RUCKUS SmartZone (ST-GA) Network Administration Guide, 7.0.0

This guide is written for service operators and system administrators who are responsible for managing, configuring, and troubleshooting Ruckus devices. Consequently, it assumes a basic working knowledge of local area networks, wireless networking, and wireless devices. This guide supports all platforms of the controller. It is recommended to view the New In This Document section for a high-level overview.

Preface
- 3 Contact Information, Resources, and Conventions
  - 3.1 Contacting RUCKUS Customer Services and Support
  - 3.2 Document Feedback
  - 3.3 RUCKUS Product Documentation Resources
  - 3.4 Online Training Resources
  - 3.5 Document Conventions
  - 3.6 Command Syntax Conventions
- 4 About This Guide
  - 4.1 About This Guide
  - 4.2 New In This Document
- 5 License Requirements to Manage Access Points and Switches
  - 5.1 AP and Switch Capacity Licenses
    - 5.1.1 Verifying the Available AP Capacity Licenses in the Controller
    - 5.1.2 Verifying the Available Switch Capacity Licenses in the Controller
  - 5.2 AP Support Licenses
    - 5.2.1 Verifying the AP Support Licenses
- 6 SmartZone Network Hierarchy
  - 6.1 SmartZone Domains
    - 6.1.1 Partner Domains
  - 6.2 AP Zones
    - 6.2.1 AP Groups
  - 6.3 WLAN Groups
  - 6.4 Switch Groups
- 7 Creating an AP Domain
- 8 AP Groups
  - 8.1 Working with AP Groups
  - 8.2 Cybersecurity
  - 8.3 Creating an AP Group
- 9 Working with AP Zones
  - 9.1 Creating an AP Zone
  - 9.2 Automated Frequency Coordination System
    - 9.2.1 AFC Power Modes
    - 9.2.2 RUCKUS AFC System Architecture
    - 9.2.3 How RUCKUS AP Geolocation Works
    - 9.2.4 Mobile Applications
    - 9.2.5 Enabling Automated Frequency Coordination from SmartZone
    - 9.2.6 Checking Automated Frequency Coordination Status
  - 9.3 Radio Band Features
    - 9.3.1 Band or Spectrum Configuration
    - 9.3.2 Auto Cell Sizing
    - 9.3.3 ChannelFly and Background Scanning
    - 9.3.4 BSS Coloring
  - 9.4 Moving an AP Zone Location
  - 9.5 Working with Zone Templates
    - 9.5.1 Creating a New Zone using a Zone Template
    - 9.5.2 Extracting a Zone Template
    - 9.5.3 Applying a Zone Template
    - 9.5.4 Configuring Templates
      - 9.5.4.1 Creating Zone Templates
      - 9.5.4.2 Exporting Zone Templates
      - 9.5.4.3 Importing Zone Templates
    - 9.5.5 Overview of Access Point Configuration
  - 9.6 Moving a Single Access Point to a Different AP Zone
  - 9.7 Working with Maps
    - 9.7.1 Importing a Floorplan Map
    - 9.7.2 Viewing RF Signal Strength
    - 9.7.3 Monitoring APs Using the Map View
- 10 AP Provisioning and Swapping
  - 10.1 Provisioning and Swapping Access Points
  - 10.2 Options for Provisioning and Swapping APs
  - 10.3 Approving Access Points
    - 10.3.1 Approving Mesh APs
    - 10.3.2 Viewing Mesh APs
  - 10.4 Working with AP Registration Rules
    - 10.4.1 Creating an AP Registration Rule
    - 10.4.2 Configuring Registration Rule Priorities
  - 10.5 Creating an AP MAC OUI Address
  - 10.6 ZD Migration
    - 10.6.1 ZoneDirector to SmartZone Migration
  - 10.7 AP Switchover
    - 10.7.1 Configuring AP Switchover
  - 10.8 Switch Over Managed APs and External DPs
  - 10.9 Rehoming Managed APs
    - 10.9.1 AP Auto Rehome
  - 10.10 Rebalancing APs
  - 10.11 Triggering a Preferred Node
  - 10.12 Configuring Node Affinity
    - 10.12.1 Enabling Node Affinity
    - 10.12.2 Disabling Node Affinity
- 11 Reports
  - 11.1 Report Generation
    - 11.1.1 Creating Reports
    - 11.1.2 Generating Reports
- 12 Global AP Settings
  - 12.1 Configuring APs
    - 12.1.1 Overview of Access Point Configuration
    - 12.1.2 Configuring Access Points
  - 12.2 Swap Configuration
    - 12.2.1 Editing Swap Configuration
    - 12.2.2 Understanding How Swapping Works
    - 12.2.3 Tagging Critical APs
    - 12.2.4 Setting the Country Code
    - 12.2.5 Configuring the Tunnel UDP Port
  - 12.3 AP Admin Password and Recovery SSID
  - 12.4 Power Source in AP Configuration
  - 12.5 Link Layer Discovery Protocol (LLDP)
    - 12.5.1 Supported LLDP Attributes
    - 12.5.2 Viewing LLDP Neighbors
  - 12.6 Link Aggregration Protocol (LACP)
    - 12.6.1 Link Aggregation Control Protocol (LACP) support for R720 AP
    - 12.6.2 Enabling the LACP Support for a Zone
    - 12.6.3 Enabling LACP Support for an AP
    - 12.6.4 Enabling LACP Support for an AP Group
    - 12.6.5 Creating a Bond Port Profile
  - 12.7 AP Ethernet Ports
    - 12.7.1 Creating an Ethernet Port Profile
    - 12.7.2 Designating an Ethernet Port Type
    - 12.7.3 Access Ports
    - 12.7.4 Trunk Ports
    - 12.7.5 General Ports
  - 12.8 Model Specific Settings
    - 12.8.1 Configuring Model-Based Settings
    - 12.8.2 Configuring the Port Settings of a Particular AP Model
- 13 AP Services
  - 13.1 DHCP & NAT
    - 13.1.1 Viewing DHCP and NAT Information
    - 13.1.2 Working with DHCP
      - 13.1.2.1 DHCP Server or NAT Router
      - 13.1.2.2 Network Topology
      - 13.1.2.3 Hierarchical Network Topology
      - 13.1.2.4 Configuring AP-based DHCP Service Settings
      - 13.1.2.5 Creating an AP DHCP Pool
      - 13.1.2.6 Creating Profile-based DHCP
        
