IP There are at least two instances when you would want to configure a static IP address for the Access Point: ■ If the current IP address that the Access Point is using consistently conflicts with that of another AP on the network. If you want to switch from DHCP to static IP addressing, for use in managing or maintaining the Access Point.
Configuring the Access Point Configuring Internet Settings PPPoE Point to Point Protocol over Ethernet (PPPoE) is a Layer 2 protocol which uses the PPP (Point to Point) protocol to connect a client system to a server system over a one to one network link. All traffic for a PPPoE connected client must go through the PPPoE server to reach the client. A PPPoE server can therefore be used to route, NAT, firewall, and perform QoS traffic shaping.
Configuring the Access Point Configuring Internet Settings Figure 21. L2TP Connection To configure L2TP tunneling 1. Go to Configuration > Internet. 2. Under L2TP Connection, click Enable. 3. In L2TP Network Server IP Address, type the IP address of the L2TP network server (LNS) to which the device will connect. 4. In L2TP Network Server Password, type the L2TP server password. 5.
Configuring the Access Point Configuring Local Subnets Configuring Local Subnets ZoneFlex Access Points can be configured to provide routing/network address translation (NAT) functionality by using the Local Subnets feature. When a Local Subnet is enabled, the standalone AP plays the role of a gateway router with the ability to manage its own subnets, providing DHCP server and DNS cache functions for both wired and wireless clients.
Configuring the Access Point Configuring Local Subnets Figure 22.
Configuring the Access Point Configuring Wireless Settings Configuring Wireless Settings This section describes how to configure the wireless settings of the Access Point. There are two types of wireless settings that you need to configure: ■ ■ Configuring Common Wireless Settings: Includes the wireless mode, country code, and advanced wireless settings, such as the wireless transmit power and wireless protection mode. These settings are applied to all WLANs.
Configuring the Access Point Configuring Wireless Settings To configure the wireless settings common to all WLANs 1. Go to Configuration > Wireless. The Configuration > Wireless > Common page appears. NOTE: If you are using a dual band ZoneFlex AP, go to Configuration > Radio 2.4G or Configuration > Radio 5G. 2. Make changes to the common wireless settings listed in the table below. Setting Description Radio Network (Dual radio APs only) Allows you to change the name of the 2.
Configuring the Access Point Configuring Wireless Settings Country Code This option (if enabled) lets you select your country or region code. Advanced Settings Refer to “Reviewing Common Advanced Settings” on page 49. AeroScout RFID Select Enabled to enable AeroScout RFID tag detection. External Antenna NOTE: This option only appears if you are using the ZoneFlex 2942 AP.
Configuring the Access Point Configuring Wireless Settings Reviewing Common Advanced Settings Advanced wireless settings should only be changed by an experienced administrator. Incorrect settings can severely impact wireless performance. It is recommended that the default settings be retained for best performance. CAUTION: To fully benefit from the Access Point’s capabilities, it is advisable not to change these values unless absolutely necessary. Figure 24.
Configuring the Access Point Configuring Wireless Settings Table 14. Advanced wireless common settings Option Description Transmit Power The default setting is Full. Select the level of transmit power from the drop-down menu. This option sets the maximum transmit power level relative to the predefined power (this value differs according to the current country code). Protection Mode (Disabled by default.) If you activate protection, you control how 802.
Configuring the Access Point Configuring Wireless Settings Configuring Wireless # Settings The Access Point provides up to eight wireless LANs per radio that can be individually configured to provide different kinds of services for different kinds of wireless clients, traffic types or different user groups. Each WLAN can be configured with separate security settings, VLANs, access controls and rate limiting policies, among other settings. Figure 25. Wireless # settings To configure wireless # settings 1.
Configuring the Access Point Configuring Wireless Settings Wireless Availability This option controls whether or not the wireless network is available to users (Enabled or Disabled). Broadcast SSID This option controls whether or not the WLAN SSID is visible to anyone looking for wireless networks. Disabling (hiding) the SSID requires the user to be told the correct SSID before they can connect to your network. SSID This is the publicly-broadcast “name” of your wireless network.
Configuring the Access Point Configuring Wireless Settings Access VLAN Enter a VLAN ID to segment all traffic arriving from this WLAN to a specified VLAN. Default is 1. Dynamic VLAN This setting is available only with WPA encryption and 802.1X authentication. Dynamic VLAN allows the dynamic assignment of VLANs to clients based on RADIUS attributes. Enable this option only if your RADIUS server is configured to segment clients using dynamic VLAN.
