A zone template contains configuration
settings (radio, AP GRE tunnel, channel mode, and background scanning) that you
can apply to
all access points that belong to a particular AP zone. Applying a zone template
to an AP
zone will overwrite all settings on all access points that belong to the AP
zone.
To create a zone template:
Go to Administration > System > Templates > Zone
Templates.
Click Create, the Create Zone
Template form is displayed.
Enter the template details as explained in the
following table.
Zone Template
Details
Field
Description
Your Action
General
Options
Zone
Name
Indicates a name for the Zone.
Enter a name.
Description
Indicates a short description.
Enter a brief description
AP
Firmware
Indicates the firmware to which it applies.
Select the firmware.
Country
Code
Indicates the country code to ensure that
this zone uses authorized radio channels.
Select the country code.
Location
Indicates generic location.
Enter the location.
Location
Additional Information
Indicates detailed location.
Enter additional location information.
GPS
Coordinates
Indicates the geographical location.
Enter the following coordinates in meters or
floor:
Longitude
Latitude
Altitude
AP Admin
Logon
Indicates the admin logon credentials. For the Default Zone, the
controller's cluster name is used as the default login ID
and password.
Enter the Logon
ID and Password.
Time
Zone
Indicates the time zone that applies.
Select the option:
System Defined: Select the time zone.
User defined:
Enter the Time Zone Abbreviation.
Choose the GMT
Offset time.
Select Daylight Saving Time.
AP IP
Mode
Indicates the IP version that applies.
Select the option:
IPv4 only
IPv6 only
Dual
Historical Connection Failures
Allows the zone APs to report client
connection failures so that the administrator can view past
connection problems from the Troubleshooting menu.
Click the button.
DP Zone
Affinity Profile
Specifies the DP affinity profile for the
zone.
Note: This option is supported only on vSZ-H.
Select the zone affinity profile from the
list.
SSH
Tunnel Encryption
Specifies the encryption that reduces the
load on control of SSH traffic.
Select the required option:
AES 128
AES 256
Cluster Redundancy
Provides cluster redundancy option for the
zone.
Note: Cluster redundancy is supported only on SZ300 and
vSZ-H.
Select
the required option:
Zone Enable
Zone Disable
Radio
Options
Channel
Range
Indicates that you want to override the
2.4GHz channel range that has been configured for the zone.
Select Select
Channel Range (2.4G) check boxes for the channels on
which you want the 2.4GHz radios to operate. Channel options
include channels 1 to 11. By default, all channels are
selected.
DFS
Channels
Allows ZoneFlex APs to use DFS channels.
Click to enable the option.
Channel
144
Provides
channel 140 and 144 support for 11ac and 11ax APs.
Enabling this option supports 20 MHz, 40 MHz, or 80 MHz
channel modes. The 80+80 MHz and 160 MHz modes are
supported if the AP supports these modes. Disabling this
option provides Channel 140 support only to 20 MHz mode.
Note: This
option is available for selection only if you enable the
DFS
Channels option.
Note: This
feature is currently supported only in the United
States.
Click to enable the option.
Channel
Range (5G) Indoor
Indicates for what channels want the 5GHz
radios to operate.
Select the check boxes.
Channel
Range (5G) Outdoor
Indicates for what channels want the 5GHz
radios to operate.
Select the check boxes.
Radio
Options b/g/n (2.4 GHz)
Indicates the radio option 2.4 GHz
configurations.
Select the following options:
Channelization—Set the channel width used
during transmission to either 20 or 40 (MHz), or select Auto to set it automatic.
Channel—Select the channel to use for the
b/g/n (2.4GHz) radio, or select Auto to set it automatic.
TX
Power Adjustment—Select the preferred TX
power, if you want to manually configure the
transmit power on the 2.4GHz radio. By default, TX
power is set to Full/Auto on the 2.4GHz radio.
Note: If
you choose Min, the
transmit power is set to 0dBm (1mW) per chain for
11n APs, and 2dBm per chain for 11ac APs. If you
choose Max, the
transmit power is set to the max allowable value
according to the AP's capability and the operating
country's regulations.
Radio
Options a/n/ac (5 GHz)
Indicates the radio option 5 GHz
configurations.
Select the following options:
Channelization—Set the channel width used
during transmission to either 20, 40, 80, 80+80 or select Auto.
Channel—For Indoor and Outdoor, select the
channel to use for the a/n/c (5GHz) radio, or select
Auto.
TX
Power Adjustment—Select the preferred TX
power, if you want to manually configure the
transmit power on the 5GHz radio. By default, TX
power is set to Full/Auto on the 5GHz radio.
Note: If
you choose Min, the
transmit power is set to 0dBm (1mW) per chain for
11n APs, and 2dBm per chain for 11ac APs. If you
choose Max, the
transmit power is set to the max allowable value
according to the AP's capability and the operating
country's regulations.
AP GRE
Tunnel Options
Ruckus
GRE Profile
Indicates the GRE tunnel profile.
Choose the GRE tunnel profile from the
drop-down.
Ruckus
GRE Forwarding Broadcast
Forwards the broadcast traffic from network
to tunnel.
Click the option to enable forwarding
broadcast.
Soft GRE
Profiles
Indicates the SoftGRE profiles that you want
to apply to the zone.
