RUCKUS SmartZone (ST-GA) Security Guide, 7.0.0

• 1 CommScope Legal Statements
• Preface
  • 3 Contact Information, Resources, and Conventions
    • 3.1 Contacting RUCKUS Customer Services and Support
    • 3.2 Document Feedback
    • 3.3 RUCKUS Product Documentation Resources
    • 3.4 Online Training Resources
    • 3.5 Document Conventions
    • 3.6 Command Syntax Conventions
  • 4 About The Guide
    • 4.1 New in This Document
  • 5 Managing Administrator and Roles
    • 5.1 Creating User Groups
      • 5.1.1 Resource Group Details
    • 5.2 Creating Administrator Accounts
      • 5.2.1 Unlocking an Administrator Account
    • 5.3 Configuring Administrator Accounts
    • 5.4 Working with AAA Servers
      • 5.4.1 Configuring SZ Admin AAA Servers
        • 5.4.1.1 Testing SZ Admin AAA Servers
      • 5.4.2 Configuring Switch AAA Servers
      • 5.4.3 Configuring Switch AAA Server Settings
      • 5.4.4 AAA Server Authentication
      • 5.4.5 About RADIUS Support
      • 5.4.6 About LDAP Support
    • 5.5 Creating Account Security
    • 5.6 Active Directory (AD)
      • 5.6.1 About Active Directory (AD) Support
      • 5.6.2 Creating a User Role with Active Directory Authentication
    • 5.7 802.1X Authentication
      • 5.7.1 Creating a User Role with 802.1x Authentication
  • 6 Access Control
    • 6.1 Virtual LAN
      • 6.1.1 VLAN Pooling
        • 6.1.1.1 Creating a VLAN Pooling Profile
      • 6.1.2 VLAN Precedence
        • 6.1.2.1 VLAN Precedence
      • 6.1.3 VLAN Name
        • 6.1.3.1 Creating VLAN Name Profile
    • 6.2 Restricted Access
      • 6.2.1 Creating a Restricted AP Access Profile
      • 6.2.2 Configuring a Restricted Access via Access Point
      • 6.2.3 Configuring a Restricted Access via Templates
      • 6.2.4 Enabling Restricted AP Access Profile
    • 6.3 Creating Blocked Client
    • 6.4 Creating a Client Isolation Whitelist
    • 6.5 Creating a Time Based Access Table
    • 6.6 Creating a Traffic Class Profile
    • 6.7 Creating a DNS Server Profile
    • 6.8 Creating a DNS Spoofing Profile
    • 6.9 Enabling the Access Control of Management Interface
  • 7 Wireless Intrusion Detection and Prevention Services (WIDS/WIPS)
    • 7.1 Wireless Intrusion Detection and Prevention System
      • 7.1.1 Configuring a Rogue Classification Policy
  • 8 Certificates
    • 8.1 Importing SmartZone as Client Certificate
    • 8.2 Assigning Certificates to Services
    • 8.3 Generating Certificate Signing Request (CSR)
    • 8.4 Managing AP Certificates
    • 8.5 Importing SmartZone (SZ) Trusted CA Certificates/Chains
    • 8.6 DataPlane validates SmartZone
    • 8.7 AP Validate SmartZone Controller
  • 9 Firewall Profile
    • 9.1 Managing a Firewall Profile
      • 9.1.1 Create an L3 Access Control Policy
        • 9.1.1.1 Create an L3 Access Control Policy Rule
      • 9.1.2 Creating an L2 Access Control Policy
        • 9.1.2.1 Creating an L2 Access Control Service
      • 9.1.3 Configuring Application Controls
        • 9.1.3.1 Viewing an Application Control Summary
        • 9.1.3.2 Creating an Application Control Policy
        • 9.1.3.3 Implementing an Application Control Policy
        • 9.1.3.4 Creating a User-Defined Application
        • 9.1.3.5 Working with Application Signature Packages
          • 9.1.3.5.1 Step 1: Uploading the Signature Package
          • 9.1.3.5.2 Step 2: Validating the Signature Package
          • 9.1.3.5.3 Managing Signature Package Upgrading Conflicts
      • 9.1.4 URL Filtering
        • 9.1.4.1 Viewing a Summary of URL Filters
        • 9.1.4.2 Enabling URL Filtering on the WLAN
        • 9.1.4.3 Enabling URL Filtering on the Controller
        • 9.1.4.4 Managing URL Filtering Licenses
      • 9.1.5 Creating a Device Policy
        • 9.1.5.1 Creating the Device Policy Rules
        • 9.1.5.2 Summary
  • 10 TACACS+
    • 10.1 About TACACS+ Support
  • 11 ECDSA
    • 11.1 Elliptic Curve Digital Signature Algorithm (ECDSA) Certificate and Keys Support
    • 11.2 Cloud Computing Compliance Criteria Catalogue - BSI C5
    • 11.3 Configuring ECDSA and Keys at Zone Level
    • 11.4 Mapping Server ECDSA Certificates
    • 11.5 Enabling ECDSA Certificates Support for RADIUS with Transport Layer Security (TLS)