Configuring the Access Point Configuring Wireless Settings Using WEP Wired Equivalent Privacy (WEP) is a security algorithm for 802.11 wireless networks designed to provide data confidentiality comparable to that of a wired network. WEP uses a pre-shared key for encrypting data frames that is shared among all users of the wireless network. For this reason and others, WEP has been discredited as a security mechanism and should be avoided in favor of WPA if at all possible.
Configuring the Access Point Configuring Wireless Settings To configure WLAN-specific WEP encryption settings 1. Go to Configuration > Wireless. The Configuration > Wireless > Common page appears. NOTE: If you are using a dual band ZoneFlex AP, go to Configuration > Radio 2.4G or Configuration > Radio 5G. 2. Click the Wireless # tab that you want to configure. The Configuration > Wireless > Wireless[#] page appears. 3. Click the Encryption Method menu, and then click WEP.
Configuring the Access Point Configuring Wireless Settings Using WPA Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access II (WPA2) are two security protocols developed by the Wi-Fi Alliance in response to the weaknesses of WEP. Selecting WPA as the Encryption Method allows you to choose WPA version, WPA Authentication and WPA Algorithm. This section discusses WPA-PSK (pre-shared key). For information on WPA-Enterprise (WPA-802.1X), see “Customizing 802.1X Settings” on page 58.
Configuring the Access Point Configuring Wireless Settings To configure WPA encryption settings 1. Go to Configuration > Wireless. The Configuration > Wireless > Common page appears. NOTE: If you are using a dual band ZoneFlex AP, go to Configuration > Radio 2.4G or Configuration > Radio 5G. 2. Click the Wireless # tab that you want to configure. The Configuration > Wireless > Wireless[#] page appears. 3. Click the Encryption Method menu, and then click WPA.
Configuring the Access Point Configuring Wireless Settings WPA Algorithm • TKIP: Temporal Key Integrity Protocol is an older encryption algorithm that provides stronger security than a shared WEP key, but not as strong as the newer AES algorithm. • AES: AES (Advanced Encryption Standard) replaces TKIP as the default (and recommended) encryption algorithm for modern wireless LANs. • Auto: Auto allows both encryption algorithms to be used on the same WLAN.
Configuring the Access Point Configuring Wireless Settings Figure 28. 802.1X settings To configure 802.1X authentication settings on a WLAN 1. Go to Configuration > Wireless. The Configuration > Wireless > Common page appears. NOTE: If you are using a dual band ZoneFlex AP, go to Configuration > Radio 2.4G or Configuration > Radio 5G. 2. Click a Wireless # tab to configure. The Configuration > Wireless > Wireless[#] page appears. 3. Click the Encryption Method menu, then click WPA.
Configuring the Access Point Configuring Wireless Settings Setting Threshold Options The following options allow you to fine-tune the “Protection Mode” behavior, set previously on the Configuration > Wireless > Advanced > Common page. After activating a Protection Mode, you can open each Wireless tab and customize the threshold settings, which determine what is put into effect and when.
Configuring the Access Point Configuring Wireless Settings You have completed configuring the threshold options. To reopen the previous page, click the Go back to Wireless Configuration link. Figure 29. Threshold settings Rate Limiting Rate Limiting allows you to cap the per client data transfer rates for a specific WLAN. To enable per station rate limits 1. Go to Configuration > Wireless. NOTE: If you are using a dual band ZoneFlex AP, go to Configuration > Radio 2.4G or Configuration > Radio 5G. 2.
Configuring the Access Point Configuring Wireless Settings Figure 30. Limit per station traffic rates on a specific WLAN Controlling Access to the Wireless Network Access Control enables you to specify the stations are allowed to join (associate with) your wireless networks. Access controls can be configured for each WLAN from its respective Wireless # tab. Access Control Options This section describes the options that you can use to control access to the wireless network.
Configuring the Access Point Configuring Wireless Settings Changing the Access Controls for a WLAN By default, the Disable WLAN access restrictions option is selected, which allows any wireless station to gain access to the wireless network. If you want to change this setting, follow the instructions below. Figure 31.