        13.1.2.6.1 Configuring DHCP Global Settings
        
        13.1.2.6.2 Configuring DHCP Pool Settings
      - 13.1.2.7 Creating Profile-based NAT
        
        13.1.2.7.1 Configuring NAT Global Settings
        
        13.1.2.7.2 Configuring NAT Pool Setting
      - 13.1.2.8 Configuring DHCP Server or NAT Router with Mesh Options
  - 13.2 Domain Name System (DNS)
    - 13.2.1 Creating a DNS Server Profile
    - 13.2.2 Creating a DNS Spoofing Profile
  - 13.3 Managing AP Certificates
  - 13.4 AP Restricted Access
  - 13.5 AP CLI Scripts
    - 13.5.1 Uploading AP CLI Scripts
    - 13.5.2 Executing AP CLI Scripts
    - 13.5.3 Scheduling AP CLI Scripts
    - 13.5.4 Viewing Scripts
    - 13.5.5 Viewing the Script Execution Summary
- 14 AP Status
  - 14.1 AP Status
  - 14.2 SCI Thresholds for each AP
  - 14.3 Tagging Critical APs
  - 14.4 Monitoring the Network
  - 14.5 Viewing Managed APs
    - 14.5.1 Viewing Managed Access Points
  - 14.6 Monitoring Access Points
  - 14.7 Viewing General AP Information
  - 14.8 Viewing AP Health Indicators
  - 14.9 Health
    - 14.9.1 Health
      - 14.9.1.1 Understanding Cluster and AP Health Icons
      - 14.9.1.2 Customizing Health Status Thresholds
        
