RUCKUS SmartZone (LT-GA) Network Management Guide, 7.1.1

This guide is written for service operators and system administrators who are responsible for managing, configuring, and troubleshooting Ruckus devices. Consequently, it assumes a basic working knowledge of local area networks, wireless networking, and wireless devices. This guide supports all platforms of the controller. It is recommended to view the New In This Document section for a high-level overview.

Preface
- 3 Contact Information, Resources, and Conventions
  - 3.1 Contacting RUCKUS Customer Services and Support
  - 3.2 Document Feedback
  - 3.3 RUCKUS Product Documentation Resources
  - 3.4 Online Training Resources
  - 3.5 Document Conventions
  - 3.6 Command Syntax Conventions
- 4 About This Guide
- 5 New In This Document
- 6 SmartZone Network Hierarchy
  - 6.1 SmartZone Domains
    - 6.1.1 Partner Domains
  - 6.2 AP Zones
    - 6.2.1 AP Groups
  - 6.3 WLAN Groups
  - 6.4 Switch Groups
- 7 WLAN Management
  - 7.1 Domains, Zones, WLAN Groups, and WLANs
  - 7.2 Viewing Modes
  - 7.3 Creating a WLAN Domain for an MSP
  - 7.4 Monitoring WLANs
    - 7.4.1 Moving WLANs from a Zone to a different Zone or Domain
    - 7.4.2 WLAN Groups
      - 7.4.2.1 Creating a WLAN Group
  - 7.5 Configuring WLAN
    - 7.5.1 Creating a WLAN Configuration
    - 7.5.2 WLAN General Options
    - 7.5.3 WLAN Authentication Options
      - 7.5.3.1 WLAN Authentication Type
      - 7.5.3.2 WLAN Authentication Method
    - 7.5.4 WLAN Encryption Options
    - 7.5.5 WLAN Data Plane Options
    - 7.5.6 Accounting Services
    - 7.5.7 Wireless Client Isolation
    - 7.5.8 RADIUS Options
    - 7.5.9 Firewall Options
    - 7.5.10 Advanced Options
  - 7.6 Wireless Services
    - 7.6.1 AMB (Multi-Band Operation)
    - 7.6.2 Airtime Decongestion
    - 7.6.3 Optimized Connectivity Experience
    - 7.6.4 Transient Client Management
    - 7.6.5 Virtual LANs
    - 7.6.6 Wi-Fi 6 or Wi-Fi 7 Support
  - 7.7 Working with WLAN Templates
    - 7.7.1 Creating WLAN Templates
    - 7.7.2 Applying a WLAN Template
- 8 Traffic Management
  - 8.1 Bonjour
    - 8.1.1 Bonjour Gateway
      - 8.1.1.1 Creating Bonjour Gateway Policies
      - 8.1.1.2 Applying a Bonjour Gateway Policy to an Individual AP
    - 8.1.2 Bonjour Fencing
      - 8.1.2.1 Creating Bonjour Fencing Policies
  - 8.2 Directed Multicast
  - 8.3 Multicast Filter
  - 8.4 Multicast Rate Limiting
  - 8.5 Quality of Service (QoS)
    - 8.5.1 Applying QoS Settings to Application Policies
    - 8.5.2 Applying QoS Mapping to Wireless Traffic
    - 8.5.3 QoS Mirroring
    - 8.5.4 RUCKUS Unilateral Mirroring
    - 8.5.5 RUCKUS SmartCast™
  - 8.6 Traffic Class
    - 8.6.1 Traffic Class Profiles
    - 8.6.2 Creating a Traffic Class Profile
    - 8.6.3 User Traffic Profiles
    - 8.6.4 Creating a User Traffic Profile
  - 8.7 Wi-Fi Calling
    - 8.7.1 Creating a Wi-Fi Calling Profile
    - 8.7.2 Configuring Wi-Fi Calling in a WLAN
    - 8.7.3 Analyzing Wi-Fi Calling Statistics
- 9 Access and Security
  - 9.1 Access Control
    - 9.1.1 Application Control
      - 9.1.1.1 Viewing an Application Control Summary
      - 9.1.1.2 Creating an Application Control Policy
      - 9.1.1.3 Implementing an Application Control Policy
      - 9.1.1.4 Application Signature Packages
      - 9.1.1.5 Creating a User-Defined Application
    - 9.1.2 Firewall Profile
      - 9.1.2.1 Managing a Firewall Profile
    - 9.1.3 L3 Access Control
      - 9.1.3.1 Create an L3 Access Control Policy
        
        9.1.3.1.1 Creating an L3 Access Control Policy Rule
    - 9.1.4 L2 Access Control
    - 9.1.5 Creating an L2 Access Control Service
    - 9.1.6 URL Filtering
      - 9.1.6.1 Viewing a Summary of URL Filters
      - 9.1.6.2 Enabling URL Filtering on the WLAN
      - 9.1.6.3 Enabling URL Filtering on the Controller
      - 9.1.6.4 Managing URL Filtering Licenses
    - 9.1.7 Device Policy
      - 9.1.7.1 Creating a Device Policy
        