Configuring the Access Point Configuring Wireless Settings To edit the ACL 1. Go to Configuration > Wireless. NOTE: If you are using a dual band ZoneFlex AP, go to Configuration > Radio 2.4G or Configuration > Radio 5G. 2. Click the Wireless # tab for which you want to configure the access control settings. 3. Click the Edit Settings button next to Access Control. 4. Select the radio button for the desired access control.
Configuring the Access Point Configuring Ethernet Ports Configuring Ethernet Ports The Ethernet Ports configuration page allows you to define how the Access Point’s Ethernet ports behave. You can disable ports entirely, define trunking and packet forwarding behavior, configure 802.1X authentication settings, and configure VLAN settings for each port individually from this page. Figure 32. The Configuration > Ethernet Ports page To configure LAN ports 1. Go to Configuration > Ethernet Ports. 2.
Configuring the Access Point Configuring Ethernet Ports Port Type Packet Forward See “Setting Ethernet Port Type” on page 67 for more detailed information. ■ Trunk Port: This port passes all VLAN traffic. ■ Access Port: This port provides network access. ■ General Port: User-defined VLAN membership. Isolated: Selecting Isolated causes the traffic from this port to terminate at the Access Point.
Configuring the Access Point Configuring Ethernet Ports Insert DHCP Option 82 When this option is enabled for an Ethernet port, additional information will be encapsulated in DHCP option 82 and inserted into DHCP request packets. Current format of option 82 is: Circuit ID sub-option: ETH:::N/A: :: This option supports the ability for a service provider to allocate IP addresses intelligently by considering information on the origin of the IP allocation request. 3.
Configuring the Access Point Configuring Ethernet Ports Working with 802.1X on Wired Ethernet Ports 802.1X authentication consists of the following three components: ■ ■ ■ Supplicant: The supplicant sends access request messages along with credentials, such as user name / password or digital certificate, to an authenticator, which forwards the credentials to the authentication server for verification.
Configuring the Access Point Configuring Ethernet Ports ■ If an Access Port is configured as an Authenticator, the administrator must define the RADIUS server that the Authenticator will communicate with. All Ethernet ports of a single AP are configured with the same RADIUS server. Enable MAC authentication bypass: If MAC authentication bypass is enabled, the port first attempts to authenticate the attached device by MAC address, and if that fails, it will try to authenticate the device using 802.1X.
Configuring the Access Point Configuring the Hotspot Service Configuring the Hotspot Service The hotspot service can be deployed on standalone ZoneFlex APs through the Web interface. At a minimum, you must configure a login redirect URL and a RADIUS server to which users will be authenticated. Additional options and controls are provided on subsequent pages. To enable the Hotspot service 1. Go to Configuration > Hotspot. 2. Click Enabled next to Hotspot Service. 3.
Configuring the Access Point Configuring the Hotspot Service Figure 33. Minimum configuration settings for providing Hotspot service Customizing Optional Hotspot Settings Optional Hotspot settings include a number of options for fine-tuning your Hotspot service, such as maximum session time, grace period, and accounting update interval. The following Hotspot options can be configured from the Configuration > Hotspot > More Options page: Table 22.
Configuring the Access Point Configuring the Hotspot Service NAS ID Specify the Network Access Server identifier of this device. The NAS-ID attribute is sent in RADIUS access and accounting request messages. It can also be used as location identification when NAS-IP-Address cannot be used for this purpose. Default = nas01. WISPr Location ID Specify the Hotspot location identifier, or WISPr (Wireless Internet Service Provider Roaming) location identifier.
Configuring the Access Point Configuring the Hotspot Service Swap Input and Output Counters Swap the value of input counters (packets, octets and giga words) and output counters in RADIUS accounting requests. This option is mainly for backward compatibility with existing Chillispot deployments. Default = Disable. Encode User Password Encode user password with challenge string, if UAM secret is not specified; otherwise, encode user password with both challenge string and UAM secret. Default = Disable.
Configuring the Access Point Configuring the Hotspot Service Creating a Hotspot Walled Garden You can use the Hotspot Walled Garden rules to designate network destinations (host address or subnet) that users can access without going through authentication. A Walled Garden is a limited environment to which an unauthenticated user is given access for the purpose of setting up an account. After the account is established, the user is allowed out of the Walled Garden.