        14.9.1.2.1 Customizing AP Flagged Status Thresholds
      - 14.9.1.3 Using the Health Dashboard Map
      - 14.9.1.4 Configuring the Google Map API Key Behavior
  - 14.10 Viewing AP Performance
  - 14.11 Viewing AP Connection Failures
  - 14.12 AP Traffic Indicators
    - 14.12.1 Viewing AP Traffic Indicators
    - 14.12.2 Traffic Analysis
    - 14.12.3 Customizing Traffic Analysis
    - 14.12.4 Configuring Traffic Analysis Display for APs
    - 14.12.5 Configuring Traffic Analysis Display for Top Clients
    - 14.12.6 SmartCell Insight Report on Actual Traffic Rate for APs and Client
  - 14.13 Neighbor APs
    - 14.13.1 Viewing Neighbor APs in a Non-Mesh Zone
  - 14.14 Reports
    - 14.14.1 Rogue Devices
      - 14.14.1.1 Viewing Rogue Devices
      - 14.14.1.2 Marking Rogue Access Points
      - 14.14.1.3 Locating a Rogue Device
    - 14.14.2 Historical AP Client Stats
      - 14.14.2.1 Viewing AP Client Statistics
  - 14.15 External Syslog Server
    - 14.15.1 External Syslog Server
  - 14.16 Secure Boot
- 15 AP Clients
  - 15.1 Wireless
    - 15.1.1 Wireless Clients
    - 15.1.2 Traffic Analysis
      - 15.1.2.1 Configuring Traffic Analysis Display for Top Clients
      - 15.1.2.2 SmartCell Insight Report on Actual Traffic Rate for APs and Client
    - 15.1.3 Deauthorizing a Wireless Client
    - 15.1.4 Blocking a Wireless Client
    - 15.1.5 Unblocking a Wireless Client
    - 15.1.6 Disconnecting a Wireless Client
    - 15.1.7 Viewing a Summary of Wireless Clients
    - 15.1.8 Viewing Wireless Client Information
  - 15.2 Wired
    - 15.2.1 Wired Clients
    - 15.2.2 Deauthorizing a Wired Client
    - 15.2.3 Viewing a Summary of Wired Clients
- 16 AP Upgrade
  - 16.1 Uploading an AP Patch File
  - 16.2 Changing the AP Firmware Version of the Zone
- 17 Traffic Policies, Firewall and QoS
  - 17.1 Understanding Wi-Fi Calling
    - 17.1.1 Analyzing Wi-Fi Calling Statistics
    - 17.1.2 Creating a Wi-Fi Calling Profile
    - 17.1.3 Configuring Wi-Fi Calling in a WLAN
  - 17.2 URL Filtering
    - 17.2.1 Viewing a Summary of URL Filters
    - 17.2.2 Enabling URL Filtering on the WLAN
    - 17.2.3 Enabling URL Filtering on the Controller
    - 17.2.4 Managing URL Filtering Licenses
  - 17.3 Application Control
    - 17.3.1 Viewing an Application Control Summary
    - 17.3.2 Creating an Application Control Policy
    - 17.3.3 Application Signature Packages
    - 17.3.4 Creating a User-Defined Application
  - 17.4 Creating a Traffic Class Profile
  - 17.5 Managing a Firewall Profile
    - 17.5.1 Create an L3 Access Control Policy
      - 17.5.1.1 Create an L3 Access Control Policy Rule
    - 17.5.2 Creating an L2 Access Control Policy
      - 17.5.2.1 Creating an L2 Access Control Service
    - 17.5.3 Configuring Application Controls
      - 17.5.3.1 Viewing an Application Control Summary
      - 17.5.3.2 Creating an Application Control Policy
      - 17.5.3.3 Implementing an Application Control Policy
      - 17.5.3.4 Creating a User-Defined Application
      - 17.5.3.5 Application Signature Packages
    - 17.5.4 URL Filtering
      - 17.5.4.1 Viewing a Summary of URL Filters
      - 17.5.4.2 Enabling URL Filtering on the WLAN
      - 17.5.4.3 Enabling URL Filtering on the Controller
      - 17.5.4.4 Managing URL Filtering Licenses
    - 17.5.5 Creating a Device Policy
      - 17.5.5.1 Creating the Device Policy Rules
      - 17.5.5.2 Summary
  - 17.6 Configuring Traffic Analysis Display for WLANs
    - 17.6.1 Bonjour
      - 17.6.1.1 Bonjour Gateway
        
