Skip to content

Ruckus Virtual SmartZone

Compatibility

Social WiFi has been tested and is proven to work on the following configurations:

Controller versions:

  • 5.x
  • 6.x

Accessing the device’s administration panel

Configuration through GUI: open any web browser and type the controller’s IP address in the address bar.

  • login: login to the account with root permissions
  • password: the password to the above account

Device configuration

Configuring Wireless LANs Group:

In the panel go to the following directory: Network->Wireless LANs->Create

Remember to pick "WG default" in the menu on the left.

In the pop-up window enter the following:

NameYour network name
SSIDYour network name
WLAN Groupdefault
Authentication TypeHotspot (WISPr)
Authentication MethodOpen

image_804806.png

Now, in the “Hotspot (WISPr) Portal” field create a new profile by clicking ”+

Portal Namesocialwifi
Logon URLExternal
Redirect unauthenticated userPrimary: https://login.socialwifi.com/, Secondary: empty
Redirected MAC FormatAA:BB:CC:DD:EE:FF
Start Pageredirect to the following URL:https://login.socialwifi.com/redirect/
Session Timeout1440
Grace Period60

image_375784.png

The, scroll down and add Walled Garden/Traffic Class Profile configuration:

image_222467.png

You can either add the domains manually or import the CSV file which is linked below:

Ruckus_vSZ_walled_garden_entries.csv

*.socialwifi.com
sw-login.com
www.facebook.com
connect.facebook.net
www.googletagmanager.com
www.googleadservices.com
googleads.g.doubleclick.net
*.youtube.com
*.ytimg.com
*.googlevideo.com
yt3.ggpht.com
facebook.com
*.facebook.com
*.fbcdn.net
linkedin.com
*.linkedin.com
*.licdn.com
twitter.com
api.twitter.com
x.com
api.x.com
*.twimg.com

After setting up “socialwifi” hotspot, please click ”+” and add Authentication Server profile: “

image_543627.png

In the pop-up window enter the following:

Nameswauth
TypeRADIUS
IP Address35.205.62.147
Port31812
Share SecretRadius Secret available in Access Points tab of the Social WiFi Panel
Confirm SecretCopy above

When finished, press OK.

image_674829.png

Then, add an “Accounting Server” by clicking ”+

image_572067.png

In the pop-up window enter the following:

Nameswaccount
TypeRADIUS Accounting
IP Address35.205.62.147
Port31813
Shared SecretRadius Secret available in Access Points tab of the Social WiFi Panel
Confirm SecretCopy above

When finished, press OK.

image_343697.png

After completing the configuration, your “Hotspot Portal” should look like this:

image_858562.png

Now, save the changes and go to: Network->Access Points

image_982302.png

Enter the Access Point configuration panel following the marks. Set up your AP Name and go to the: Band/Spectrum Configuration. Then turn the “WLAN Group” on and choose the “default” profile.

image_959093.png

image_420120.png

Disabling MAC address encryption

By default, MAC address encryption is enabled on Ruckus SZ devices and will cause Social WiFi to malfunction. In order to disable it, you will need to access your controller CLI via SSH, enable privileged commands, enter config mode, then execute the command “no encrypt-mac-ip”:\

Example:

ruckus> enable
ruckus# config
ruckus(config)# no encrypt-mac-ip

image_807917.png

Adding the device to Social WiFi platform

In order to add the device to Social WiFi platform:

  • In the Network → Access Points menu, click the AP that you want to add to Social WiFi platform, copy their MAC addresses from AP MAC address field and BSSID column.
  • Go to the Social WiFi Panel.
  • Choose the place to which you would like to add the device.
  • In the “Access Points” tab, press “Add” (upper right corner), paste the MAC address you copied into the form (adding a name is optional) and click “Create”.

Troubleshooting

Symptom: after connecting to the WiFi network, there’s no popup with the login page and internet does not work.

Solution: it might be the case that you have a firewall that blocks traffic between the WiFi device and the controller. You might either have explicit blocking rules on the firewall, or simply have separate VLANs for the guests and the controller and the traffic between them might be blocked as well. In this case you have to unlock specific ports. For example:

  • 8090 TCP
  • 8099 TCP
  • 9997 TCP
  • 9998 TCP

More details on firewall configuration are available under this link: https://support.ruckuswireless.com/documents/1335-smartzone-firewall-ports-configuration-guide/download