Configuring the Access Point Configuring the Hotspot Service To remove entries from the Walled Garden hosts table 1. Click the check box next to the entry you want to remove, under the Remove? column. 2. Click Update. The entry is removed from the list. Allowing Unrestricted Access by MAC Address To allow selected clients unrestricted access to your Hotspot service: 1. Go to Configuration > Hotspot > Unrestricted Clients. 2. Click Add new entry. 3. Enter the MAC address of the client. 4.
Configuring the Access Point Configuring the Hotspot Service 76
5 Managing the Access Point In This Chapter Viewing Current Device Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Viewing Current Internet Connection Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Viewing Current Local Subnet Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 Viewing Current Wireless Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Managing the Access Point Viewing Current Device Settings Viewing Current Device Settings The Status > Device page displays a general overview of the AP’s current status, including AP name, serial number, MAC address, current software version, and so forth. Figure 37.
Managing the Access Point Viewing Current Internet Connection Settings Viewing Current Internet Connection Settings The Status > Internet page displays information on the AP’s network settings; i.e., the settings that allow the AP to communicate with your local network and the Internet. Information includes IP address, gateway, DNS server, NTP server, and connection type (method of obtaining an IP address -- DHCP or static IP). Figure 38.
Managing the Access Point Viewing Current Local Subnet Settings Viewing Current Local Subnet Settings The Status > Local Subnets page can be used to view the router (local subnet) configurations and list of any clients connected to those subnets. If you want to make changes to any of these settings, go to Configuration > Local Subnets. Refer to “Configuring Local Subnets” on page 44 for more information. Figure 39.
Managing the Access Point Viewing Current Wireless Settings Viewing Current Wireless Settings If you want to view the current common wireless settings that the AP is using, go to the Status > Wireless page (on dual band APs, go to Status > Radio 2.4G or Status > Radio 5G). Table 23 lists the descriptions of each common wireless setting. Table 23. Common Wireless settings Setting Description Wireless Mode Shows the wireless mode that the AP is currently using. Possible values include: • Auto-Select • 2.
Managing the Access Point Viewing Current Wireless Settings Figure 40. The Status > Wireless (Radio 2.
Managing the Access Point Viewing Associated Wireless Clients Viewing Associated Wireless Clients A usage-monitoring capability has been built into the Access Point to help you monitor wireless clients that are associated with your wireless network. To view associated wireless clients 1. Go to Status > Wireless. The Status > Wireless page appears. NOTE: If you are using a dual band ZoneFlex AP, go to Status > Radio 2.4G or Status > Radio 5G. 2. Click any of the Wireless tabs.
Managing the Access Point Changing the Administrative Login Settings Changing the Administrative Login Settings The default user name is super and the default password is sp-admin. To prevent unauthorized users from logging in to the Web interface using these default administrator login settings, Ruckus Wireless recommends that you change the default Web interface password immediately after your first login. To change the default administrator login settings 1. Log in to the Web interface. 2.
Managing the Access Point Enabling Other Management Access Options Enabling Other Management Access Options In addition to managing the AP via a Web browser through HTTPS, several other management access options are available on the AP. These options include management access via HTTP, Telnet and SSH. You can also view and set up the connection to a Ruckus Wireless FlexMaster server under the TR-069/SNMP Management Choice options.
Managing the Access Point Enabling Other Management Access Options To enable other management access options 1. Go to Administration > Management. The Management page appears. 2. Review the access options listed in Table 24, and then make changes as needed. Table 24. Management Access Options Option Description Telnet Access By default, this option is disabled (inactive). Telnet Port This field lists the default Telnet port of 23 — only if Telnet is active.
Managing the Access Point Enabling Other Management Access Options 3. If you want to use TR-069 or SNMP to manage the AP, configure the settings listed in Table 25. Table 25.
Managing the Access Point Enabling Other Management Access Options Viewing FlexMaster Management Status If you configure the AP to be managed by FlexMaster, you can check the TR-069 Status section on the Administration > Management page. Figure 44.
Managing the Access Point Enabling Other Management Access Options Table 26 lists the TR-069 status information that the AP provides. Table 26. TR-069 status information Status Information Description Currently using Shows the FlexMaster server IP address or URL with which the AP is currently registered Last Attempted Contact Shows the date and time of the AP’s last attempt to contact FlexMaster.
Managing the Access Point Working with Event Logs and Syslog Servers Working with Event Logs and Syslog Servers Both the Maintenance > Support Info and Administration > Log pages can be used to view the AP’s current log file text. You can use the former to send the log to Ruckus Wireless support directly or save it to a local file, and use the latter to configure automatic delivery of log files to a syslog server.