        17.6.1.1.1 Creating Bonjour Gateway Policies
        
        17.6.1.1.2 Applying a Bonjour Gateway Policy to an Individual AP
      - 17.6.1.2 Bonjour Fencing
        
        17.6.1.2.1 Creating Bonjour Fencing Policies
    - 17.6.2 Quality of Service (QoS)
      - 17.6.2.1 RUCKUS SmartCast™
      - 17.6.2.2 Quality of Service (QoS) Mapping
      - 17.6.2.3 QoS Mirroring
- 18 WLAN Management
  - 18.1 Domains, Zones, WLAN Groups, and WLANs
  - 18.2 Viewing Modes
  - 18.3 Creating a WLAN Domain for an MSP
  - 18.4 Managing WLANs
    - 18.4.1 Moving a WLAN to a different WLAN Zone
    - 18.4.2 WLAN Groups
      - 18.4.2.1 Creating a WLAN Group
  - 18.5 Configuring WLAN
    - 18.5.1 Creating a WLAN Configuration
    - 18.5.2 Portal-Based WLANs
      - 18.5.2.1 Bypassing Apple CNA
    - 18.5.3 WLAN Types
      - 18.5.3.1 External DPSK without having a proxy RADIUS
      - 18.5.3.2 Creating a User Role with Active Directory Authentication
    - 18.5.4 Encryption Options
      - 18.5.4.1 WPA3 R3 Support
  - 18.6 Wireless Services
    - 18.6.1 Configuring Traffic Analysis Display for WLANs
    - 18.6.2 Optimized Connectivity Experience
    - 18.6.3 Transient Client Management
    - 18.6.4 Multicast Rate Filter
    - 18.6.5 Mobility Domain ID
    - 18.6.6 Band Balancing
    - 18.6.7 Load Balancing
    - 18.6.8 Airtime Decongestion
    - 18.6.9 Client Admission Control
    - 18.6.10 Working with Time Schedule Profiles
    - 18.6.11 Wi-Fi 6 or Wi-Fi 7 Support
    - 18.6.12 Virtual LAN
      - 18.6.12.1 How Dynamic VLAN Works
        
        18.6.12.1.1 How It Works
      - 18.6.12.2 Required RADIUS Attributes
      - 18.6.12.3 How It Works
      - 18.6.12.4 VLAN Pooling
        
        18.6.12.4.1 Creating a VLAN Pooling Profile
      - 18.6.12.5 VLAN Precedence
        
        18.6.12.5.1 VLAN Precedence
      - 18.6.12.6 VLAN Name
        
        18.6.12.6.1 Creating VLAN Name Profile
  - 18.7 Working with WLAN Templates
    - 18.7.1 Creating WLAN Templates
    - 18.7.2 Applying a WLAN Template
- 19 Switch Management
  - 19.1 Supported ICX Models
    - 19.1.1 Overview of ICX Switch Management
      - 19.1.1.1 Supported ICX Firmware and Models
      - 19.1.1.2 ICX Release Compatibility Matrix
      - 19.1.1.3 Switch Management Feature Compatibility Matrix
  - 19.2 ICX Switch Behavior with SmartZone
  - 19.3 Connecting the ICX to the SmartZone Controller
  - 19.4 Approving and Registering switches
    - 19.4.1 Creating Switch Registration Rules
    - 19.4.2 ICX Pre-Provisioning into SmartZone
      - 19.4.2.1 Pre-Provisioning Switches in the Controller
    - 19.4.3 Approving Switches
    - 19.4.4 Moving the Switches between Groups
    - 19.4.5 Deleting Switches
    - 19.4.6 Switching Over Clusters
    - 19.4.7 Rehoming Switches
  - 19.5 ICX to SmartZone Connection Status
    - 19.5.1 Displaying the SmartZone Connection Status
    - 19.5.2 Disconnecting the ICX Switch from SmartZone
    - 19.5.3 Disabling SmartZone Management on the ICX Switch
  - 19.6 Working with Switches
    - 19.6.1 Viewing Switch Information
      - 19.6.1.1 SmartZone Switch Management
    - 19.6.2 Using Controller Settings to Manage Switch Groups
      - 19.6.2.1 Creating Switch Groups
      - 19.6.2.2 Switch Level Configuration
        