Click the
Select checkbox, a form is displayed.
From the
Available Profiles, select the profile
and click the -> icon to choose it.
You
can also click the + icon to create a new SoftGRE
profile.
Click
OK.
IPsec
Tunnel Mode
Indicated the tunnel mode for the Ruckus GRE
and SoftGRE profile.
Select an option:
Disable
SoftGRE
Ruckus GRE
IPsec
Tunnel Profile
Indicates the tunnel profile for SoftGRE.
Note: Select the same tunnel type for IPsec tunnel profile in
WLAN configuration.
Choose the option from the drop-down.
Syslog
Options
Enable
external syslog server for Aps
Indicates if an external syslog server is
enabled.
Select the check box and update the
following details for the AP to send syslog messages to
syslog server. If the primary server goes down, the AP send
syslog messages to the secondary server as backup:
Primary Server Address
Secondary Server Address
Port for the respective servers
Portocol: select between UDP and TCP
protocols
Event Facility
Priority
Send Logs: you can choose to send the General
Logs, Client Logs or All Logs
AP SNMP
Options
Enable AP
SNMP
Indicates if the AP SNMP option is enabled.
Select the check box.
SNMPv2
Agent
Indicates SNMPv2 Agent is applied.
Click
Create and enter Community.
Select the required Privilege: Read or Write.
Click
OK.
SNMPv3
Agent
Indicates SNMPv3 Agent is applied.
Click
Create and enter User.
Select the required Authentication:
None
SHA
Enter the Auth Pass Phrase
Select the Privacy option. For DES and AES options, Enter the Privacy Phrase.
MD5
Enter the Auth Pass Phrase
Select the Privacy option. For DES and AES options, Enter the Privacy Phrase.
Select the required Privilege: Read or Write.
Click
OK.
Advanced
Options
Channel
Mode
Indicates if location-based service is
enabled.
Select the check box and choose the option.
Auto
Channel Selection
Indicates auto-channel settings.
Select the required check boxes and choose
the option.
Background Scan
Runs a background scan.
Select the respective check boxes and enter
the duration in seconds.
Smart
Monitor
Indicates AP interval check and retry
threshold settings.
Select the check box and enter the duration
and threshold.
AP Ping
Latency Interval
Measures the latency between the controller
and AP periodically, and send this data to SCI
Enable by moving the radio button to ON to
measure latency.
AP
Management VLAN
Indicates the AP management VLAN settings.
Choose the option. If you select VLAN
ID, enter the VLAN ID that you want to assign (valid
range is from 1 to 4094). To keep the same management VLAN
ID that has been configured on the AP, click Keep AP's
settings.
Attention: For
standalone APs, set the AP ethernet port to trunk before
changing the AP Management VLAN settings.
Rogue AP
Detection
Indicates rogue AP settings.
Note: Rogue
detection AP in active-active mode cluster redundancy
environment is restricted from storing its own BSSIDs to
avoid considering its own APs as rougues
attacking.
Enable the option.
Rogue
Classification Policy
Indicates the parameters used to classify
rogue APs. This option is available only if you enable the
Rogue AP
Detection option.
Select the
options for rogue classification policy:
Enable events and alarms for all rogue
devices
Enable events and alarms for malicious rogues
only
Report RSSI Threshold - enter the
threshold. Range: 0 through 100.
Protect the network from malicious rogue access
points - Enable the option and choose
one of the following:
Aggressive
Auto
Conservative
Radio Jamming Detection - enable the
option and enter the Jamming Threshold in percentage.
DoS
Protection
Indicates settings for blocking a client.
Select the check box and enter the:
duration in seconds to Block a client for
number of repeat authentication failures
duration in seconds to be blocked for every repeat
authentication failures.
Load
Balancing
Balances the number of clients across APs.
Select one of the following options and
enter the threshold:
Based on Client Count
Based on Capacity
Disabled
Note: If
Based
on Capacity is selected, Band
Balancing is disabled.
Band
Balancing
Balances the bandwidth of the clients.
Select the check box and enter the
percentage.
Location
Based Service
To disable the LBS service for this AP
group, clear the Enable LBS service check box. To use a
different LBS server for this AP group, select the Enable
LBS service check box, and then select the LBS server that
you want to use from the drop-down list.
Select the check box and choose the options.
Client
Admission Control
Indicates the load thresholds on the AP at
which it will stop accepting new clients.
Note: Client
admission cannot be enabled when client load balancing
or band balancing is enabled.
Select the Enable check box 2.4 GHz Radio or 5GHz Radio and
update the following details:
Min
Client Count
Max
Radio Load
Min
Client Throughput
AP Reboot
Timeout
Indicates AP reboot settings.
Choose the required option for:
Reboot AP if it cannot reach default gateway
after
Reboot AP if it cannot reach the controller
after
Recovery
SSID
Allows you to enable or disable the
Recovery(Island) SSID broadcast on the controller.
Enable Recovery
SSID Broadcast
Direct
Multicast
Indicates whether multicast traffic is sent
from a wired device, wireless device or from the network.
Select one or more of the following:
Multicast Traffic from Wired Client
Multicast Traffic from Wireless Client
Multicast Traffic from Network
Click
OK.
Note: You can select a zone from the list and edit, clone or delete its template by selecting
the options
Configure,
Clone or
Delete respectively.