Managing the Access Point Working with Event Logs and Syslog Servers Sending a Copy of the AP Log File to Ruckus Wireless Support You can set up a connection to an FTP or TFTP site to send a copy of the current AP log file to Ruckus Wireless Support. You can alternatively send the AP log file(s) as described in “Saving Copies of the Current AP Log Files to Your Computer” on page 91. To send a copy of the current log file using FTP or TFTP: 1. Go to Maintenance > Support Info.
Managing the Access Point Working with Event Logs and Syslog Servers 5. When the “Save as...” dialog box appears, find a convenient location on your local computer to save the file, and change the file extension from html to txt. 6. Click Save to save the supportinfo.txt file to your computer. 7. If required, repeat this procedure for the tr069info.txt file. You have saved the AP log file(s) to your computer. You can now sent them to Ruckus Wireless Support.
Managing the Access Point Upgrading the Firmware Upgrading the Firmware You can use the Web interface to check for software updates/upgrades for the firmware built into the AP. You can then apply these updates to the AP in one of two ways: (1) manual updating on an as-needed basis or (2) automating a regularly scheduled update.
Managing the Access Point Upgrading the Firmware Upgrading Manually via FTP or TFTP 1. In the Upgrade Method options, click FTP or TFTP. 2. Click the host name field, and then type the URL of the server. Or click the IP address field, and then type the IP address of the server. Remember to start the URL with ftp://. CAUTION: Do not change any of the Image Control File, Username, or Password entries. 3. Click Perform Upgrade. A status bar appears during the upgrade process. 4.
Managing the Access Point Upgrading the Firmware Scheduling Automatic Upgrades When the upgrade method is TFTP, FTP or Web, you can schedule automatic upgrades: 1. In the Upgrade Method options, click the button for your preferred choice. 2. Enter the appropriate information in the Host name field or IP address field. CAUTION: Do not change any of the Image Control File, Username, or Password entries. 3. Verify that the Auto Upgrade option is set to Enabled. 4.
Managing the Access Point Rebooting the Access Point Rebooting the Access Point You can use the Web interface to prompt the AP to reboot, which simply restarts the AP without changing any of the current settings. Please note that rebooting the AP will disrupt network communications in any currently active WLANs. 1. Go to Maintenance > Reboot/Reset. The Maintenance > Reboot/Reset page appears. 2. Click Reboot Now. After a brief pause, you will be automatically logged out of the AP. Figure 47.
Managing the Access Point Resetting the Access Point to Factory Defaults Resetting the Access Point to Factory Defaults WARNING: DO NOT reset the Access Point to factory defaults unless you are directed to do so by Ruckus Wireless support staff or by a network administrator. Do this only if you are able to immediately connect the restored AP to your computer, to reconfigure it for Wi-Fi network use.
Managing the Access Point Running Diagnostics Running Diagnostics Two network connection diagnostic tools – ping and traceroute – have been built into the AP to help you check network connections from the Web interface. To run diagnostics for network troubleshooting 1. Go to Administrator > Diagnostics. The Administrator > Diagnostics page appears. Two options are available: • • Ping Traceroute 2.
Managing the Access Point Running Diagnostics Figure 49. Running traceroute on ruckuswireless.
Managing the Access Point Where to Find More Information Where to Find More Information If you have questions that this guide does not address, visit the Ruckus Wireless Support Portal at http://support.ruckuswireless.com/. The Support Portal hosts the latest versions of user documentation. You can also find answers to frequently asked questions (FAQs) for each Ruckus Wireless product type.
Index Numerics 802.1X, 58, 66 802.1X settings, 58 802.1X wired ethernet port, 68 A access control, 62–63 access point event logs, 90 logs, 90 management access, other, 85 managing, 77 overview, 1 pointing to FlexMaster, 89 rebooting, 96 resetting to factory default, 97 sending events to a syslog server, 90 supportinfo.txt, 91 tr069info.
other management access settings, 85 SNMP management options, 87 syslog settings, 90 TR-069 settings, 87 wireless settings, 46 802.
M T MAC authentication bypass, 69 management access options, 85 management VLAN, 38 managing access points, 77 menu, 32 tabs, 32 temperature update, 36 threshold, 52 tr069info.
wireless availability, 52 wireless channel, 47, 81 wireless mode, 47 wireless security 802.