        19.6.2.2.1 Creating Switch Level Configuration
        
        19.6.2.2.2 Copying Configuration
    - 19.6.3 Configuring the Switch
      - 19.6.3.1 Configuring Switch AAA Servers
      - 19.6.3.2 Configuring Switch AAA Server Settings
      - 19.6.3.3 Accessing AAA Settings for Switch Configuration
      - 19.6.3.4 Generic CLI Configuration
      - 19.6.3.5 Copy Config as Template
        
        19.6.3.5.1 Creating a CLI Template from an Existing Switch Backup Configuration
      - 19.6.3.6 Zero Touch Provisioning using Group level Configuration
        
        19.6.3.6.1 Creating a Common Configuration
        
        19.6.3.6.2 Creating Switch Model-Based Configurations
        
        19.6.3.6.3 Copying Switch Group Configuration
        
        19.6.3.6.4 Initiated By
        
        19.6.3.6.4.1 Viewing the Configuration History of Switches
      - 19.6.3.7 Port Settings
        
        19.6.3.7.1 Creating and Managing Port Templates
        
        19.6.3.7.2 Configuring Port Settings for a Switch
        
        19.6.3.7.3 Editing Ports Across Multiple Switches
      - 19.6.3.8 Creating Routing Configurations
      - 19.6.3.9 Managing Link Aggregation Groups (LAGs)
      - 19.6.3.10 Creating a Switch Stack
      - 19.6.3.11 Ability to Convert Standalone Switch to Stack
      - 19.6.3.12 Viewing Port Details
    - 19.6.4 BGP EVPN
      - 19.6.4.1 BGP EVPN Multihoming Overview
      - 19.6.4.2 BGP EVPN Multihoming (Dual Homing) Network Topology
      - 19.6.4.3 Creating a BGP EVPN Route Reflector Profile
      - 19.6.4.4 Creating a BGP EVPN Full Mesh Profile
      - 19.6.4.5 Managing BGP EVPN Profiles
      - 19.6.4.6 Monitoring ICX Fabric Information
    - 19.6.5 Accessing the Switch CLI through Controller (Remote CLI)
    - 19.6.6 Backing up and Restoring Switch Configuration
      - 19.6.6.1 Creating Config Backup for Switch Group
      - 19.6.6.2 Viewing Configuration Alerts
    - 19.6.7 Data Synching on the Switch Table
  - 19.7 Firmware Upgrade
    - 19.7.1 Uploading the Switch Firmware to the Controller
    - 19.7.2 Configuring the Group Firmware Settings
    - 19.7.3 Scheduling a Firmware Upgrade for Switch Group
    - 19.7.4 Scheduling a Firmware Upgrade for Selected Switches
    - 19.7.5 Deleting the Firmware Upgrade Schedules
  - 19.8 Monitoring Switch Status
    - 19.8.1 Viewing Switch Health
    - 19.8.2 Viewing Alarms
    - 19.8.3 Viewing the Events
    - 19.8.4 Viewing LLDP Neighbor Information
    - 19.8.5 Viewing Traffic Trends in the Switch
    - 19.8.6 Viewing Firmware History of the Switch
    - 19.8.7 Viewing PoE Utilization and Health Status of the Switch
    - 19.8.8 Viewing Switches on the Dashboard
    - 19.8.9 Improving Switch Configuration Change Management
  - 19.9 Switch Clients
    - 19.9.1 Switch Clients