        9.1.7.1.1 Creating the Device Policy Rules
        
        9.1.7.1.2 Summary
      - 9.1.7.2 Configuring Application Controls
    - 9.1.8 Users and Roles
      - 9.1.8.1 User Roles
      - 9.1.8.2 Local Users
      - 9.1.8.3 Subscription Package
      - 9.1.8.4 Limitations of Applying Role Policies to Users
      - 9.1.8.5 802.1X Authentication
        
        9.1.8.5.1 Creating a User Role with 802.1x Authentication
        
        9.1.8.5.2 Creating a User Role with Active Directory Authentication
    - 9.1.9 Guests
      - 9.1.9.1 Working with Guest Passes
      - 9.1.9.2 Guest Pass
        
        9.1.9.2.1 SmartZone Guest Pass Self Registration
        
        9.1.9.2.2 Admin Generated Guest Passes
        
        9.1.9.2.2.1 Step 1: Create a Guest Access Service
        
        9.1.9.2.2.2 Step 2: Create a Guest Access WLAN
        
        9.1.9.2.2.3 Step 3: Generate a Guest Pass
        
        9.1.9.2.2.4 Step 4: Send Guest Passes to Guest Users
        
        9.1.9.2.2.5 Generating Guest Passes from an Imported CSV
      - 9.1.9.3 Guest Pass Template
        
        9.1.9.3.1 Creating a Guest Instruction HTML Template
        
        9.1.9.3.2 Creating a Guest Instruction SMS Template
    - 9.1.10 Dynamic PSK
      - 9.1.10.1 Generating Dynamic PSKs
      - 9.1.10.2 Importing Dynamic PSKs
      - 9.1.10.3 Viewing Dynamic PSKs
    - 9.1.11 Blocked Clients
      - 9.1.11.1 Creating Blocked Client
      - 9.1.11.2 Creating a Client Isolation Whitelist
      - 9.1.11.3 Creating a Time Based Access Table
    - 9.1.12 Time Based Access
    - 9.1.13 Wireless Intrusion Detection and Prevention Services (WIDS/WIPS)
      - 9.1.13.1 Wireless Intrusion Detection and Prevention System
      - 9.1.13.2 Configuring a Rogue Classification Policy
  - 9.2 Working with Hotspots and Portals
    - 9.2.1 Creating a Guest Access Portal
    - 9.2.2 Working with Hotspot (WISPr) Services
      - 9.2.2.1 Creating a Hotspot (WISPr) Portal
    - 9.2.3 Working with Hotspot 2.0 Services
      - 9.2.3.1 Creating a Hotspot 2.0 WiFi Operator Profile
      - 9.2.3.2 Creating a Hotspot 2.0 Identity Provider
      - 9.2.3.3 Creating a Hotspot 2.0 WLAN Profile
      - 9.2.3.4 Creating a Hotspot 2.0 Venue Profile
    - 9.2.4 Creating a Web Authentication Portal
    - 9.2.5 Creating a UA Blacklist Profile
    - 9.2.6 Creating a Portal Detection and Suppression Profile
    - 9.2.7 Creating a WeChat Portal
    - 9.2.8 Creating Network Segmentation Profile on the vSZ Controller
    - 9.2.9 Ethernet Profiles
  - 9.3 Authentication, Authorization, and Accounting (AAA)
    - 9.3.1 Authentication
      - 9.3.1.1 Authentication Support Matrix
      - 9.3.1.2 Creating Proxy Authentication AAA Servers
        
        9.3.1.2.1 Tunnel Support for URL Redirection
        
        9.3.1.2.1.1 Configuring URL Redirection
        
        9.3.1.2.2 RADIUS Service Options
        
        9.3.1.2.3 Testing AAA Servers
      - 9.3.1.3 Enabling ECDSA Certificates Support for RADIUS with Transport Layer Security (TLS)
      - 9.3.1.4 Vendor-Specific Attribute (VSA) Profile
      - 9.3.1.5 Creating a Vendor-Specific Attribute Profile
      - 9.3.1.6 Associating a VSA Profile to a WLAN Configuration
      - 9.3.1.7 Viewing RADIUS Proxy Settings
      - 9.3.1.8 Creating Non-Proxy Authentication AAA Server
      - 9.3.1.9 Non-Proxy (Social Login)
      - 9.3.1.10 Creating Social Media Login Profile
      - 9.3.1.11 Creating Realm Based Authentication Profile
      - 9.3.1.12 Fast Initial Link Setup (FILS)
      - 9.3.1.13 Create Fast Initial Link Setup (FILS) Realm Profile
    - 9.3.2 Authorization
    - 9.3.3 Accounting
      - 9.3.3.1 Creating Non-Proxy Accounting AAA Servers
      - 9.3.3.2 Creating Proxy Accounting AAA Servers
    - 9.3.4 Creating Realm Based Proxy
  - 9.4 AP Security
    - 9.4.1 Restricted Access Overview
      - 9.4.1.1 Creating a Restricted AP Access Profile
      - 9.4.1.2 Configuring a Restricted Access via Access Point
      - 9.4.1.3 Configuring a Restricted Access via Templates
      - 9.4.1.4 Enabling Restricted AP Access Profile